Privacy Policy

Cyrus & Esther CIC is the data controller responsible for your personal data.

• Cyrus & Esther CIC
• Company number: 17377832 (registered in England and Wales)
• Registered office: London, UK
• Email: [email protected]
• Phone: +44 7821 377239

Cyrus & Esther CIC is registered as a Community Interest Company with Companies House. Registration as a Charitable Incorporated Organisation (CIO) is in progress at the time of writing; this policy will be updated once that registration is confirmed.

This policy applies to personal data collected through:

• our website, including the contact form
• email or phone correspondence with us
• any volunteering, partnership or event enquiries you make
• any other direct interaction you have with us

It does not apply to third-party websites or services we may link to. You should read their privacy policies separately.

We collect only what is necessary to respond to you and run the organisation. Depending on how you interact with us, this may include:

• Identity data: your name
• Contact data: email address and, if you choose to provide it, phone number
• Enquiry data: the subject and content of your message, including anything you tell us about volunteering, partnership, press or general enquiries
• Technical data: standard web server logs (such as IP address, browser type and pages visited), which our hosting provider generates automatically

We do not currently operate a donation or payment system, hold user accounts, or use analytics or marketing cookies. This policy will be updated, and a cookie banner introduced where required, before any of that changes. See our Cookie Policy for the current position on cookies.

Our website's contact form does not submit your details to a server or database we control. When you submit it, it opens your own email application with a pre-filled message addressed to us; the message is then sent from your own email account, in the same way as if you had emailed us directly.

We otherwise collect personal data when you contact us directly by email or phone, or when you sign up for updates once that feature is available.

We use your personal data to:

• respond to enquiries, including about volunteering, partnership, press and general questions
• administer the organisation and keep appropriate records of correspondence
• comply with our legal, charitable and regulatory obligations
• keep you updated where you have asked us to, once such a service is available

We do not use your data for automated decision-making or profiling.

Under UK data protection law, we rely on one or more of the following:

• Consent, where you have chosen to contact us or sign up for updates
• Legitimate interests, in responding to enquiries and running the organisation, provided this does not override your rights
• Legal obligation, where processing is necessary to comply with charity, company or other law

We may share personal data, where necessary, with:

• our website hosting and infrastructure providers (currently Cloudflare)
• our email provider, to receive and store correspondence
• professional advisers such as accountants or solicitors, where relevant
• regulators including Companies House, the Charity Commission and the Information Commissioner's Office, where required by law

We do not sell your personal data, and we do not share it for third-party marketing purposes.

Some of our service providers, including our hosting provider, may process data outside the UK. Where this happens, we rely on the provider's own compliance with UK data protection law, including recognised safeguards such as standard contractual clauses or adequacy decisions.

We take reasonable technical and organisational measures to protect personal data, including relying on reputable, secure hosting infrastructure and limiting who within the organisation can access correspondence. No online system is completely secure, and we cannot guarantee absolute security.

We keep personal data only for as long as reasonably necessary for the purpose it was collected, including responding to your enquiry, maintaining appropriate records, and meeting legal or charitable reporting obligations. When it is no longer needed, we delete or anonymise it.

Under UK data protection law, you have the right to:

• request access to the personal data we hold about you
• request correction of inaccurate or incomplete data
• request deletion of your personal data
• object to or request restriction of certain processing
• withdraw consent at any time, where processing is based on consent
• lodge a complaint with the Information Commissioner's Office

To exercise any of these rights, contact us using the details in section 1.

Our website is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will remove it.

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the UK's supervisory authority:

• Information Commissioner's Office
• Website: ico.org.uk
• Helpline: 0303 123 1113

We may update this Privacy Policy as our services change, including when we introduce donations, accounts or analytics. We will update the effective date at the top of this page when we do.

If you have any questions about this policy, contact:

• Cyrus & Esther CIC
• Company number: 17377832 (registered in England and Wales)
• Registered office: London, UK
• Email: [email protected]
• Phone: +44 7821 377239