Privacy policy

Last updated: September 2026.

Who we are

Youth Services CIC (“we”, “us”) is a Community Interest Company. We are the data controller for the personal information described in this policy. You can contact us at donna.stevenson@youth-services.org or PA104 Science Park, Glaisher Drive, Wolverhampton WV10 9RU.

What information we collect

• Referral information: details about the young person being referred, the person making the referral, parents or carers, the reasons for referral, risk and safeguarding information, and other services involved.
• Intervention records: information we record while working with a young person, including goals, progress and outcomes, and notes from counselling or therapeutic sessions where these are part of the support.
• Enquiries: your name, contact details and message when you contact us.
• Website data: basic technical information needed to run the website securely.

Why we use it and our lawful basis

We use personal information to process referrals, deliver and review interventions, keep young people safe, report outcomes to referrers and commissioners where agreed, and respond to enquiries. Depending on the situation, our lawful bases under UK GDPR are consent, legitimate interests, performance of a contract (for commissioned services), and legal obligation. Where we process special category data, such as health or SEND information, we do so to provide our service and to safeguard children and young people, as permitted by the Data Protection Act 2018.

Safeguarding and sharing

We do not sell personal information. We share information with schools, local authorities and other professionals where this is part of the agreed referral and intervention. If we believe a child or young person is at risk of harm, we may share information with the relevant agencies without consent where the law allows, to keep them safe.

How long we keep it

We keep records only for as long as necessary for the purpose they were collected for, and in line with safeguarding and legal requirements. Records are then securely deleted.

Keeping it secure

We use appropriate technical and organisational measures to protect personal information, including restricted access and secure storage.

Your rights

You have the right to access your information and to ask us to correct, delete or restrict it. You can also object to how we use it. To make a request, contact us using the details above. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ico.org.uk).