Unspoken But Heard CIC
Privacy notice
Your information and your choices.
Last updated: 5 September 2026
Controlled-testing noticeThis notice describes the current website and prototype. The lawful bases for support data, sensitive-data conditions, supplier and international-transfer details, and final retention schedule still require approval before a live pilot. It is not a final live-service privacy notice.
Who is responsible
UNSPOKEN BUT HEARD CIC is the controller responsible for personal information handled through this website.
UNSPOKEN BUT HEARD CIC A Community Interest Company, registered in England and Wales. Company number: 17432454 · Private company limited by guarantee.
Registered office: Ground Floor, 108-112 Main Street, Sundridge, Seven Oaks, United Kingdom, TN14 6ES.
For privacy questions or a request about your data, write to the registered office, marked “Privacy”, or use the concerns form and select the privacy category. Include a safe way to reply if you want a response. You do not need an account to raise a concern.
Information the service handles
- Account details: name, email address, a protected password representation, sessions and account-access records.
- Support requests and conversations: messages you choose to send, participants, timestamps and conversation status.
- Community content: chat messages, forum discussions and replies, reports and moderation decisions.
- Newsletter and registered interest: name if supplied, email address, interests, consent time, subscription status and campaign delivery records.
- Safeguarding: concerns, relevant conversation or community context, review notes and records of authorised access.
- Complaints and volunteer applications: details you submit and any contact information you provide.
- Service operation: security and audit records, availability and queue timing, and notification subscription details if enabled.
Conversations and community posts may reveal health information or other sensitive personal information. Please share only what is needed and avoid identifying other people unnecessarily.
Why information is used
Information is used to manage accounts, connect people with Support Companions, provide moderated community spaces, deliver requested email updates, review safeguarding concerns, handle complaints and applications, and operate and protect the service. Newsletter messages rely on the consent recorded when you register your interest; you can withdraw that consent using the unsubscribe link in every message.
The organisation must document an appropriate UK GDPR lawful basis for each other purpose and an additional condition for sensitive information before live processing begins. These decisions remain part of the launch review; using the website does not by itself amount to consent to every use of your information.
Who can see it
Access within the application depends on role and assigned responsibilities. Signed-in members can see visible community posts and the display names attached to them. Support Companions can access their private conversations; moderators can review reported community content; authorised safeguarding staff can review relevant context. Operations staff handle service administration, newsletters and complaints. Hosting, database, email and browser push services may process data to deliver their functions. The approved provider list, processing locations and any international-transfer safeguards remain to be confirmed before live launch.
Relevant information may need to be shared with appropriate authorities where necessary and lawful to address a safeguarding concern or legal requirement. Confidentiality is not absolute.
Human review and automated tools
Support and community content is not used for advertising, AI training or sentiment analysis. If enabled, phrase matching flags messages for restricted human review. It does not diagnose, assign a risk level, make a safeguarding decision or automatically contact emergency services. Members may also report community content to a human moderator.
How long information is kept
The prototype has configurable cleanup of ended private conversations and record-specific safeguarding holds. Unsubscribed email addresses remain suppressed so they are not accidentally contacted again. The final periods for accounts, community content, newsletter suppression records, conversations, complaints, applications, audit records and backups are not yet approved. Retention decisions must take account of the purpose, safeguarding needs and legal requirements. We cannot currently promise immediate deletion of all copies.
Your rights and concerns
Depending on the circumstances and the legal basis, you may request access, correction, erasure, restriction or portability of your information, or object to its use. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Every newsletter contains an unsubscribe link. We may need to verify your identity. Rights can be subject to legal exceptions, including where records must be preserved.
Contact us using the routes above. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.
Cookies and changes
Read our cookies and storage notice. We will update this notice as the service changes and provide the live-service privacy information before a live pilot.