Privacy Policy for AGAINST ALL ODDS (Wales) Mental Health Support Group
Last Updated: September 21st 2025
At AGAINST ALL ODDS (Wales), we are committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, and protect your personal data in accordance with UK data protection laws. We take your privacy seriously and aim to be transparent about how we handle your information.
1. Introduction
This Privacy Policy applies to all personal data we collect from you when you engage with us through our mental health support services, whether online or in person. By using our services, you agree to the collection and use of information as described in this policy.
2. Who We Are
AGAINST ALL ODDS (Wales) is a mental health support group dedicated to providing assistance and support to individuals facing mental health challenges. We operate within the United Kingdom, specifically in Wales, and are a non-profit organization.
- Address: 13 Catherine Street, Cardiff CF24 4EF
- Contact:Douglas Gentles
- Email: dougie@againstallodds,wales
3. What Personal Data Do We Collect?
We collect different types of personal data from individuals who engage with our services, including:
- Personal Identifiers: Name, contact details (email, phone number, address)
- Health Data: Information about your mental health and wellbeing, including any relevant medical history or diagnoses (with your explicit consent)
- Communication Data: Correspondence with us, including emails, messages, and notes from support sessions
- Event Participation: Records of your participation in events, workshops, or group sessions
- Feedback Data: Surveys, feedback, or suggestions you provide to improve our services
Special Categories of Data
As a mental health support group, we may process sensitive data (such as your mental health condition) with your explicit consent. This data is handled with the highest level of confidentiality and security.
4. How Do We Use Your Data?
We use your personal data for the following purposes:
- Providing Support Services: To offer tailored mental health support, including one-to-one sessions, group discussions, and events.
- Communication: To contact you about our services, support group activities, or events.
- Administrative Purposes: To manage your membership and support services, including scheduling, record-keeping, and support updates.
- Improvement and Feedback: To assess and improve our services based on feedback and surveys.
5. Legal Basis for Processing Your Data
We process your personal data based on the following legal grounds:
- Consent: Where you have given explicit consent for us to process your health data or other sensitive information.
- Contractual Necessity: To provide you with support services, respond to your requests, and manage your membership.
- Legal Obligation: To comply with legal obligations, such as reporting requirements for safeguarding.
- Legitimate Interests: Where necessary for our legitimate interests, such as improving our services or maintaining records.
6. How We Protect Your Data
We take appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. This includes:
- Encryption: Data stored electronically is encrypted where applicable.
- Restricted Access: Access to personal data is limited to authorized personnel only.
- Secure Communication: We use secure channels (such as encrypted email) to communicate sensitive information.
7. Sharing Your Data
We do not share your personal data with third parties, except in the following circumstances:
- With Your Consent: If you have explicitly consented to the sharing of your information.
- Service Providers: We may share data with trusted service providers who help us deliver our support services (e.g., website hosting, event management).
- Legal Requirements: We may be required to disclose your data if mandated by law, such as for safeguarding purposes or in response to a legal request.
8. Retention of Your Data
We will retain your personal data only for as long as necessary for the purposes outlined in this Privacy Policy. Once your data is no longer required, we will securely delete or anonymize it, in accordance with our data retention policy.
9. Your Rights Under UK GDPR
As a data subject, you have the following rights in relation to your personal data:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete data.
- Right to Erasure: You can request that we delete your personal data, subject to certain conditions.
- Right to Restriction: You can request that we restrict the processing of your personal data under certain circumstances.
- Right to Data Portability: You can request that we transfer your data to another service provider in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to certain types of processing, such as direct marketing.
- Right to Withdraw Consent: If we rely on your consent to process your data, you can withdraw it at any time.
To exercise any of these rights, please contact us at [Insert Contact Information].
10. Cookies and Tracking Technologies
Our website may use cookies to enhance your experience. Cookies are small text files placed on your device to collect standard internet log information and visitor behavior. You can control cookies through your browser settings, but some features of our website may not function properly without them.
11. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any updates will be posted on this page, and we encourage you to review this policy periodically.
12. Contact Us
If you have any questions or concerns about how we handle your personal data, please contact us at:
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority on data protection.