Website: www.starfishenterprise.org.uk
Effective date: 19 May 2026
Last updated: 19 May 2026

Introduction

Starfish Enterprise (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, contact us, sign up for our services, make donations, subscribe to communications, or otherwise engage with us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

By using this website, you agree to the practices described in this Privacy Policy.

1. Who We Are

Starfish Enterprise is responsible for deciding how your personal data is processed.

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Starfish Enterprise
Website: www.starfishenterprise.org.uk
Email: [email protected]
Postal Address: 20 King Street, Weymouth, DT4 7BJ

2. What Information We Collect

We may collect and process the following categories of personal information:

Information you provide directly

This may include:

Your name

Email address

Telephone number

Postal address

Organisation or business details

Donation or payment information

Information submitted through contact forms

Information provided when subscribing to newsletters or events

Any other information you voluntarily provide

Information collected automatically

When you use our website, we may automatically collect:

IP address

Browser type and version

Device information

Operating system

Pages visited and time spent on the website

Referral sources

Cookies and usage data

3. How We Use Your Information

We use your personal data for the following purposes:

To respond to enquiries and provide support

To deliver our services and programmes

To process donations or payments

To send newsletters, updates, and marketing communications (where permitted)

To manage event registrations

To improve our website and services

To monitor website usage and performance

To comply with legal and regulatory obligations

To protect the security and integrity of our website and organisation

4. Legal Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases for processing personal data:

Consent – where you have given clear permission

Contract – where processing is necessary to fulfil a contract or requested service

Legal obligation – where we are required to comply with the law

Legitimate interests – where processing is necessary for our legitimate organisational interests and does not override your rights

5. Marketing Communications

We may send you updates, newsletters, or information about our work where:

You have consented to receive communications; or

We have another lawful basis to contact you.

You can unsubscribe from marketing emails at any time by:

Clicking the “unsubscribe” link in any email; or

Contacting us directly.

6. Cookies

Our website may use cookies and similar technologies to improve user experience and analyse website traffic.

Cookies are small text files stored on your device.

We may use:

Essential cookies

Performance and analytics cookies

Functional cookies

Third-party cookies

You can control or disable cookies through your browser settings.

Where required by law, we will request your consent before placing non-essential cookies on your device.

7. Sharing Your Information

We do not sell your personal data.

We may share information with trusted third parties where necessary, including:

Website hosting providers

IT and software providers

Payment processors

Email marketing platforms

Professional advisers

Regulatory authorities or law enforcement where legally required

All third-party providers are required to protect your data and only process it in accordance with applicable data protection laws.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with UK data protection law.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

Retention periods may vary depending on the nature of the information and our legal obligations.

10. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction.

However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Under UK GDPR, you may have the right to:

Access the personal data we hold about you

Request correction of inaccurate information

Request deletion of your data

Restrict or object to processing

Withdraw consent at any time

Request transfer of your data

Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us using the details above.

12. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites.

We encourage users to read the privacy policies of any external sites they visit.

13. Children’s Privacy

We do not knowingly collect personal data from children without appropriate consent and safeguarding measures.

Where services involve children or vulnerable individuals, additional safeguards and policies may apply.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page with an updated revision date.

We encourage users to review this policy periodically.

15. Contact Information

If you have any questions about this Privacy Policy or how your personal data is handled, please contact:

Starfish Enterprise
Website: www.starfishenterprise.org.uk
Email: [email protected]
Postal Address: 20 King Street, Weymouth, DT4 7BJ

You also have the right to complain to the UK Information Commissioner’s Office (ICO):

Website: https://ico.org.uk