Privacy Policy.
Introduction
The Inclusive Kitchen is committed to safeguarding the privacy and rights of all learners, families, and stakeholders. This notice outlines how we collect, use, store, and protect personal and special category data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant safeguarding legislation. We aim to be transparent in our data handling practices and ensure that all individuals engaging with our services understand how their information is managed.
What Data We Collect
We collect and process personal data that is necessary to deliver our educational services effectively and safely. This may include names, contact details, emergency information, educational support needs (including EHCP status), health and dietary information, safeguarding notes, attendance records, and communication history. In some cases, we may also collect feedback, consent forms, and engagement data to support continuous improvement and compliance.
Why We Collect It
We collect personal data to enable the safe and inclusive delivery of sensory-aware cookery sessions tailored to individual needs. Data is used to ensure appropriate support, manage risk, communicate with families and professionals, and fulfil legal obligations under safeguarding and data protection frameworks. We also use data to monitor service quality, respond to enquiries, and maintain accurate records for accountability and reporting.
How We Store and Protect It
All digital data is stored securely using encrypted cloud platforms, specifically Google Workspace and Notion. Access is restricted to authorised personnel through password protection and role-based permissions. These platforms provide audit trails, version history, and compliance with international security standards. Physical records, where used, are stored in a lockable cabinet with limited access. We regularly review our data handling procedures to ensure they remain compliant and proportionate to the needs of our learners and stakeholders.
Who We Share It With
We may share personal data with Suffolk County Council (SCC), educational professionals, and safeguarding teams where necessary and lawful. Data is only shared when it supports the wellbeing, safety, or educational progress of the learner, or when required by statutory guidance. We do not share personal data with third parties for marketing or commercial purposes.
How Long We Keep It
Data is retained in accordance with our internal retention policy and statutory requirements. Personal and educational records are typically held for up to six years following the end of engagement. Safeguarding records are retained in line with current legislation. Consent forms, communications, and attendance data are reviewed annually. When data is no longer required, it is securely deleted or destroyed.
Your Rights
Under UK GDPR, individuals have the right to access their personal data, request correction or deletion, object to processing, and withdraw consent where applicable. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully. We are committed to responding to all data rights requests promptly and respectfully.
Contact Information
If you have any questions about this privacy notice or wish to exercise your data rights, please contact:
Julieanne Cresswell
Founder & Senior Manager
The Inclusive Kitchen
Email: julieanne@theinclusivekitchen.co.uk
Website: www.theinclusivekitchen.co.uk
