Diverse Living Devon Ltd
Privacy Policy
GDPR & UK Data Protection Act 2018 Compliant)
Last Updated: 11th January 2026

1. Who We Are
Diverse Living Devon Ltd (“we”, “us”, “our”) provides neurodivergent life support, community-based support, consultations and related services to children, young people, adults and families. We are registered in the United Kingdom. We are a registered Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
ICO Registration Number: ZC092068 
Contact Email: diverselivingdevon@gmail.com

2. The Data We Collect
We may collect and process the following categories of personal data: Personal Information, name, address,
Email address, telephone number, date of birth, parent/guardian details, emergency contact details.
Special Category Data (Health & Support Needs)
Where required to provide safe and appropriate services, we may collect: Medical information, diagnoses, medication details, mental health information, sensory needs, behavioural support information, risk and safeguarding information. This data is only collected where necessary and with explicit consent.
Website Data
When visiting our website or social media pages, we may collect: IP address, browser type, usage data, cookie information. This data does not directly identify you.

3. Lawful Basis for Processing
We process data under the following lawful bases: Contract
To provide agreed services and fulfil our obligations. Explicit Consent
For processing special category (health) data. Legal Obligation
For safeguarding, child protection and compliance with legal duties.
Legitimate Interests, for improving our services and managing our business operations.

4. How We Use Your Information
We use personal data to: Deliver support services, plan and risk assess community activities, communicate with parents and clients, maintain safeguarding standards, keep appropriate records, meet legal and regulatory obligations.
We do not sell or trade personal information.

5. Data Sharing
We may share information only where necessary: With safeguarding authorities where legally required,
With emergency services if required for safety
With professional advisors (e.g., accountants) where appropriate
With secure service providers (e.g., Google Workspace)
We will never share data for marketing purposes without consent.

6. Data Storage & Security
We implement appropriate technical and organisational measures including: Device encryption, Password-protected systems. Two-factor authentication secure cloud storage, locked storage for paper documents, anti-virus and firewall protection. While no system is completely secure, we take reasonable and proportionate steps to protect personal data.

7. Data Retention
We retain records only as long as necessary. For services involving children, records may be retained: until the young person reaches age 21 or up to 6 years after last contact. This is to meet safeguarding and legal obligations.
After this period, data is securely deleted or destroyed.

8. Children’s Data
Our services support children and young people.
Personal data relating to children is collected with parental or legal guardian consent.
Where appropriate, we also seek the young person’s understanding and agreement.
We take additional care when processing children’s information.

9. Your Rights
Under UK GDPR, individuals have the right to: access their personal data, request correction, request erasure (where legally possible)
restrict processing, object to processing, withdraw consent
Lodge a complaint with the ICO Contact: www.ico.org.uk
Requests should be made via email to: diverselivingdevon@gmail.com

10. Safeguarding
Confidentiality may be overridden where there are safeguarding concerns or risk of harm. In such cases, information may be shared with relevant authorities in line with legal obligations.

11. Updates to This Policy
We may update this policy periodically. The most recent version will always be available on our website.