Call us
Jonathan’s House CIC

Privacy Policy

Last updated: 9 November 2026

The men who come to us trust us with some of the most personal parts of their lives. This policy explains, in plain language, what information we hold about you, why we hold it, who we share it with and the choices you have.

1. Who we are

This website and our services are run by Jonathan’s House CIC, a not-for-profit Community Interest Company. We are responsible for the personal information described in this policy, which makes us the “data controller” under UK data protection law.

  • Registered company number: 15534364 (registered in England and Wales)
  • Registered office: Hartshorn House, Health and Wellbeing Centre, Neath Road, Maesteg, CF34 9EE
  • ICO registration number: ZB988469
  • Data Protection Lead: Jody Goldsworthy, Chief Executive
  • Contact: office@jonathanshouse.org.uk or 01633 837800

We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

2. What we collect and why

We only collect what we genuinely need to support you, run our services safely and meet our legal duties.

When you contact our helpline or live chat

Your first name or the name you choose to give, how to contact you safely, and what you tell us about your situation. You do not have to give your full name to talk to us.

When you are referred to us, or refer yourself

Your name, date of birth, contact details and the safest way to reach you, and if you choose to tell us, your gender identity, pronouns, ethnicity and faith. We also record what support you are looking for, any accessibility needs, and information about risk to you or others. If a professional refers you, we record their name, role and contact details.

When you use our support services

Notes of your counselling sessions, support group attendance, the support and advice we give you, and any risk assessment or safety plan we agree with you. This can include information about your health, your relationships, your children and your experience of abuse.

When you join a course or training

Your name, contact details, attendance, course progress, assessments and certificates. For the Circle of Security Parenting course, we may also prepare a court report at your request. If you use our online learning area, we hold your account details and progress.

When you donate, sponsor or buy from us

Your name, contact details, the amount and date of your gift and, for businesses, your organisation’s details and any sponsorship agreement. Card and bank payments are handled securely by our payment providers. We never see or store your full card number.

When you contact us or book an event

Your name, contact details and your message, and for events, your booking details.

When you visit our website

Basic technical information such as your device, browser and IP address, which our website and security tools need to work. See Cookies and our website.

If you work or volunteer with us

Information needed for safer recruitment, DBS checks, training, supervision and pay. We explain this in more detail when you apply.

3. Our legal reasons for using your information

Data protection law requires us to have a lawful reason for each use of your information. For especially sensitive information, such as your health, ethnicity, faith or sexuality, we need an additional legal condition.

What we doOur lawful reasonFor sensitive information
Helpline, live chat, referrals and supportLegitimate interests in supporting men affected by abuse, or your consentYour explicit consent, or where needed for confidential counselling, advice and support, or to safeguard you or others
Counselling and therapeutic supportOur agreement with you to provide the serviceHealth and social care provided under a duty of confidentiality, or your explicit consent
Safeguarding and protecting lifeLegal obligation, vital interests or legitimate interestsSafeguarding of children and individuals at risk, or protecting someone’s vital interests
Courses, training and court reportsOur agreement with you to provide the course or reportYour explicit consent, or establishing or defending legal claims
Donations and sponsorshipOur agreement with you, and our legal obligation to keep financial recordsNot usually needed
Newsletters and updatesYour consent, which you can withdraw at any timeNot needed
Running and securing our websiteLegitimate interests in keeping our website working and secureNot needed
Staff and volunteer recruitmentLegal obligation and our agreement with youEmployment and safeguarding obligations

Where we rely on your consent, you can withdraw it at any time by contacting us. This will not affect anything we did before you withdrew it.

4. Confidentiality and safeguarding

What you tell us stays confidential within our team and the practitioners working with us. We will not share it without your agreement, except in rare situations where the law or safety requires it, for example where:

  • someone’s life is at risk, or there is a risk of serious harm to you or another person
  • a child or an adult at risk may be being harmed
  • we are required to by law or a court order
  • information is needed to prevent or detect a serious crime

Wherever it is safe and possible, we will talk to you first and explain what we are sharing, with whom and why. We record every decision to share information without consent, and the reasons for it.

