For adults (18 and over) who register for, or take part in, NOVEYA's community programmes.

Last updated: 15 October 2026

In short

  • We collect only what we need to arrange your support and run our programmes.

  • Your details are seen only by the NOVEYA team members who arrange or deliver your support.

  • We never sell your information and we do not use it for advertising.

  • What you tell us stays confidential, except where someone may be at risk of serious harm or the law requires us to share it.

  • You can ask to see, correct or delete your information at any time by emailing office@noveya.co.uk.

Who we are

NOVEYA C.I.C. is the controller of the personal information described in this notice.

This notice covers our community programmes. Our website and contact form are covered by our separate Privacy Policy.

What information we collect

When you register, we collect:

  • your full name, email address and, if you give it, your phone number;

  • how you would like us to contact you;

  • your town or postcode;

  • which programmes you are interested in, and your preferred format and language;

  • whether it is safe for us to leave you a voicemail or message, and anything that would make our support easier for you to use;

  • anything else you choose to tell us in the form, and how you heard about NOVEYA.

If you register someone else, for example a family member or a person you support professionally, we also collect the details you give us about them. Please make sure they know you are registering them. When we first contact them, we will tell them where we got their details from and point them to this notice.

When you take part, we may also hold:

  • attendance registers (name, whether it is your first session, and signature);

  • notes about the support we arrange for you and the contact we have with you;

  • your answers to short questionnaires at the start and end of some programmes, which help us understand whether our support is working. These are optional.

  • feedback forms. Where we offer an anonymous option, we do not link your feedback to your name.

Information about health, addiction or recovery. Some of the information we hold may tell us something about your health or your circumstances. For example, choosing "Recovery programmes" or "Support for people affected by addiction" does this. The law calls this special category information, and we give it extra protection. We only ask for what we need. Please do not include detailed health information in the registration form; we will talk this through with you.

Safeguarding. If we become concerned that someone may be at risk of harm, we record what was shared and what action we took.

How we use your information

We use your information to:

  • contact you about your registration and arrange the right support;

  • run our sessions, including registers, planning numbers and keeping people safe;

  • protect children and adults who may be at risk;

  • understand and improve our programmes, and report to funders. Funders only ever receive anonymised totals, never names or personal details;

  • meet our legal obligations and deal with any complaints.

We will not send you newsletters or news about NOVEYA unless you separately agree to receive them.

Our lawful bases

  • Contact details, registration and attendance: our legitimate interests in providing the free community support you have asked for and running our programmes safely (UK GDPR Article 6(1)(f)).

  • Information about health, addiction or recovery: your explicit consent (UK GDPR Article 9(2)(a)), which you give when you register. You can withdraw your consent at any time by contacting us. This will not affect what we did before you withdrew it, but it may mean we cannot offer some kinds of support.

  • Safeguarding: where it is necessary to protect a child or an adult at risk, we may record and share information without consent. We rely on the safeguarding condition in the Data Protection Act 2018 (Schedule 1, Part 2, paragraph 18) and, in an emergency, on protecting someone's vital interests (UK GDPR Article 6(1)(d)).

  • Legal obligations: where the law requires us to keep or share information (UK GDPR Article 6(1)(c)).

You do not have to give us your information, and there is no legal or contractual requirement to do so. Without your contact details, however, we cannot arrange support for you.

Confidentiality and its limits

We keep what you tell us confidential. We will only share information without your agreement if:

  • someone is at serious risk of harm;

  • a child may be at risk;

  • there is an emergency; or

  • the law requires it.

Where it is safe and appropriate, we will tell you before we share anything.

Who can see your information

  • The NOVEYA team. Only authorised team members and volunteers who arrange or deliver your support: our Managing Director, our Director of Digital Development & People Operations and our Client Services & Administration Manager. Everyone is bound by our confidentiality rules.

  • Service providers. We use Google Workspace for our forms, email and secure file storage. Our service providers act only on our instructions.

  • Messaging apps and video calls. If you contact us, or we arrange support with you, through WhatsApp, Facebook Messenger or Instagram (provided by Meta), or you have an online session with us on Microsoft Teams (provided by Microsoft) or Zoom (provided by Zoom), your messages and calls pass through these services. We use them only from NOVEYA's official accounts and the NOVEYA number 07888 798915, never from personal accounts. Meta, Microsoft and Zoom also process some information, such as account and connection details, under their own privacy policies. You can always choose phone, email or a face-to-face meeting instead. Please do not send detailed health information in messages; we will talk this through with you.

  • Other services, with your agreement. For example, if you ask us to refer you to your GP or another local service.

  • Safeguarding and emergencies. Emergency services, local authority safeguarding teams, the NHS or the police, where this is necessary to keep someone safe.

We never sell your information.

International transfers

Google may process information outside the United Kingdom, including in the United States. Where this happens, Google relies on safeguards recognised under UK data protection law: Google LLC is certified under the UK Extension to the EU-US Data Privacy Framework, and Google's data processing terms include the UK International Data Transfer Addendum. More information: workspace.google.com/terms/dpa_terms.html

WhatsApp is provided to people in the UK by WhatsApp LLC in the United States, and WhatsApp, Facebook Messenger and Instagram use Meta's global infrastructure, including in the United States. Microsoft Teams and Zoom may also process information outside the United Kingdom. Meta, Microsoft and Zoom explain how they protect information transferred outside the UK in their own privacy policies: whatsapp.com/legal/privacy-policy, facebook.com/privacy/policy, privacy.microsoft.com/privacystatement and zoom.com/en/trust/privacy/privacy-statement.

How long we keep your information

  • If you register but do not go on to take part: 12 months after our last contact with you.

  • If you take part in a programme: 6 years after your last involvement with NOVEYA. This includes your registration, any consent you gave us, attendance registers and notes about your support.

  • Safeguarding records: at least 6 years after the concern was raised, then reviewed. Where safeguarding guidance requires it, we keep them for longer.

After that, we securely delete your information or anonymise it so it no longer identifies you.

Children and young people

Our registration form and our support programmes are for adults aged 18 and over. Young people take part in NOVEYA's psychoeducation workshops only through their school or youth organisation, and NOVEYA does not register them or collect their contact details. Young people have their own rights over any information about them, and a young person who understands what it means can contact us about it directly.

When we run workshops in schools, the school keeps its own records under its own privacy arrangements. We tell the school, pupils and parents what information NOVEYA itself collects.

Photos and recordings

Taking part in a programme never means agreeing to be photographed or recorded. We ask separately before taking any photos or recordings, and you can say no. We do not record online sessions without telling you and asking first.

Your rights

You have the right to:

  • ask for a copy of your information;

  • ask us to correct information that is wrong or incomplete;

  • ask us to delete your information;

  • ask us to limit how we use it;

  • object to how we use it, where we rely on legitimate interests;

  • receive information you gave us in a portable format, where this applies;

  • withdraw your consent at any time, where we rely on consent.

To use any of these rights, email office@noveya.co.uk. It is free. We will reply within one month, and we may need to confirm your identity first. Some rights have limits; for example, we may need to keep safeguarding records.

Complaints

If you are unhappy with how we have handled your information, please tell us first at office@noveya.co.uk, and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Automated decisions

We do not make decisions about you by automated means alone.

Not a crisis service

NOVEYA is not a crisis service. If you or someone else is in immediate danger, call 999 or go to A&E. For urgent mental health help, call NHS 111 and select the mental health option. Samaritans: 116 123 (free, 24/7).

Changes to this notice

We will update this notice when our programmes or the law change. The latest version will always be available on our website, with the date it was last updated.