Legal
Privacy Policy
Last updated October 2026. This explains exactly what we collect through this website and how we use it.
Who we are
Darlington Unity Community Trust ("DUCT", "we") is the data controller for information collected on duct.org.uk. Contact: info@duct.org.uk, Northgate Ward, Darlington.
What we collect
- Support sign-up: name, age bracket, email, mobile number (optional), ethnic background (optional), consent and the date/time of sign-up.
- Share an idea: name, email, your idea, consent and the date/time.
- Admin accounts: email and password (securely hashed) for DUCT trustees only.
- Cookie preference: your accept/reject choice, stored only in your browser.
We do not use advertising or analytics trackers.
Why we use it and our lawful basis
We rely on your consent (UK GDPR Art. 6(1)(a)) to count and demonstrate community support, contact you with community updates and event invites, and follow up on ideas. Ethnic background is special category data processed with your explicit consent (Art. 9(2)(a)) and only reported to councils and funders in anonymised, aggregate form.
Support reports shared with authorities to prove sign-ups are genuine may include names and sign-up dates, never sold or used for marketing by others.
AI
Admins may use AI to group similar ideas. Only idea text is sent, and it is not used to train AI models. We will never use your data to train AI without your separate consent.
Sub-processors
| Provider | Purpose | Safeguards |
|---|---|---|
| Lovable (hosting & database) | Website hosting, secure database and storage of form submissions | EU / UK, with standard safeguards |
| Lovable AI Gateway | Grouping similar ideas for admin review (ideas text only) | Processed on request; not used to train AI models |
| Email delivery service (via Lovable) | Sending confirmation emails and admin notifications | Standard contractual safeguards |
How long we keep it
We keep sign-ups and ideas while DUCT's campaign and community work continues, and review them at least yearly. You can ask us to delete your data at any time.
Your rights
You can access, export, correct or delete your data, withdraw consent, or object to processing. Email info@duct.org.uk with the subject "Data request" from the address you signed up with — we respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Security
Data is stored in a secured database accessible only to authorised DUCT admins. We never sell or share your personal data for marketing.
