HAFWAY Privacy Policy

Last updated: June 2026

1. Introduction

HAFWAY is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, submit a referral, make an enquiry, donate to our work, or otherwise interact with us online.

HAFWAY is a registered charity (No. 1138279) and a company limited by guarantee (No. 7299262).

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Who We Are

HAFWAY

Registered Charity No. 1138279

Company Limited by Guarantee No. 7299262

Email: office@hafway.org

For the purposes of UK data protection law, HAFWAY is the "Data Controller" of the personal information collected through this website.

3. Information We Collect

We may collect and process the following information:

Information you provide directly

When you complete a contact form, referral form or otherwise communicate with us, we may collect:

Name
Email address
Telephone number
Organisation (where relevant)
Information included within your enquiry or referral
Any other information you choose to provide

Information collected automatically

When you visit our website, we may collect:

IP address
Browser type and version
Device information
Date and time of visits
Pages visited
Website usage information

This information helps us maintain and improve our website.

4. Referral Information

Where a referral is submitted through our website, personal information may be provided about a young person, parent, carer or family member.

We ask that anyone submitting a referral only provides information necessary for HAFWAY to assess and respond to the referral appropriately.

Information submitted through referral forms will be handled confidentially and in accordance with applicable data protection legislation and safeguarding requirements.

5. How We Use Your Information

We may use your information to:

Respond to enquiries
Process referrals
Provide support and services
Communicate with individuals who contact us
Manage and improve our website
Maintain records required for charity administration
Meet legal, regulatory and safeguarding obligations
Prevent fraud or misuse of our services

We will only use personal information where we have a lawful basis for doing so.

6. Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Legitimate Interests

To operate and improve our services and website, communicate with stakeholders and manage referrals.

Consent

Where you have given clear consent for us to process your information for a specific purpose.

Legal Obligation

Where we are required to process information to comply with legal or regulatory requirements.

Vital Interests

Where processing is necessary to protect someone's life or safety.

Public Task or Charitable Purposes

Where processing supports our charitable objectives and delivery of services.

7. Sharing Your Information

We do not sell personal information.

We may share information where necessary with:

Professional advisers
IT and website service providers
Regulatory or statutory bodies
Safeguarding agencies where required
Law enforcement agencies where legally required

Information will only be shared where appropriate and lawful.

8. Donations

Our website may contain links to external donation platforms, including Zeffy.

When you make a donation through Zeffy, your information is collected and processed by Zeffy in accordance with their own privacy policy and terms.

We encourage users to review Zeffy's privacy information before making a donation.

9. Data Security

We take appropriate technical and organisational measures to protect personal information against:

Unauthorised access
Loss
Misuse
Disclosure
Alteration
Destruction

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

10. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

Responding to enquiries
Managing referrals
Meeting safeguarding requirements
Fulfilling legal and regulatory obligations

Retention periods may vary depending on the nature of the information and applicable legal requirements.

11. Children's Privacy

HAFWAY supports children and young people and recognises the importance of protecting their personal information.

Where information about children or young people is collected through referrals or enquiries, we will process that information in accordance with UK data protection legislation and safeguarding responsibilities.

Parents, carers and professionals submitting information about young people should only provide information necessary for HAFWAY to respond appropriately.

12. Your Rights

Under UK data protection law, you have the right to:

Access your personal information
Request correction of inaccurate information
Request deletion of information in certain circumstances
Restrict processing in certain circumstances
Object to processing
Request data portability where applicable
Withdraw consent where processing relies on consent

To exercise any of these rights, please contact:

office@hafway.org

You also have the right to complain to the Information Commissioner's Office (ICO):

www.ico.org.uk

13. Cookies

What Are Cookies?

Cookies are small text files stored on your device when you visit a website.

They help websites function properly and improve user experience.

How We Use Cookies

Our website is built using Wix, which uses cookies to:

Maintain website security
Enable website functionality
Remember user preferences
Support website performance and reliability

Types of Cookies We May Use

Essential Cookies

These cookies are necessary for the website to function and cannot be switched off.

Examples include cookies used for:

Security
Session management
Accessibility features

Functional Cookies

These cookies allow the website to remember choices you make and improve your experience.

Analytics Cookies

We do not currently use analytics tools such as Google Analytics. If this changes in the future, this policy will be updated and users will be given appropriate cookie choices where required.

Managing Cookies

Most web browsers allow you to:

View cookies
Delete cookies
Block cookies
Control cookie preferences

Please note that disabling certain cookies may affect website functionality.

Further information about cookies can be found at:

www.aboutcookies.org

14. Third-Party Websites

Our website may contain links to external websites and services.

We are not responsible for the privacy practices of external websites and encourage users to read their privacy policies before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page and will take effect immediately upon publication.

We encourage users to review this policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy or how HAFWAY handles personal information, please contact: