The Synergi Project (‘Synergi’) is committed to protecting the privacy and personal data of our members, supporters, and the general public, in accordance with our responsibilities under the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

This Privacy Policy explains how we collect, use, store, and protect your personal data, including the recent transition from our previous data controller, the National Service Users Network.

Who we are

The Synergi Project (‘Synergi’) is committed to protecting the privacy and personal data of our members, supporters, and the general public, in accordance with our responsibilities under the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

Contact details:
Email: info@synergiproject.org.uk
Data Controller: The Synergi Project (‘Synergi’)

Our lawful basis for processing

Our primary lawful basis for collecting and processing personal data is Consent (UK GDPR Article 6(1)(a)), unless otherwise stated. You may withdraw your consent at any time by contacting us using the details above or the unsubscribe link provided in our communications.

Data we collect

We may collect and process the following types of personal data:

• Name
• Email address
• Postcode or geographic location (if provided)
• Contact preferences
• Communication history and engagement (e.g. petitions signed, emails opened)
• Consent records
• Any other information you voluntarily provide

How we collect your data

We collect your data through:

• Our website sign-up forms
• Petition platforms
• Event registrations
• Surveys or online tools
• Transferred data from National Survivor User Network (NSUN)] (with prior consent and secure handover, as per joint controller agreement under UK GDPR Article 26)

Purpose of data processing

We use your data to:

• Communicate with you about our campaigns, events, and initiatives
• Send newsletters, updates, and calls to action
• Understand supporter engagement and improve our impact
• Comply with legal obligations

Data sharing and Third parties

We do not sell or rent your personal data. We may use third-party services (e.g. Mailchimp, Action Network, Google Workspace) to process data securely on our behalf under Data Processing Agreements in line with Article 28 of the UK GDPR.

Where required, data may be hosted outside the UK, but only with providers certified under appropriate safeguards (e.g. UK IDTA, EU SCCs).

Transfer from The National Survivor User Network (NSUN)

Personal data previously held by the National Survivor User Network (NSUN) who acted as fiscal host for the Synergi Project has now been securely transferred to the Synergi Project (“we” or “us”), which is now an independent unincorporated organisation. Your personal data has been transferred to us for the continued operation of the Synergi Project. We will process your personal data fairly and lawfully and in accordance with the principles and requirements of the UK GDPR.

Under the UK GDPR, we are required to provide you with information about who we are, how we process your personal data and for what purposes and your rights in relation to your personal data. This information is provided in this privacy policy and it is important that you read that information.

Please contact (Email: info@synergiproject.org.uk Data Controller: The Synergi Project (‘Synergi’))

if you have any queries about this privacy policy or our data protection practices. You can also find details of how to exercise your data protection rights in this policy

Your rights under UK GDPR

• You have the following rights:
• Right to be informed – about how your data is being used
• Right of access – to request copies of your personal data
• Right to rectification – to correct inaccurate or incomplete data
• Right to erasure – to request deletion of your data (“right to be forgotten”)
• Right to restrict processing – to limit how we use your data
• Right to data portability – to transfer your data to another provider
• Right to object – to how your data is used for direct marketing or legitimate interests
• Rights related to automated decision making – if applicable

To exercise these rights, please contact us at info@synergiproject.org.uk

Data security

• We use appropriate technical and organisational measures to protect your personal data including:
• Secure passwords and encryption
• Limited access to authorised personnel
• Encrypted data transfer and storage

Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. If you unsubscribe or request erasure, we will delete your data securely and in accordance with our obligations under UK GDPR Article 17.

Children’s data

We do not knowingly collect data from individuals under 13 years of age. If you believe we have collected such data without appropriate consent, please contact us immediately at info@syneriproject.org.uk

Complaints and regulatory information

If you have any concerns about how your data is being used, please contact us first so we can address the issue.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK’s independent authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Update to this policy

We may update this policy occasionally to reflect changes in our operations or legal requirements. Any significant updates will be communicated via email and/or our website.

Thank you for supporting and trusting Synergi. Your data privacy and security are central to everything we do as a movement.