

Policy Notice
Data Protection & Privacy Statement
Bennachie Horizon CIC
At Bennachie Horizon, we are committed to protecting the privacy and rights of everyone we work with. We are fully compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This statement outlines how we handle personal information, who we share it with, and how we keep it secure.
Why We Collect Personal Data
We collect personal information so we can:
-
Deliver safe, person-centred support
-
Communicate effectively with families and professionals
-
Monitor progress and outcomes
-
Fulfil legal, medical, and contractual obligations
-
Process invoices, employment, and administration
How We Store and Protect Data
Data is stored securely:
-
On password-protected digital systems
-
In locked filing cabinets for any paper-based records
Access to data is restricted to authorised staff only, on a need-to-know basis.
Third-Party Data Processors
We work with a small number of trusted platforms and tools that support our operations. These may include:
-
Wix (website contact forms)
-
Gmail (email communication)
-
FreeAgent (accounting)
-
Teams (remote meetings)
-
JustGiving (online fundraising)
Each third party has its own Data Processing Agreement (DPA) in place, confirming compliance with GDPR.
Our ICO Registration
Bennachie Horizon is registered with the Information Commissioner’s Office (ICO).
ICO Registration Number: ZC022419
What We Collect
Depending on the relationship, we may collect:
-
Contact details (name, phone number, email, address)
-
Health or disability-related information
-
Emergency contacts
-
Progress notes for reviews or support plans
-
Staff and employment details
-
Financial or billing information (where relevant)
Who We Share Data With
We only share personal information when necessary, and in line with legal and safeguarding duties.
​
Data may be shared with:
-
Families or legal guardians
-
Social work professionals and care teams
-
Emergency medical services
-
Local authorities (e.g. for funding or review purposes)
-
HMRC or other legal/regulatory bodies
We do not share data for marketing purposes.
Your Rights
All individuals have the right to:
-
Access their data
-
Request corrections or deletion
-
Withdraw consent (where applicable)
-
Object to certain types of processing
-
Complain to the Information Commissioner’s Office (ICO)
Contact Us
For questions, data access requests, or anything related to data protection, please contact:
Michael Hedley
Director & Data Controller
info@bennachiehorizon.com

