Privacy & cookies

Privacy matters. Clarity matters too.

This draft is here for review, not as a final privacy notice. The organisation’s data-controller details and operating arrangements still need to be confirmed.

Young people deserve to be treated with dignity, care and clear boundaries.

Draft. Review before publication. This page is not legal advice and does not show that legal review has taken place. Before the site goes live, THE SIMS PROJECT must confirm and add the outstanding information below.

Who is responsible for this website?

The data controller, official contact details and person responsible for privacy enquiries have not yet been supplied. They must be confirmed and added before publication. Please do not share sensitive personal information about a young person through a general enquiry.

What happens if I use an enquiry form?

The Let’s Talk and school-enquiry forms on this version of the site are demonstrations only. They are not connected to an inbox, provider or database. Submitting one does not send or store your enquiry. Text you enter remains in your browser while the page is open and may be cleared when you leave.

Before these forms can be enabled, the project will need to choose a submission service, confirm who can access enquiries, explain the purpose and lawful basis for processing, set retention and deletion periods, and provide a working contact route for privacy requests.

What happens if I apply for a vacancy?

When you submit a Careers application, the information you provide, including your contact details, address, reason for applying and CV file, is saved in the project’s recruitment database. It can be viewed through the authenticated recruitment admin area by an authorised administrator. CV files are served only through that protected area, not as public website links.

Email forwarding to an external destination is not configured. No retention period has been supplied, so this draft does not promise a deletion date. Before recruitment applications are promoted, the organisation must confirm who is responsible for this data, the lawful basis and purpose, who may access it, how long it should be kept, how deletion will work and how applicants can contact the organisation about their information. This description does not claim that the arrangement has received legal review or meets a particular certification.

Young people’s information and safeguarding

If you make an initial enquiry, share only what is needed to start a conversation. Please do not include a child or young person’s diagnosis, trauma history, private disclosures or other sensitive details in a general contact form. Information will be treated with dignity, but absolute confidentiality cannot be promised. Concerns about safety or welfare, and information that must be shared by law or professional duty, may need to go to appropriate safeguarding professionals or services.

Cookies and analytics

The page code does not add advertising cookies or third-party analytics scripts. For this version, the project settings disable managed site analytics and hide the Manus badge and its scripts. This does not confirm whether other platform or CDN logging, analytics, cookies or storage exist. Their behavior, retention and any consent requirements must be checked with the relevant providers before publication.

This information is not a substitute for checking the actual deployment and connected services.

Information that still needs confirmation

  • Official organisation and privacy contact details, and the data controller’s identity.
  • The purpose and lawful basis for processing recruitment and future enquiry information.
  • Recruitment application and CV retention and deletion periods.
  • Who will review applications and where the user wants application delivery routed.
  • Any host/CDN logging or analytics, cookie/storage behavior and consent requirements.
  • Review of this draft before publication.

When could this notice change?

Review this notice when the application delivery destination, an enquiry endpoint, an email provider, analytics or a cookie tool is connected, or when the organisation’s data-handling arrangements are confirmed. Do not publish it as a completed policy until the missing operational details have been reviewed.