Privacy Policy
Last updated: May 26, 2026
This Privacy Policy explains how Beyond The Storm CIC ("we", "us", "our") collects, uses, stores and protects your personal information when you visit our website, join our community, contact us, or support our work. We are committed to protecting your privacy and handling your data in an open and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Beyond The Storm CIC is a Community Interest Company registered in the United Kingdom, company number 17216266. We are the "data controller" responsible for your personal data. If you have any questions about this policy or about how we handle your information, you can reach us at hello@beyondthestorm.org.uk.
The information we collect
Depending on how you interact with us, we may collect the following personal information:
When you join our community: your name, postal address, date of birth and email address. You may also choose to tell us more about yourself and your circumstances during your time with us; you are never obliged to share more than you wish.
When you contact us: your name, email address and the content of your message.
Automatically, when you browse: limited technical information such as your device type and general usage data, collected through cookies. Please see our Cookie Policy for more detail.
A note on sensitive information
Because of the nature of our community, you may choose to share information about your health or cancer experience with us. Information about health is treated as a "special category" of personal data under the UK GDPR and is given extra protection. We will only ever use such information to provide you with appropriate support, we will only collect it where you choose to share it, and we will never disclose it to anyone outside Beyond The Storm without your explicit consent, unless we are required to do so by law or to protect someone's safety.
How and why we use your information
We use your personal data to welcome you into the community and arrange your support groups, to send you the communications you've asked for, to respond to your enquiries, and to run and improve our services. The legal bases we rely on are:
Consent: when you sign up to our newsletter or choose to share health information. You can withdraw your consent at any time.
Legitimate interests: to administer your membership, respond to your messages and run our community effectively, in ways you would reasonably expect.
Legal obligation: where we are required to keep or disclose information by law.
Marketing and our newsletter
If you have agreed to receive our monthly newsletter, we will send you occasional updates about our work and community. You can unsubscribe at any time by clicking the link in any email or by contacting us directly. We will never sell or share your details with third parties for their own marketing.
How we store and protect your data
Your information is stored securely and access is limited to those who need it to support you. We take reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access. We keep your personal data only for as long as necessary to provide our services to you, or as required by law, after which it is securely deleted.
Sharing your information
We do not sell your personal data. We may share it with trusted service providers who help us operate (for example, our email or website providers), who are required to keep it secure and use it only on our instructions. We may also disclose information where required by law or to protect the safety of an individual.
Your rights
Under data protection law, you have the right to access the personal data we hold about you, to ask us to correct or delete it, to object to or restrict how we use it, and to request that we transfer it. Where we rely on your consent, you have the right to withdraw it at any time.
To exercise any of these rights, please contact us at hello@beyondthestorm.org.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date.