How we look after your information
We only collect what we need, we keep it safe, and we never sell it. Here is what happens to your information when you use this website.
Last updated 19 September 2026.
Who we are
Hucknall Hope Lea Project is a registered charity (no. 1069660) and a company (no. 3321416). We run a Day Service and a Supported Living service for adults with learning disabilities. Our address is 150 Watnall Road, Hucknall, Nottinghamshire, NG15 7NH.
We are the “data controller” for the information described on this page, which means we decide how it is used and we are responsible for looking after it. If you have any question about it, you can email admin@hopelea.com or phone 0115 9530 825.
What we collect, and why
When you send us an enquiry
If you use the contact form we collect:
- your name and email address, and your phone number if you choose to give it;
- what your message is about, and the message itself;
- the date and time you sent it, and the fact you ticked the box to say you were happy for us to use your details;
- a shortened version of your IP address (we remove the last part, so it can’t point to one person), and, if you allow Google reCAPTCHA, the score it gave us for whether you look like a real person.
We use this to read and answer your message, to keep a record of what we said, and to protect the form from spam and abuse. We email you a short automatic thank-you so you know your message arrived.
Our legal basis for this is your consent (the tick box) and our “legitimate interest” in answering people who contact us and in keeping our website free from spam and abuse.
When you offer to support us
If you use the “Become a supporter” form we collect your name, email address and phone number; your business or organisation, website, town and postcode if you give them; the ways you could help, what you can offer and when you are available; plus the same date, consent, shortened IP address and reCAPTCHA details as for an enquiry. We use this to get in touch about your offer, to keep a record of what we said to each other, and to protect the form from spam. We email you a short automatic thank-you so you know your offer arrived. Our legal basis is your consent (the tick box) and our legitimate interest in organising the help people offer us. You can ask us to see, correct or delete your details at any time.
When you sign up to volunteer
If you use the “Volunteer with us” form we collect your name, email address and phone number; your town and postcode if you give them; the roles you are interested in and the experience you ticked for each; the days and times you could help; whether you have a DBS check; what you tell us about yourself; plus the same date, consent, shortened IP address and reCAPTCHA details as for an enquiry. We use this to get in touch about volunteering, to match you with a suitable role, and to keep a record of what we said to each other. We email you a short automatic thank-you so you know your sign-up arrived. Our legal basis is your consent (the tick box) and our legitimate interest in recruiting and organising volunteers safely. If you go on to volunteer with us, we will explain what else we keep (such as references and DBS details) at that point. You can ask us to see, correct or delete your details at any time.
If you are one of our staff with an admin account
We keep your name, work email address, a scrambled (“hashed”) version of your password, an optional profile photo, and the times you sign in, so that you can use the admin area securely.
If you register as a team member
Staff and volunteers can create a login to look after their own profile. We keep your name, email address, the role you told us, a scrambled (“hashed”) version of your password, and the dates you registered and last signed in. Anything you write for your profile (name, position, bio, photo) is checked by an administrator before it is shown on the Team page; until it is approved it is kept privately. You can delete your account and your profile yourself at any time from your dashboard, or ask us to.
If you subscribe to our newsletter
You can join our mailing list on the newsletter page or by ticking the optional box on our enquiry form. We keep your email address, your name if you gave it, when and how you agreed, and whether you have unsubscribed. We only add you to the list after you press the button in a confirmation email, and every newsletter has a one-click link to unsubscribe. We use your details only to send you our newsletter and are the only people who see them: we don’t sell or share them. Newsletters are sent with our own website’s email system. If you ask to be removed we keep a record of your address marked “unsubscribed” so that we don’t email you again by mistake. Sign-ups that are never confirmed are deleted after 14 days. Our administrators and team members are also on the list for news about the charity and can unsubscribe in the same way. You can ask to see, correct or delete your details at any time by contacting us.
If you donate
Donations are taken by Stripe, on Stripe’s own secure page: we never see or store your card details. Stripe collects the information it needs to take the payment and prevent fraud, and is responsible for that under its own privacy policy. We keep a record of your gift (the amount, the date, whether it is one-off or monthly), your name if you gave it, and your email address, which Stripe passes to us so we can thank you. If you choose Gift Aid we also keep your full name, home address and the declaration you made, which we are required to keep for our records and to claim Gift Aid from HMRC. We use this only to process and thank you for your donation, to keep our accounts and, where you asked us to, to claim Gift Aid. We keep these records for as long as our accounts and HMRC require. A donation you start but do not complete is deleted after 30 days.
If you appear on our Team page
Our Team page shows the name, job title, a short description and (if given) a photo of some of our staff and volunteers. We only publish this with the person’s agreement, and we remove it if they ask us to.
Information from our web host and email provider
Like every website, the company that hosts this site keeps basic technical records (such as IP addresses and the pages requested) in its server logs, for security and to keep the service running. Our emails are sent through our hosting provider’s mail system.
Who sees it, and who we share it with
Enquiries are read only by the members of our team who need to answer them. We never sell your information or use it for marketing. We share it only with the companies that help us run the website, and only so they can provide that service:
- Our web hosting and email provider, which stores the website, the enquiry records and the emails.
- Google: this site loads its fonts from Google Fonts, so Google receives your IP address when a page loads. If you allow it in the cookie settings, we also use Google reCAPTCHA on our forms, such as the contact, sign-up, sign-in and donation forms (see “Cookies” below). Google may process information outside the UK, under its own privacy policy and the safeguards that UK law requires.
We may also share information if the law requires it, or if it is needed to protect someone from harm.
How long we keep it
We keep enquiries for 12 months after they are received, and then delete them, unless there is a good reason to keep them longer (for example, you have become a supporter, volunteer or service user and we hold your details for that reason, under the rules for that service). Blocked messages are treated the same way. Staff account details are deleted when the person leaves.
Your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:
- ask what information we hold about you, and get a copy;
- ask us to correct anything that is wrong;
- ask us to delete your information (in most cases we will);
- ask us to stop using it in certain ways, or object to how we use it;
- take back your consent at any time (this doesn’t affect anything we did before you did).
To use any of these rights, email admin@hopelea.com or phone 0115 9530 825. We will normally answer within one month. If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We would be grateful if you gave us the chance to put things right first.
Cookies
Cookies are small files that a website saves on your device. We use as few as possible. We don’t use advertising or analytics (visitor-tracking) cookies.
| Cookie | What it does | How long | Needs your OK? |
|---|---|---|---|
| PHPSESSID | Keeps the contact form secure (a hidden anti-forgery code) and shows your "thank you" message. | Until you close your browser | No: essential |
| hl_consent | Remembers your cookie choices so we don't keep asking. | 6 months | No: essential |
| _GRECAPTCHA | Set by Google to tell people from bots. | 6 months | Yes: Spam protection (Google reCAPTCHA) |
| hlsid_team | Only used by our team members when they sign in to their own area. Visitors never receive it. | Until the browser is closed | No: essential (team member sign-in) |
| hlsid_admin | Only used by our staff when they sign in to the admin area. Visitors never receive it. | Until the browser is closed | No: essential (staff sign-in) |
You can also delete or block cookies in your browser settings. The website will still work, though our forms may ask you a quick question to check you are a person.
Children
This website is for adults, and their families, carers and professionals. It is not aimed at children, and we don’t knowingly collect information from them through the contact form.
Changes to this page
If we change how we use information we will update this page and the date at the top. If a change affects the cookies we use, we will ask you for your choices again.
Questions?
We are happy to explain anything on this page in plain words or in another format. Please email admin@hopelea.com or phone 0115 9530 825.