How We Use and Protect Your Data

This privacy notice sets out how Good Faith Solutions Ltd, trading as Good Faith Partnership ("we", "us", "our"), collects, uses, stores and protects the personal information of our clients, those we work with and those we engage with electronically.This privacy notice explains how we process personal data in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable legislation.

Who We Are

Good Faith Solutions Ltd, trading as Good Faith Partnership, is a company registered in England and Wales.Company Number: 16727684Registered Address:128B The StreetRustingtonLittlehamptonBN16 3DAEmail: dataprotection@goodfaith.org.uk For the purposes of data protection law, we are the data controller.

Scope

This notice applies to:Clients and prospective clientsProject participants and beneficiariesPartners and collaboratorsWebsite usersJob applicants and recruitment candidates

Data We Collect

Depending on our relationship with you, we may collect and process:Identity and contact dataProfessional and employment informationProject and engagement dataTechnical and usage dataRecruitment and application dataCommunications and correspondence records

Special Category Data

Where necessary, for example in connection with safeguarding or inclusion work, we may process special category data.We will only do so where a lawful basis and an additional condition under Article 9 UK GDPR applies and appropriate safeguards are in place.

Purposes of Processing

We process personal data in order to:Deliver consultancy and advisory servicesDesign, manage and operate programmes and projectsManage client, stakeholder and partner relationshipsMonitor impact and evaluate outcomesSupport safeguarding and risk management activitiesRecruit and engage employees, contractors and associatesComply with legal and regulatory obligationsImprove our services, communications and operations

Lawful Bases

We rely on one or more of the following lawful bases under Article 6 UK GDPR:Article 6(1)(a) – ConsentArticle 6(1)(b) – ContractArticle 6(1)(c) – Legal obligationArticle 6(1)(f) – Legitimate interestsWhere we process special category data, we rely on one or more of the following conditions:Article 9(2)(a) – Explicit consentArticle 9(2)(g) – Substantial public interestAny other applicable condition under Article 9 UK GDPR where relevant

Data Sharing

We may share personal data with:Service providers and processors, including IT and cloud service providersClients where necessary for project deliveryDelivery partners and subcontractorsProfessional advisersRegulators, courts or law enforcement agencies where required by lawAll data sharing is subject to appropriate contractual, technical and organisational safeguards.

International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place, including:UK adequacy regulations;The UK International Data Transfer Agreement (IDTA);The UK Addendum to Standard Contractual Clauses; orAny other lawful transfer mechanism recognised under UK data protection law.

Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including where retention is required:For contractual purposes;To comply with legal or regulatory obligations;For safeguarding purposes; orTo establish, exercise or defend legal claims.Further information regarding retention periods is available on request.

Contact Us About Data Protection

If you have any questions about this privacy notice or how we process personal data, please contact us:Email: dataprotection@goodfaith.org.ukPostal Address:Good Faith Solutions Ltd128B The StreetRustingtonLittlehamptonBN16 3DA

Your Rights

Under UK data protection law, you have the right to:Access your personal data;Request correction of inaccurate or incomplete personal data;Request erasure of your personal data in certain circumstances;Request restriction of processing;Object to processing carried out on the basis of legitimate interests;Request transfer of your personal data to another organisation (data portability);Withdraw consent at any time where processing is based on consent.You also have the right to raise concerns or make a complaint about how we process your personal data. Details of our complaints process are set out below.To exercise any of your rights, please contact us using the details provided above.

Data Protection Complaints

We maintain a data protection complaints process in accordance with applicable UK data protection legislation.If you have concerns about how we have handled your personal data, we encourage you to contact us in the first instance so that we can investigate and seek to resolve the matter.You can submit a data protection complaint by:Email: dataprotection@goodfaith.org.uk Post:Good Faith Solutions Ltd128B The StreetRustingtonLittlehamptonBN16 3DAWhen making a complaint, please provide as much information as possible about your concern and any relevant correspondence.We will:Acknowledge receipt of your complaint without undue delay and in any event within 30 days of receiving it;Take appropriate steps to investigate and respond to your complaint, including making any appropriate enquiries;Keep you informed of progress where appropriate;Tell you the outcome of your complaint without undue delay following completion of our investigation.If you remain dissatisfied following our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).The ICO can be contacted via www.ico.org.uk or by telephone on 0303 123 1113.

Safeguarding

Where necessary, we may process personal data in order to protect individuals from harm and to meet our safeguarding responsibilities.

Research and Impact

We may use anonymised or pseudonymised information for research, learning, evaluation and impact measurement purposes.Where possible, personal identifiers will be removed or minimised.

Marketing

We will only send marketing communications where permitted by law.You may opt out of receiving marketing communications at any time by following the unsubscribe instructions provided or by contacting us directly.

Cookies

Please refer to our Cookie Policy for information about how we use cookies and similar technologies.

Automated Decision making

We do not use solely automated decision making or profiling that produces legal or similarly significant effects on individuals.

Changes to This Notice

We review this privacy notice regularly and may update it from time to time.The most recent version will always be available from us on request and, where applicable, on our website.This policy was last updated in June 2026.