Lettuce Grow Privacy Notice

Who we are

Lettuce Grow is a Community Interest Company that runs therapeutic gardening sessions to support mental health, emotional wellbeing and learning. We are based in the UK and follow the UK GDPR and Data Protection Act 2018 to protect your personal information.

What personal information do we collect?

We may collect:

- Your name and contact details (email, phone, address)
- Emergency contact details
- Health, wellbeing or accessibility information (if needed to keep you safe)
- Notes about your sessions and progress (if part of a longer programme)
- Photos or videos (only with your permission)

If the participant is a child or young person, we collect this information from a parent, carer, teacher, or support worker.

Why do we collect this information?

We use your information to:

- Keep you or your child safe during sessions
- Make sure we can meet your/your child’s needs (e.g. allergies, mobility)
- Keep records of attendance and participation
- Report outcomes to funders (we only use anonymous information unless agreed)
- Send you information you’ve asked for (like events or newsletters)

We only collect the information we really need.

How do we keep your information safe?

We store your information securely:

- On password-protected computers or locked files
- Only accessible by trained staff and volunteers
- We don’t share your information unless we have to (see below)

Who do we share it with?

We only share your information:

- If you give us permission
- If we’re legally required to (e.g. safeguarding concern)
- With health or education professionals who referred you/your child, if needed for your/your child’s care
- With funders – but we remove your name and any identifying details

We never sell your data or share it for marketing.

What’s the legal reason for using your data?

We only use your personal information when the law allows us to. This might be:

- Your consent (we’ll always ask first)
- To provide care or support services (Article 9(2)(h))
- To keep you/your child safe (vital interests or safeguarding)
- To meet our legal or funding obligations

You can withdraw your consent at any time by contacting us.

How long do we keep your information?

- We keep records for up to 6 years after your/your child’s last session.
- Photos and testimonials are only kept with your permission.
- If you ask us to delete your data (and we are not required to keep it), we will.

Your rights

You have the right to:

- See what information we hold about you/your child
- Ask us to correct or delete it
- Withdraw your consent at any time
- Complain to the ICO if you’re unhappy with how we use your data

Contact us

If you have any questions or want to talk about your data:

Lettuce Grow CIC
3 Glebe Close, Aldbourne, Wiltshire, SN8 2EP
📧 Email: hello@lettucegrow.org.uk
📞 Phone: 07740 354189
🌐 Website: www.lettucegrow.org.uk

Or contact the UK Information Commissioner’s Office (ICO):
📞 0303 123 1113 | 🌐 https://ico.org.uk

Note for parents/guardians
We ask for your permission before collecting any information about your child. We use this only to support their wellbeing and participation in our activities.

Last Updated: 29/07/2025