Data Protection Policy
Last updated: August 2026. Version 2. Ratified by Grace Sibanda (CEO). Review date: April 2027.
This policy outlines how The Sibling Group collects, uses, stores, and protects personal data in accordance with UK GDPR and applicable data protection laws. It applies to all employees, trustees, temporary staff, and third parties who process personal data on behalf of The Sibling Group.
Data Protection Principles Personal data shall be processed lawfully, fairly, and transparently. Data shall be collected for specified, explicit, and legitimate purposes. Data shall be adequate, relevant, and limited to what is necessary.
Data shall be accurate and kept up to date. Data shall not be kept longer than necessary.
Data shall be processed securely.
Lawful Basis Personal data will only be processed where there is a lawful basis including consent, contractual necessity, legal obligation, vital interests, public task, or legitimate interests.
Data Collection Only necessary data will be collected.
Personal data is collected via online enquiry forms on our website. Individuals will be informed about the purpose of data collection, how their data will be used, and their rights.
Data Storage and Security Appropriate technical and organisational measures including access controls, encryption where appropriate, secure storage systems, and regular security assessments.
Data Retention Personal data will be retained only for as long as necessary. A data retention schedule is maintained by the Data Protection Officer.
Data Subject Rights Individuals have the right to access, correct, delete, restrict, object to processing, and data portability where applicable. Requests handled within one calendar month.
Data Breaches All breaches must be reported immediately to the DPO. The Sibling Group will investigate, mitigate risks, and notify relevant authorities and affected individuals where required.
Third-Party Processing We use HubSpot for contact and enquiry management under a data processing agreement.
DPO Contact thesiblinggroup.info@gmail.com
Signed by CEO: Grace Sibanda,
April 2026.