One Health Collective CIC (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us, engage with our services, or interact with us online. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

​

1. Who we are

​

One Health Collective CIC is a Community Interest Company based in the United Kingdom, working to build resilience across animal, human and environmental health through research, education, wellbeing support and community action. For data protection purposes, One Health Collective CIC is the data controller of the personal data you provide to us.

​

2. What personal data we collect

​

We may collect and process the following categories of personal data:

​

Information you provide directly:

​

• Name

• Email address

• Telephone number

• Postal address

• Organisation or employer details

• Messages or enquiries you send to us

• Information submitted through forms, registrations, surveys or applications

​

Information collected automatically

​

When you use our website, we may automatically collect:

• IP address

• Browser type and version

• Device type

• Pages visited and time spent on pages

• Referring website addresses

• Cookies and analytics data

​

Special category data

​

In limited circumstances (for example where you access wellbeing support services), we may collect sensitive personal data such as health or wellbeing information. We will only do this where lawful and necessary, with appropriate safeguards.

​

3. How we use your personal data

​

We may use your data to:

• Respond to enquiries and communicate with you

• Provide services, events, training or support programmes

• Manage memberships, volunteers or partnerships

• Send newsletters or updates (where you have consented)

• Improve our website, services and user experience

• Conduct research, monitoring and evaluation

• Meet legal, regulatory or safeguarding obligations

• Prevent fraud or misuse of our systems

​

4. Lawful bases for processing

​

Under UK GDPR, we rely on one or more of the following lawful bases:

• Consent – where you have given permission

• Contract – where processing is necessary to provide services to you

• Legitimate interests – to run and improve our organisation and services

• Legal obligation – where required by law

• Vital interests – to protect someone’s safety

• Substantial public interest – where applicable for special category data

​

5. How we share your data

​

We do not sell your personal data.

We may share data where necessary with:

• Trusted service providers (e.g. website hosts, IT support, email systems)

• Professional advisers (e.g. accountants, legal advisers)

• Regulators or authorities where legally required

• Funding bodies where reporting obligations apply (normally anonymised or aggregated where possible)

• Partner organisations delivering joint programmes (with appropriate safeguards)

 

All third parties are required to respect the security of your personal data.

​

6. International transfers

​

Where we work with international partners or use service providers outside the UK, personal data may be transferred internationally. Where this happens, we will ensure appropriate safeguards are in place in line with UK GDPR requirements.

​

7. Data retention

​

We only keep personal data for as long as necessary for the purposes collected, including legal, accounting, safeguarding and reporting requirements. Retention periods vary depending on the nature of the data and the purpose for which it was collected.

​

8. Your rights

​

Under data protection law, you may have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion of your data

• Restrict processing

• Object to processing

• Withdraw consent at any time (where consent is relied upon)

• Request transfer of your data in some circumstances

• Lodge a complaint with the Information Commissioner's Office

 

For more information, visit the ICO website.

​

9. Cookies

​

Our website may use cookies and similar technologies to improve functionality and understand website usage. You can control cookies through your browser settings. A separate Cookie Policy may also be provided.

​

10. Security

​

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, misuse, loss or disclosure. However, no online transmission or storage system can be guaranteed completely secure.

​

11. Children’s data

​

Our website and services are generally intended for adults unless specifically stated otherwise. Where we engage with children or young people, additional safeguards and consent processes will apply.

​

12. Changes to this policy

​

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.