5. Who we share information with

We never sell your information or share it for anyone else’s marketing. We only share it where it is necessary:

  • Counsellors and practitioners who deliver services on our behalf, bound by confidentiality and our policies
  • Statutory and partner agencies such as the police, social services, MARAC, health services or another support service, with your consent or where safeguarding requires it
  • Professionals who referred you, but only with your consent
  • Courts and legal representatives, for example when you ask us for a court report
  • Funders and regulators, who only ever receive anonymous figures and stories unless you have given your clear permission

Service providers who process information for us

We use trusted providers to run our services. They may only use your information on our instructions and must keep it secure:

ProviderWhat they do for us
Our website hosting and maintenance providersHost, back up and secure this website
Microsoft 365Email, secure file storage and online meetings
Tawk.toOur website live chat
PayPal and SquareProcess donations and payments securely
EventbriteEvent bookings
Email delivery serviceSends emails from our website, such as form confirmations
GoogleWebsite fonts and page translation

6. Information stored outside the UK

Some of our providers, such as Microsoft, Tawk.to, PayPal, Square, Eventbrite and Google, may store or access information outside the UK. Where this happens, we make sure the transfer is protected by UK data protection law, for example because the country has been approved by the UK government or because the provider has signed approved data transfer agreements.

7. How long we keep information

We keep information only for as long as we need it, and then delete or destroy it securely.

Type of informationHow long we keep it
Client case files, counselling notes and support records6 years after your last contact with us
Safeguarding records and records of risk10 years after the last entry, or longer if a case is ongoing or someone is still at risk
Helpline and live chat records where no ongoing support followed2 years
Referrals that did not lead to support12 months
Course records, certificates and court reports6 years after the course or report
Donation, sponsorship and financial records6 years, as required by HMRC
General enquiries and emails2 years
Social media messages12 months
Website backups12 months
Unsuccessful job and volunteer applications12 months

8. Keeping your information safe

  • Sensitive records are kept in secure, password-protected systems that only authorised people can access
  • We do not send sensitive information by unencrypted email or store it on personal devices
  • Everyone who works or volunteers with us is trained in confidentiality and data protection and signs a confidentiality agreement
  • Paper records are locked away and shredded when no longer needed
  • If something goes wrong, we act quickly. Where a data breach could put people at risk, we report it to the Information Commissioner’s Office within 72 hours and tell the people affected

9. Your rights

You have the right to:

  • See the information we hold about you and get a copy of it
  • Correct anything that is wrong or incomplete
  • Ask us to delete your information
  • Ask us to limit how we use your information
  • Object to how we use your information
  • Receive your information in a format you can take elsewhere
  • Withdraw your consent at any time, where we rely on it

To use any of these rights, contact our Data Protection Lead at office@jonathanshouse.org.uk or on 01633 837800. It is free, and we will usually respond within one month. We may need to confirm your identity first, to protect your information. Sometimes we cannot agree to a request, for example where we must keep safeguarding records or where sharing would put someone else at risk. If so, we will explain why.

10. Cookies and our website

Cookies are small files saved by your browser. We use cookies that are needed for the website to work and stay secure, to run our live chat, translation and donation forms, and to remember your choices. We do not use advertising or tracking cookies. You can control or delete cookies through your browser settings at any time.

Our website links to other organisations’ websites, such as our partners. They have their own privacy policies, and we are not responsible for how they handle your information.

11. Staying safe online

If you are worried that someone may check your phone or computer:

  • Use the Exit Site button on our website to leave quickly
  • Use a private or incognito browser window, so this website is not saved in your history
  • Clear your browsing history and cookies after visiting us
  • Tell us the safest way and time to contact you, and whether we can leave messages

12. Children’s information

Our services are for adults aged 18 and over. We may hold information about your children where you share it with us, for example on our parenting course or when we are thinking about safety. We treat it with the same care, and share it only where it is needed to keep a child safe.

13. Questions and complaints

If you have a question or concern about how we use your information, please contact our Data Protection Lead first at office@jonathanshouse.org.uk, on 01633 837800, or by post at our registered office. We will do our best to put things right.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection: ico.org.uk/make-a-complaint or 0303 123 1113.

14. Changes to this policy

We review this policy at least once a year and whenever our services or the law change. The date at the top shows when it was last updated.