Privacy Policy

1. Introduction

Foster Greatness UK ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Foster Greatness UK operates as part of the Foster Greatness network, providing a digital community platform for people impacted by the care system in the United Kingdom.

2. Data Controller

The data controller responsible for your personal data is:

3. What Personal Data We Collect

We collect the following types of personal data:

• Contact Information: Name, email address
• Technical Data: IP address, browser type, device information, operating system
• Usage Data: How you interact with our website, pages visited, time spent on pages
• Cookie Data: Information stored in cookies (see our Cookie Policy for details)

4. How We Collect Your Data

We collect personal data through:

• Direct Interactions: When you fill out our waitlist form, contact us, or subscribe to updates
• Automated Technologies: Through cookies and similar technologies as you navigate our website
• Third-Party Services: We use Typeform to collect waitlist submissions, which may collect additional technical data

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you explicitly agree to join our waitlist or receive communications (Article 6(1)(a) UK GDPR)
• Legitimate Interests: To operate and improve our website, prevent fraud, and ensure security (Article 6(1)(f) UK GDPR)
• Legal Obligation: To comply with legal requirements such as responding to law enforcement requests (Article 6(1)(c) UK GDPR)

6. How We Use Your Data

We use your personal data for the following purposes:

• To notify you about the launch of Foster Greatness UK
• To provide you with information about our services and community
• To respond to your inquiries and requests
• To improve our website and user experience
• To ensure the security and integrity of our website
• To comply with legal obligations and protect our legal rights
• To send you updates, newsletters, and marketing communications (with your consent)

7. Data Sharing and Third-Party Processors

We share your personal data with the following third-party service providers who process data on our behalf:

We ensure all third-party processors:

• Have appropriate Data Processing Agreements (DPAs) in place
• Use adequate safeguards for international data transfers (SCCs, adequacy decisions, or certification frameworks)
• Implement appropriate technical and organizational security measures
• Only process data according to our instructions

8. International Data Transfers

Some of our service providers are located outside the United Kingdom and European Economic Area (EEA). When we transfer your personal data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs): Approved by the UK Information Commissioner's Office (ICO)
• EU-US Data Privacy Framework: Certification for US-based processors (Vercel)
• Adequacy Decisions: Countries deemed to provide adequate data protection by the UK government

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Waitlist Data: Until the launch of Foster Greatness UK plus 12 months, or until you request deletion
• Marketing Communications: Until you unsubscribe or request deletion
• Technical and Usage Data: Up to 24 months for analytics and security purposes
• Legal Compliance: Longer periods may apply where required by law or to establish, exercise, or defend legal claims

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

11. How to Exercise Your Rights

To exercise any of your rights, please contact us at:

To verify your identity and protect your personal data, we may ask you to provide additional information before processing your request.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against:

• Unauthorized or unlawful processing
• Accidental loss, destruction, or damage
• Unauthorized access or disclosure

Our security measures include:

• Encryption of data in transit (HTTPS/SSL)
• Secure data storage with access controls
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Staff training on data protection and security

13. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach
• Notify affected individuals without undue delay if the breach poses a high risk
• Document the breach and our response in accordance with UK GDPR requirements

14. Children's Privacy

While Foster Greatness UK will serve individuals impacted by the care system, this website and waitlist are intended for individuals aged 13 and over. We do not knowingly collect personal data from children under 13 without appropriate parental or guardian consent. If you believe we have inadvertently collected data from a child under 13, please contact us immediately.

15. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

16. Marketing Communications

If you have consented to receive marketing communications, we will send you updates about Foster Greatness UK, including:

• Launch announcements and updates
• Community news and events
• Service updates and new features

You can unsubscribe from marketing communications at any time by:

• Clicking the "unsubscribe" link in any email we send
• Contacting us at info@fostergreatness.co

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending you an email notification if the changes are significant (where we have your email address)

We encourage you to review this Privacy Policy periodically.

18. Contact the Information Commissioner's Office (ICO)

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the UK supervisory authority:

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: