Privacy Policy

Privacy Notice

1. Who we are

This privacy notice explains how All Belong Hub collects, uses, stores and protects your personal data when you use our website, membership areas, products and services.

All Belong Hub is a partnership between Growing Hope and Living Well Family Services CIC. They act as joint controllers for the personal data used to run All Belong Hub.

This notice explains what personal data we collect, why we use it, our lawful bases, who we share it with, how long we keep it, and your rights.

2. What information we collect

We collect personal data in a few different ways. Some of it is needed so we can provide the service to you, and some of it is optional.

Information you give us

We may collect information from you when you:

  • create an account

  • purchase a product or membership

  • subscribe to updates

  • contact us

This may include:

  • your name

  • email address

  • billing details (such as postcode or country)

  • organisation details (if provided)

  • any information you choose to submit

Payment information

Payments are processed securely by Stripe, which is a third-party payment provider.

We do not store your full payment card details. Your payment information is handled by the payment provider under its own privacy terms or on our behalf, depending on the service.

Information we collect automatically

When you use our services, we may automatically collect technical and usage information such as:

  • IP address

  • device type and browser

  • pages viewed

  • time spent on pages

  • usage data and interactions

  • cookies and similar technologies

Information from other organisations

We may also receive personal data from other organisations, for example:

  • analytics providers

  • payment processors

  • email or marketing tools

  • third-party integrations you connect

3. How we use your information

We use your personal data to:

  • provide access to memberships and resources

  • process payments and manage subscriptions

  • communicate updates and service information

  • provide customer support

  • improve our website and services

  • understand how our resources are used

  • comply with legal and regulatory obligations

  • prevent fraud or misuse

4. Our lawful bases for using your data

Under UK data protection law, we must have a lawful basis for using your personal data. Depending on why we are using it, we rely on one or more of the following:

Contract

We use this when we need your personal data to provide the products, memberships or services you have asked for, including setting up your account, taking payment, giving access to content and managing your subscription.

Legitimate interests

Where appropriate, we rely on legitimate interests to:

  • improve our services

  • manage and grow the platform

  • communicate relevant updates

Legal obligation

We use this when we need to meet legal or regulatory duties, such as keeping financial records or responding to lawful requests.

Consent

We rely on consent when the law requires it, for example for some marketing messages or non-essential cookies. You can withdraw your consent at any time.

5. Who we share your information with

We do not sell your personal data.

We may share personal data with trusted organisations where needed to run All Belong Hub. This may include service providers acting for us, and in some cases partner organisations acting as separate or joint controllers.

  • payment processors

  • hosting providers

  • email delivery services

  • analytics tools

  • technical support providers

We may also share personal data:

  • where required by law

  • to protect users or the integrity of the Services

  • if the organisation structure changes (e.g. transfer of services between partner organisations)

6. How long we keep your information

We keep personal data only for as long as we need it for the purposes explained in this notice. We review retention periods regularly and delete, anonymise or securely dispose of personal data when it is no longer needed, unless we must keep it for a legal or regulatory reason.

We keep data for different lengths of time depending on what kind of data it is.

Account and membership records - For as long as your account or membership is active, and for a limited period afterwards where needed to deal with queries, complaints, renewals, refunds or legal claims.

Purchase and payment records - Usually for 6 years after the end of the relevant financial year.

Customer support enquiries and contact records - For as long as needed to deal with your enquiry and for a short period afterwards where necessary to manage follow-up issues or complaints.

Marketing preferences and consent records - For as long as needed to keep a record of your current choices and, where appropriate, to maintain a suppression list if you have opted out.

Website analytics and cookie-related data - Only for as long as needed for the relevant purpose and in line with our cookie settings and retention controls.

Fraud, misuse and security incident records - For as long as reasonably necessary to investigate, respond to and protect the service, and longer where needed for legal claims, safeguarding or law enforcement.

Some retention periods are set by law, while others are based on our legitimate business needs and the ICO’s storage limitation principle. We document these periods in our retention schedule and keep them under review. When personal data is no longer needed, we will securely delete it, anonymise it or dispose of it safely.

7. Cookies and tracking

We use cookies and similar technologies to:

  • enable essential site functionality

  • understand usage of our Services

  • improve user experience

  • measure engagement

Where the law requires it, we will ask for your consent before using non-essential cookies. You can manage your cookie choices through the controls on the site and, in some cases, through your browser settings.

8. How we keep your information safe

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure.

No online system is completely secure, but we work to keep your information protected.

9. Your rights

Under UK GDPR, you may have the right to:

  • access your personal data

  • correct inaccurate data

  • request deletion of your data

  • restrict or object to processing

  • request data portability

  • withdraw consent (where applicable)

  • lodge a complaint with the Information Commissioner’s Office (ICO)

You can exercise your rights by contacting us using the details below. You also have the right to complain to the Information Commissioner’s Office if you are unhappy with how we have handled your personal data.

10. Children’s privacy

Our services are intended for parents, carers, churches and organisations. If we become aware that we have collected personal data from a child when we should not have done so, we will take steps to deal with it lawfully.

11. Third-party services

Our services may link to or include tools provided by other organisations.

These organisations have their own privacy notices and practices, so we encourage you to read them.

12. Changes to this notice

We may update this privacy notice from time to time to reflect changes in our services, legal requirements or how we handle personal data.

The latest version will be available through the relevant website or service.

13. Contact us

If you have questions about this privacy notice, want to exercise your rights, or want to raise a concern about how your personal data is handled, please contact us at info@growinghope.org.uk