Legal
Privacy Policy
Last updated: September 2026
Lotus Justice & Support Centre CIC is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
Who we are
Lotus Justice & Support Centre CIC is a Community Interest Company registered in England and Wales. We are the data controller for the personal data described in this policy.
Contact: [email protected] | Free helpline: 0800 098 2730
What data we collect
We may collect: your name, email address, phone number, and the content of messages you send us through our contact form or helpline.
If you enrol on our free CPD course, we also collect your professional role and organisation to issue your certificate.
We do not collect sensitive personal data (such as details of abuse experienced) through our website forms. If you share such information voluntarily during a support call or email, it is handled under strict confidentiality protocols.
Why we collect it and our lawful basis
To respond to your enquiry or referral — lawful basis: legitimate interests (providing support services).
To issue CPD certificates — lawful basis: performance of a contract (course enrolment).
To send you updates or resources you have requested — lawful basis: consent. You may withdraw consent at any time.
How we store and protect your data
Your data is stored securely on UK-based servers. We use industry-standard encryption and access controls. Only authorised staff and volunteers who need the data to provide services can access it.
We retain contact enquiry data for 12 months, then securely delete it unless you have an ongoing case with us.
Sharing your data
We do not sell or share your personal data with third parties for marketing purposes.
With your explicit consent, we may refer you to partner organisations (solicitors, specialist services, local authorities) to support your case. We will always tell you before making a referral.
We may be required to share data with statutory authorities (police, social services) where there is an immediate risk to life. We will inform you of this unless doing so would put you or others at risk.
Your rights
Under UK GDPR you have the right to: access your data, correct inaccurate data, request deletion, restrict processing, data portability, and to object to processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Cookies
Our website uses essential cookies only (for session management and security). We do not use tracking or advertising cookies without your consent. A cookie banner will appear on your first visit.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.