Privacy Policy (UK GDPR)
Draft for operational review — Last updated November 2026
1. Identity of the Data Controller
The National Community Law Project CIC (Company No. 13353358), registered at 4th Floor, 14 Museum Place, Cardiff, Wales, CF10 3BH, is the data controller responsible for personal information processed through this website and our support operations.
2. Personal Information We Collect
We collect contact details (name, email, telephone, postcode area), enquiry summaries, and communication logs. We request that clients do not transmit unnecessary special category data through initial enquiry forms.
3. Lawful Bases for Processing
We process personal data based on legitimate interests (responding to enquiries), performance of a contract (delivering agreed practical support), and legal obligations under UK law.
4. Your Rights
Under UK GDPR, you have the right to access, rectify, erase, or restrict processing of your personal data, or lodge a complaint with the Information Commissioner's Office (ICO).