Privacy Policy
Last updated: April 2026
Who we are
Kindness Community CIC is a Community Interest Company registered in England and Wales (Company No. 12771059). We are the Data Controller for all personal data collected through this website and our services.
Contact: [email protected]Address: Kindness Community CIC, 13 Vimy Dr Dartford, Kent DA1 5FJ
We are committed to protecting your personal data and handling it responsibly. This policy explains what data we collect, why we collect it, who sees it, and your rights.
What data we collect and why
1. Website browsing data
When you visit our website, our website provider UENI Ltd automatically collects technical information including your IP address, browser type, pages visited, and cookies. This is used to keep the website running and to understand how visitors use the site. See UENI's privacy policy at ueni.com for full details of their data practices.
2. Purchase data
When you buy a product from our website, UENI Ltd collects your name, delivery address, email address, phone number, and payment information to process and fulfil your order. We receive your name, address, and order details so we can dispatch your items. Payment information is handled securely by UENI and their payment providers — we do not store your card details.
We keep order records for 6 years as required for financial records.
Legal basis: Contract — processing is necessary to fulfil your order.
3. Mental Health Pack requests
When you request a free Mental Health Pack using our online form, we collect your name, email address, and delivery address. This form is provided by Google Forms (a service of Google LLC). The data is accessed only by our Executive Director, downloaded to a secure password-protected device, and added to a database used solely to fulfil your request and print your mailing label.
We keep this data for 2 years after your request is fulfilled, then it is securely deleted.
Legal basis: Legitimate interests — processing your request for a free resource.
4. Kindness Kit nominations
When you nominate someone for a free Kindness Kit, we collect the nominator's name and contact details, the recipient's name and address, the reason for the nomination, and any safety concerns noted. This information may include health-related details, which is classed as special category data under UK GDPR.
This data is submitted via Google Forms, accessed only by our Executive Director, and used solely to assess the nomination and fulfil the kit if approved. It is never shared with anyone else.
We keep this data for 2 years after the request is fulfilled, then it is securely deleted.
Legal basis: Explicit consent — by submitting the form and ticking the consent box, you agree to us processing this information for this purpose only.
5. Email marketing — mailing list
If you sign up to our mailing list (for example via mentalhealth.sender.site), we collect your first name, last name, email address, country, and postcode. Your country and postcode are used only to track the geographic reach of our impact — they are never used for targeting or advertising.
This data is stored and managed by Sender.net. We use it to send you newsletters, updates, and information about our work and services. You can unsubscribe at any time using the unsubscribe link in every email, or by contacting us directly.
We keep your data on our mailing list until you unsubscribe. See Sender.net's privacy policy at sender.net/privacy-policy.
Legal basis: Consent — you have actively signed up and can withdraw consent at any time.
6. Previous customers — marketing emails
If you have previously purchased from us, we may occasionally contact you by email about similar products and services. You will always be given a clear and easy way to opt out, and we will stop contacting you immediately if you do.
Legal basis: Legitimate interests (soft opt-in under PECR).
Who we share your data with
We do not sell or rent your personal data to anyone. We share data only with the following third-party service providers who process it on our behalf:
We may also disclose your data if required to do so by law, court order, or a request from a statutory authority.
We do not transfer your data outside the UK except where the above providers operate internationally. Where this occurs, appropriate safeguards are in place under UK GDPR.
Cookies
Our website uses cookies — small files placed on your device. We use:
For more information about cookies generally, visit allaboutcookies.org.
Data security
We take reasonable steps to keep your personal data secure. Data collected via Google Forms is stored on a password-protected device and is not shared with or accessible by anyone other than our Executive Director. If we ever become aware of a data breach that poses a risk to your rights, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform affected individuals without undue delay.
How long we keep your data
Data type
Retention period
Order / purchase records
6 years
Mental health pack requests
2 years after fulfilment
Kindness Kit nominations
2 years after fulfilment
Email marketing list
Until you unsubscribe
Website browsing data
As per UENI / Google policies
Your rights
Under UK GDPR, you have the right to:
To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month, free of charge.
If you are unhappy with our response, you can contact the ICO at ico.org.uk or call 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. We encourage you to check back periodically.
Minors
This website is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.