Data Protection

1. Introduction

Lifted Life (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store and protect your information when you use our website and services.

We are a UK-registered charity (Charity Number: 1199698) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data controller

Lifted Life is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us:

• Email: info@liftedlife.co.uk
• Organisation: Lifted Life
• Charity Registration: 1199698

3. Information we collect

We collect different types of information depending on how you interact with our services:

Information you provide directly:

• Account information: Name, email address, password (encrypted)
• Profile information: Display name, bio, avatar image
• Content you submit: Volunteer applications, contact enquiries, Bible Room conversations, feedback
• Donation information: Contact details, payment information (processed securely by our payment provider)

Information collected automatically:

• Usage data: Pages visited, features used, time spent on site
• Device information: Browser type, operating system, device type
• Technical data: IP address, cookies, session information

Some information you share may reveal religious beliefs or health-related information. We only process this data with your explicit consent when you choose to submit it.

4. How we use your information

• Providing services: Operating your account, displaying content, enabling community features
• Communication: Responding to enquiries, sending service updates
• Safety and moderation: Monitoring community spaces, preventing abuse, safeguarding vulnerable users
• Improvement: Understanding how our services are used, improving user experience
• Legal obligations: Complying with legal requirements, responding to lawful requests
• Marketing (with consent): Sending newsletters and updates if you opt in

5. Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

• Contract: Processing necessary to provide our services to you
• Consent: Where you have given clear consent
• Legitimate interests: For service improvement, security and safeguarding
• Legal obligation: Where required by law
• Vital interests: In emergencies involving risk to life

6. Data sharing

We do not sell your personal data. We may share your data with:

• Service providers: Hosting, email delivery, payment processing
• Legal authorities: When required by law or to protect safety
• Safeguarding partners: In cases of serious safeguarding concerns

All third-party service providers are contractually bound to protect your data and only process it on our instructions.

7. Data retention

We retain your data only as long as necessary:

• Account data: Until you delete your account
• Content you submit: Until you request deletion or withdraw consent
• Safe Space conversations: Retained securely, reviewable periodically
• Analytics data: Aggregated and anonymised after 12 months
• Legal records: As required by law (typically 6–7 years for financial records)

8. Your rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Restriction: Request limited processing of your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@liftedlife.co.uk. We will respond within one month.

9. Cookies

We use cookies for:

• Essential cookies: Required for the site to function (authentication, security)
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Understand how visitors use our site (anonymised)

You can control cookies through your browser settings. See our Cookie Policy for more details.

10. Security

We implement appropriate technical and organisational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Row-level security on database records
• Access controls limiting who can view sensitive data
• Regular security reviews and updates

11. Children

Our services are not intended for children under 13. Users between 13–18 should have parental or guardian consent. If we become aware that we have collected data from a child under 13 without appropriate consent, we will delete it promptly.

12. Complaints

If you are unhappy with how we have handled your data, please contact us first at info@liftedlife.co.uk. We will do our best to resolve your concerns.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Helpline: 0303 123 1113