NAPAC Privacy Policy

Last updated: 2 June 2025

The National Association for People Abused in Childhood (NAPAC) is committed to protecting the privacy and confidentiality of everyone who interacts with us. This Privacy Policy explains how we handle personal data depending on the nature of your contact with us.

1. When Survivors Contact Our Support Services

We do not record any calls made to our support line.

All information shared with us is treated with the utmost confidentiality. Data is collected only if voluntarily given and is anonymised and aggregated to improve our services and advocacy.

We do not:

• Provide legal advice, therapy, mental health diagnoses, or call-backs.
• Retain personal details unless necessary for immediate support or safeguarding purposes.

We do:

• Provide a safe space to express feelings and explore recovery needs.
• Signpost to relevant services where appropriate.

Phone Support and Caller Information
When you contact our telephone support line, your full phone number may be visible to our trained team if it is not withheld. This is a necessary safeguarding measure, allowing us to take appropriate action if someone is at immediate risk of serious harm, or if we need to manage abusive or inappropriate use of the service.

We do not use or share callers’ numbers beyond what is necessary for safety. Internally, only the final four digits are used for monitoring and safeguarding purposes. We do not record calls.

Behavioural Expectations
Abuse, threats or aggression towards our staff will not be tolerated. Anyone behaving in this way may be barred from accessing our services.

2. Email Support Services

We can see your email address when you contact us, but it is used only to respond to your enquiry and is never shared without your consent.

3. Confidentiality and Legal Exceptions

We are committed to confidentiality. Anonymised data may be used to inform policy and improve survivor services. However, we are legally obliged to break confidentiality if:

• You disclose information about an adult or child at imminent risk of serious harm.
• We receive information relating to terrorism or money laundering.

Where possible, you will be informed during the contact.

4. Contact Through Training, Consultancy, and Media

When contacting us about training, consultancy, partnerships, media or general enquiries:

• Your data (e.g. name, email, organisation) is stored securely but not anonymised.
• We use it to respond to your enquiry, deliver services, and maintain professional relationships.
• It is never sold or shared without your consent, unless required by law.

5. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

• Consent (Article 6(1)(a))
• Legitimate interests (Article 6(1)(f)) — particularly for anonymised data used in advocacy or safeguarding
• Legal obligation (Article 6(1)(c)) — e.g. in safeguarding or reporting duties

6. Retention Periods

• Anonymised support contact data is retained for up to 5 years to help improve services and inform advocacy.
• Personal data from professional contacts (e.g. training enquiries) is retained for up to 7 years, in line with standard charity sector practice.

7. Your Rights

You have the right to:

• Request access to personal data we hold about you
• Request corrections to inaccurate data
• Request deletion of your data (where applicable)
• Restrict or object to certain types of processing
• Withdraw consent at any time (where processing is based on consent)
• Request portability of your data (where applicable)
• Lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

To exercise your rights, contact: info@napac.org.uk

8. Data Transfers Outside the UK

Where data is transferred outside the UK (e.g. cloud storage services), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or UK adequacy regulations.

9. Security Measures

We use encryption, secure servers, limited access protocols, and regular security reviews. All third-party data processors are vetted for compliance with data protection regulations.

10. Cookies and Website Tracking 

We may use cookies to enhance website functionality and gather anonymous usage statistics. See our Cookie Policy for details and how to manage your preferences.

11. Updates to This Policy

This policy may be updated periodically. We will highlight major changes and always publish the latest version on our website.

Contact Us

Email: info@napac.org.uk
Website: www.napac.org.uk