Privacy Policy
Last updated: May 2026
Who we are
Support2Thrive is a West Midlands community platform operated to connect local people with support organisations, events, and services. This policy explains what personal data we collect, why we collect it, and your rights.
What data we collect
- Account information: name, email address, phone number, and role (when you register).
- Location data: your home postcode (optional, to show nearby services).
- Referral data: personal information submitted when making or receiving a referral. This is encrypted at rest and only decrypted for authorised organisation managers.
- Usage data: pages visited and search queries, collected anonymously to improve the platform.
- AI assistant: messages sent to the assistant are stored temporarily to maintain conversation context. No names or contact details are stored against chat sessions.
Legal basis
We process personal data on the basis of:
- Consent — for referral submissions (you tick a consent box before submitting).
- Legitimate interests — for account management, platform security, and service improvement.
- Contractual necessity — for organisation managers using the portal.
How we share your data
Referral PII is shared only with the specific organisation you are referred to. We do not sell data to third parties. We may share anonymised aggregate statistics about platform usage.
Data retention
Account data is retained while your account is active and for up to 2 years after deletion. Referral data is retained for 7 years for safeguarding audit purposes. You may request deletion subject to legal retention requirements.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion (subject to legal obligations).
- Object to processing based on legitimate interests.
- Lodge a complaint with the ICO (ico.org.uk).
Contact us
To exercise your rights or ask about this policy, contact us at: privacy@support2thrive.co.uk