PRIVACY POLICY

Rainbow Foundation
Website: www.rainbowfndn.org.uk
Last updated: July 2026

INTRODUCTION

The Rainbow Foundation is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, use our services, make a referral, apply for employment, volunteer with us, or otherwise engage with our organisation.

We are committed to handling personal information in accordance with applicable UK data protection legislation.

WHO WE ARE

Rainbow Foundation is a health and wellbeing charity providing support, care and wellbeing services to individuals, families and communities.

For the purposes of data protection legislation, the Rainbow Foundation is the data controller for the personal information collected through this website and our services.

Contact details
Rainbow Foundation
Website: www.rainbowfndn.org.uk
Email: info@rainbowfndn.org.uk

INFORMATION WE COLLECT

We may collect and process the following information:

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page together with the revised update date.


Information you may provide to us (dependent on service):

  • Name
  • Postal address
  • Email address
  • Telephone number
  • Information contained in enquiries and correspondence
  • Information provided through contact forms
  • Referral information
  • Employment and recruitment information
  • Volunteer application information
  • Feedback, survey responses and complaints
Information collected automatically

When you visit our website, we may collect:
  • IP address
  • Browser type and version
  • Device information
  • Pages visited
  • Date and time of visits
  • Website usage data collected through cookies and analytics tools

SPECIAL CATEGORY INFORMATION

Depending on the nature of the support or services provided, we may collect information relating to:
  • Health and wellbeing
  • Disability
  • Equality, diversity and inclusion monitoring information
  • Other sensitive personal information relevant to the support being provided
We only collect this information where necessary, lawful and appropriate, and where suitable safeguards are in place.

HOW WE USE YOUR INFORMATION

We may use your personal information to:
  • Respond to enquiries and requests
  • Deliver services and support
  • Process referrals
  • Manage safeguarding responsibilities
  • Recruit employees and volunteers
  • Improve our website and services
  • Monitor service quality and outcomes
  • Meet legal and regulatory obligations
  • Manage donations and fundraising activities
  • Send service-related communications
Where required by law, we will obtain your consent before using your information for marketing communications.

LAWFUL BASIS FOR PROCESSING

We process personal information on one or more of the following legal bases:
  • Consent
  • Performance of a contract
  • Compliance with legal obligations
  • Protection of vital interests
  • Performance of a task carried out in the public interest
  • Legitimate interests pursued by the Rainbow Foundation
Where we process special category data, we will rely on an appropriate additional condition under UK data protection law.

SHARING YOUR INFORMATION

We will only share personal information where necessary and appropriate.

This may include:

  • Healthcare professionals
  • Local authorities
  • Regulatory bodies
  • Funding organisations
  • Professional advisers
  • IT and website service providers
  • Recruitment providers
  • Safeguarding agencies where required
We do not sell personal information to third parties.

DATA SECURITY

We take appropriate technical and organisational measure to protect personal information from:

  • Unauthorised access
  • Loss
  • Misuse
  • Disclosure
  • Alteration
  • Destruction
Access to personal information is restricted to staff, volunteers and authorised individuals who require it to carry out their duties.

RETENTION OF INFORMATION

We retain personal information only for as long as necessary to:
  • Deliver services
  • Meet legal and regulatory requirements
  • Resolve disputes
  • Maintain appropriate records
Retention periods vary depending on the type of information and the purpose for which it was collected.

YOUR RIGHTS

Under UK data protection law, you may have the right to:
  • Access your personal information
  • Request correction of inaccurate information
  • Request deletion of information where appropriate
  • Restrict processing
  • Object to processing
  • Request transfer of your information
  • Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the details provided below. Please note that the decision to do so may impact our ability to deliver our services.

COOKIES

Our website may use cookies and similar technologies to improve user experience, understand website usage and ensure the site functions correctly.

Where non-essential cookies are used, users will be given the opportunity to accept or reject them through our cookie consent mechanism.
Further information can be found in our separate Cookies Policy.

THIRD-PARTY WEBSITES

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites and encourage users to review their privacy policies.

COMPLAINTS

If you are concerned about how we handle your personal information, please contact us first so we can address your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office

Website: https://www.ico.org.uk
Telephone: 0303 123 1113

CONTACT US

If you have any questions about this Privacy Policy or how the Rainbow Foundation handles personal information, please contact:

Rainbow Foundation

Website: www.rainbowfndn.org.uk
Email: info@rainbowfndn.org.uk

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be published on this page together with the revised update date.