Privacy Policy

---

Last updated: May 25

The Human First Project ("we", "us", "our") is committed to protecting your personal information and respecting your privacy. This policy explains how we collect, use, store, and protect your data, and your rights under the UK GDPR and the Data Protection Act 2018.

We may collect and process the following types of personal data:

• Name
   
• Email address
   
• Phone number (if provided)
   
• Organisation name (if applicable)
   
• Message contents from contact forms
   
• IP address and browser data (via website analytics)
   

We do not knowingly collect any special category data unless explicitly required and with your consent.

We collect personal data when you:

• Contact us via our website form
   
• Subscribe to our mailing list
   
• Interact with our content (e.g. workshops, events, or downloads)
   
• Use our website (via cookies/analytics)
   

We use your data to:

• Respond to enquiries or messages you send us
   
• Send occasional updates or newsletters (if you’ve opted in)
   
• Improve our services and website performance (via analytics)
   

We do not sell, rent, or trade your data with third parties.

We rely on the following lawful bases for processing your data:

• Consent – for marketing and newsletters
   
• Legitimate interests – for responding to enquiries and improving services
   
• Contract – where processing is necessary to provide a service you’ve requested
   

We keep your personal data only as long as necessary for the purposes outlined in this policy. You can request deletion at any time.

We may share your data with trusted service providers (e.g. website hosts, email platforms) under appropriate data processing agreements. Your data is never sold or used for external advertising.

All third-party services comply with UK GDPR standards or equivalent data protection frameworks.

If any personal data is transferred outside the UK (e.g. via cloud services), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or use of providers certified under frameworks like UK-US Data Bridge (where applicable).

Under the UK GDPR, you have the right to:

• Access the data we hold about you
   
• Request correction of incorrect or outdated data
   
• Request deletion of your data ("right to be forgotten")
   
• Object to or restrict processing
   
• Withdraw consent at any time (for marketing)
   

To exercise any of these rights, email us at: dave@thehumanfirstproject.co.uk

Our website may use cookies for basic functionality and analytics. You will be notified upon first visit and can adjust your preferences.

If you have any questions about this privacy policy or how we use your data, please contact:
Email: [Insert email address]
Address (optional): [Insert business address, if applicable]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/