Privacy Policy

At The Resilient Hub and associated businesses, we are committed to protecting the privacy of our students, clients, families, franchisees, staff members, website visitors and service users. This Privacy Policy outlines how we collect, use, store and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

This Privacy Policy applies to:

• The Resilient Hub
• The Resilient Kid
• The Resilient Teen
• The Resilient People
• The Resilient School
• The Resilient Academy
• The Resilient Franchise
• Associated programmes, courses, coaching, training and franchise services operated under The Resilient ecosystem

Our work focuses on helping children, teens, adults, schools, organisations and communities build confidence, emotional wellbeing and resilience.

2. What Data We Collect

We collect only the information necessary to provide safe, effective and appropriate services. Depending on the type of service, this may include:

• Children and student data: names, age, date of birth, school information, wellbeing information and support needs.
• Parent and guardian data: names, contact details and relevant family or support information.
• Teen and adult client data: contact details, appointment information and information shared as part of coaching, therapeutic or educational services.
• School and organisation data: contact information, safeguarding or operational information where relevant.
• Coach, franchisee and staff data: employment, compliance, training, financial or operational information.
• Website data: browser, device, cookies, security and performance information.

3. How We Use Personal Data

Personal data may be used to:

• Deliver coaching, therapy, courses, workshops and training.
• Support safeguarding and wellbeing responsibilities.
• Communicate with parents, carers, schools, clients and organisations.
• Manage enquiries, appointments, bookings and programmes.
• Operate and support franchise, coach and training systems.
• Improve our services, systems and website experience.
• Maintain legal, insurance and compliance requirements.

We do not sell personal information or share it with third parties for marketing purposes.

4. Legal Basis for Processing

We process personal data under one or more lawful bases, including:

• Consent — where consent has been given.
• Contractual necessity — where processing is required to deliver agreed services.
• Legitimate interests — to improve services, communicate with users or manage operations.
• Legal obligations — including safeguarding, financial, insurance or employment obligations.

5. Data Security

• We take reasonable steps to protect personal data against loss, misuse or unauthorised access.
• Digital systems are password protected and restricted to authorised users.
• Paper records are stored securely where applicable.
• Staff, coaches and franchisees are expected to follow appropriate confidentiality and data protection practices.

6. Data Retention

We retain personal data only for as long as necessary to provide services, fulfil legal obligations, support safeguarding or maintain operational records. Data that is no longer required is securely deleted or destroyed.

7. Your Rights

Under UK GDPR, individuals have rights regarding their personal data, including the right to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion where appropriate.
• Withdraw consent where consent is the lawful basis.
• Object to certain types of processing.
• Request restriction of processing in some circumstances.

8. Sharing Information

We may share information with trusted service providers or professionals where necessary for service delivery, safeguarding, legal compliance or operational purposes. Information is shared only when appropriate and relevant safeguards are in place.

9. Cookies and Website Usage

Our websites may use cookies or analytics tools to improve website functionality, security and user experience. By using our websites, you consent to the use of cookies where applicable.

10. Data Breaches

In the event of a data breach, we will investigate promptly and take appropriate action. Where legally required, we will notify affected individuals and the Information Commissioner’s Office.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be published on our websites.

12. Contact Information

For further information about data protection rights, visit ico.org.uk .