Privacy Policy
Last Updated: 13 October 2026
1. About Agency Within CIC
Agency Within CIC is a community interest company registered in the UK. Agency Within provides education and resources to women through workshops, community activities, and learning opportunities that promote development of personal agency, resilience, and critical thinking skills.
Agency Within CIC is responsible for deciding how and why personal information is processed.
Registered Name: Agency Within CIC
Company Number: 17507466
Privacy Enquiries: [email protected]
2. Personal Information We Collect
We may collect personal information when you use our website, contact us, register for an event, or express an interest in volunteering.
This may include:
• Contact and enquiry information: your name, email address, telephone number, and the contents of messages submitted through our website contact form
• Workshop and event information: your name, contact details, registration information, attendance, and any information you provide that is necessary to organise and complete the activity
• Volunteer information: details relevant to your application, experience, references, and suitability for a volunteer role
• Technical information: information such as IP address, browser type, and website usage data, where collected through website hosting, security systems, or cookies
We only collect information reasonably necessary for relevant purposes.
Please avoid including sensitive personal information in general website enquiries.
3. How We Use Your Information
We may use your information to respond to enquiries and requests for information, process workshop and event registrations and communicate relevant arrangements, administer volunteer applications and volunteering activities, manage safeguarding concerns, complaints, and incidents where necessary, maintain website security and functionality, meet legal, regulatory, and governance obligations, and / or understand website usage to improve our services where appropriate and in accordance with applicable requirements.
We will never use personal information for unrelated purposes without an appropriate lawful basis.
4. Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the purpose, we may rely on legitimate interests for handling routine enquires, administering our activities and maintaining website security, where our interests do not override your rights and freedoms. We may rely on consent where you have agreed to a specific use of your information and consent is the appropriate lawful basis. We may rely on contract or steps before entering a contract where processing is necessary to fulfill an agreement or take steps you have requested before entering one. We may rely on legal obligation where processing is necessary to comply with the law. We may rely on vital interests where necessary to protect someone's life in circumstances permitted by law.
The lawful basis will depend on the specific processing activity. We will determine the appropriate basis for each purpose.
5. Website Contact Forms
If you contact us through our website, we will use the information you provide to respond to your enquiry and take any relevant follow-up action.
Please do not submit confidential or sensitive information unless it is necessary and we have provided an appropriate means of collecting it.
Your enquiry may be processed through our website platform or associated service providers.
6. Workshop and Event Registrations
When you register for a workshop or event, we will use your information to administer your registration, communicate relevant details and manage attendance. We may share necessary information with event facilitators, venues, or delivery partners where required to organise the activity.
If an activity requires additional information, such as accessibility arrangements, we will explain why it is needed and establish the appropriate lawful basis and any additional conditions required for processing sensitive information.
Any payment information will be handled according to the arrangements used for the relevant event. We will identify any payment provider involved where applicable.
7. Sharing Personal Information
We may share personal information with service providers where necessary to operate our website, manage registrations, respond to enquiries or deliver our activities.
Depending on the services used, these providers may include website hosting, technical support, event management or payment processing providers.
We may also share information with public authorities or emergency services where required or permitted by law, including where necessary to address a safeguarding concern or protect someone from serious harm.
We never sell personal information.
We will limit information sharing to what is necessary for the relevant purpose and establish appropriate data protection arrangements with service providers where required.
8. Cookies and Website Technology
Our website uses a cookie banner or consent tool to manage cookie preferences.
Cookies and similar technologies may be used to support website functionality, remember preferences, maintain security or understand website usage. The specific technologies in use will depend on the website's configuration.
Where consent is legally required, non-essential cookies and similar technologies will only be used after valid consent has been obtained. You should be able to change or withdraw your preferences through the available cookie settings.
We will provide further information about the cookies in use, their purposes and relevant third parties once the website's cookie configuration has been confirmed.
9. How Long We Keep Information
We retain personal information only for as long as necessary for the purpose for which it was collected, taking account of legal, regulatory, safeguarding and governance requirements.
Retention periods will vary according to the type of information. We will establish appropriate retention periods for website enquiries, event registrations, volunteer records and any safeguarding or incident records.
When information is no longer required, we will securely delete or anonymise it, unless we have a lawful reason to retain it for longer.
10. How We Protect Your Information
We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access or disclosure.
Access to personal information is limited to those who need it for their responsibilities. We also take appropriate steps to assess the data protection arrangements of service providers handling information on our behalf.
No method of electronic transmission or storage can be guaranteed to be completely secure.
11. Your Data Protection Rights
Depending on the circumstances and applicable law, you may have the right to:
• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your information where the legal conditions are met.
• Request restriction of certain processing.
• Object to processing based on legitimate interests.
• Object to direct marketing.
• Request the transfer of certain information where the right to data portability applies.
• Withdraw consent where processing is based on consent.
To exercise your rights, contact us using the details in Section 1. We may need to verify your identity before responding.
12. Complaints
If you have concerns about how we handle your personal information, please contact us first so we can investigate under our internal company procedures.
You also have the right to complain to the Information Commissioner's Office (ICO) through https://ico.org.uk/make-a-complaint/
13. External Websites
Our website may contain links to external websites or services. These operate under their own privacy policies. We recommend reviewing those policies before providing personal information.
14. Changes to This Policy
We may update this policy when our activities, website systems, or legal obligations change. The latest version will be published on this website with the updated date.
15. Contact
For questions about this policy or how Agency Within CIC handles personal information, please contact [email protected].
