1. Who we are
Changed Foundation is a UK-registered charity serving communities across the UK and internationally to support mental wellness through counselling, community programmes, and outreach. For data protection questions, contact us at admin@changedfoundation.com.
2. What information we collect
Depending on how you use our services, we may collect:
- Registration details — name, username, email address, phone number, age, country or region, and how you wish to join (support member or professional).
- Programme information — your chosen track (e.g. maternal, veterans, youth), preferred support model, and optional notes you share in your intake form.
- Account and login data — credentials managed through our secure authentication provider (encrypted; we do not store plain-text passwords).
- Identity verification — optional passport-style photo uploads where required for member verification.
- Care and session data — assignments, appointments, and notifications related to your support journey.
- Professional availability — if you join as a professional, your published availability and session preferences.
- Technical data — basic device and browser information collected automatically when you visit our site (see Cookies below).
3. How we use your information
We use personal data to:
- Process your registration and connect you with appropriate programmes or professional opportunities.
- Review and approve membership where required before access to member services.
- Coordinate care, counselling referrals, appointments, and staff notifications.
- Send service-related messages (for example, account updates or appointment reminders).
- Operate and improve our website and member portals.
- Meet legal, safeguarding, and charity governance obligations.
We do not sell, rent, or lease your personal information to third parties for marketing.
4. Legal basis (UK GDPR)
We process personal data under one or more of the following bases:
- Consent — where you choose to register and provide information voluntarily.
- Legitimate interests — to run our charity safely, prevent misuse, and improve services (balanced against your rights).
- Contract / steps prior to contract — to provide support or professional services you request.
- Legal obligation — where we must retain or disclose information by law.
5. Who we share information with
Access is limited to those who need it for their role:
- Authorised staff — trained coordinators and administrators who manage intake, care, and member support.
- Assigned professionals — counsellors or professionals matched to your care, only information relevant to your support.
- Service providers — trusted processors that host our database, authentication, email, and file storage (for example Supabase and our email delivery partners). These providers process data on our instructions and under appropriate safeguards.
We may also disclose information if required by law, court order, or to protect the safety of members, staff, or the public.
6. International transfers
Changed Foundation works internationally. Your data may be stored or processed using cloud services located outside the UK. Where this occurs, we use appropriate safeguards consistent with UK data protection law.
7. How long we keep data
We retain personal information only as long as needed for the purposes above, including while you have an active relationship with us and for a reasonable period afterwards for record-keeping, complaints, or legal requirements. You may ask us about retention for your specific account.
8. Security
We use technical and organisational measures to protect your data, including encryption in transit, access controls, row-level security on our database, and staff role permissions. No online system is completely risk-free; please use a strong, unique password and contact us if you suspect unauthorised access to your account.
9. Your rights
Under UK GDPR, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure in certain circumstances.
- Restrict or object to processing in certain circumstances.
- Data portability where applicable.
- Withdraw consent where processing is based on consent.
To exercise these rights, email admin@changedfoundation.com. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.
10. Cookies and similar technologies
Our site uses essential storage for login sessions and member portal functionality. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling essential cookies may limit member login features.
11. Children and young people
Our youth programmes may involve registrants aged 13 and over. Where required, we expect appropriate parental or guardian involvement. If you believe a child has provided data without proper consent, contact us and we will review promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page. Significant changes may also be communicated through our website notice board or by email where appropriate.
Last updated: 9 July 2026 · Contact us