Privacy Policy

Rethinking Access takes the privacy of our clients, research participants and website users very seriously.  We have developed this policy because we want you to feel confident about the privacy and security of your personal information.

​

This Privacy Policy tells you what to expect us to do with your personal information.

​

If you would like a copy of this Privacy Policy in Plain English or Easy Read, please contact us.  Contact details are in Section 1 below.

 

1. Our contact details

2. Personal Data - What information we collect, use, and why

3. Cookies

4. When we share your personal information

5. Your data protection rights

6. Our lawful bases for the collection and use of your data

7. How your data is kept securely

8. Where we get personal information from

9. How long we keep information

10. How to complain

11. Changes to the Privacy Policy and your duty to inform us of changes

​​

 

1. Our contact details

 

Rethinking Access is managed by Katrina O’Leary as a sole trader.

​

If you have any questions about this policy or would like to exercise your privacy rights, please contact Rethinking Access in the following way:

​

Post: Contingent Works, 3 Broadway Buildings, Elmfield Road, Bromley, BR1 1LW, GB

​

Telephone: 0203 3456198

​

Email: hello@rethinkingaccess.com

​

​

2. Personal Data - what information we collect, use, and why

​

Rethinking Access may collect or use personal data for a number of different purposes outlined below.

​

We collect or use the following information to provide and improve products and services for clients:

​

• Names and contact details, addresses, pronoun preferences, occupation and third party information (such as family members or other relevant parties)

• Records of meetings and decisions

• Payment details (including bank information for transfers)

• Transaction data (including details about payments to and from you)

• Your comments, photographs and video recordings from webinars, meetings, workshops, training sessions, surveys or otherwise volunteered to us

 

We also collect or use the following special category information to provide and improve products and services for clients. This information is subject to additional protection due to its sensitive nature:

​

• Health information (such as health conditions and challenges and dietary requirements for in-person events)

 

We collect or use the following personal information for the operation of client or customer accounts:

​

• Names and contact details, business addresses

• Purchase or service history

• Account information, including registration details

• Payment details (including bank information for transfers)

• Transaction data (including details about payments to and from you)

• Information used for security purposes

• Marketing preferences

​​

We collect or use the following personal information for information updates or marketing purposes:

​

• Names, contact details and addresses

• Purchase or account history

• Marketing preferences

 

We also collect or use the following special category information for information updates or marketing purposes. This information is subject to additional protection due to its sensitive nature:

​

• Health information (such as health conditions and challenges)

 

​We would like to send you information about our services and how to get involved in our research, which may be of interest to you. If you have agreed to receive marketing information, you may opt-out at a later date.

 

​You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please email your request to hello@rethinkingaccess.com

​​

​We collect or use the following personal information for research or archiving purposes:

​

• Names, contact details, addresses, pronoun preferences, occupation and third party information (such as family members or other relevant parties)

• Your comments, photographs and video recordings from webinars, meetings, workshops, training sessions, surveys or otherwise volunteered to us

 

We also collect or use the following special category information for research or archiving purposes. This information is subject to additional protection due to its sensitive nature:

​

• Health information (such as health conditions and challenges)

​​

We collect or use the following personal information for dealing with queries, complaints or claims:

​

• Names, contact details and addresses

• Payment details

• Account information

• Purchase or service history

 

​We also collect or use the following special category information for dealing with queries, complaints or claims. This information is subject to additional protection due to its sensitive nature:

​

• Health information (such as health conditions and challenges)

​​

​

3. Cookies

​

Our website is powered and supported by Wix.  Wix uses cookies on our website. For more information about cookies and preferences see our Cookie Policy.

 

 

4. When we share your personal information

​

We will not sell or rent your personal information to third parties for any purpose.

​​

We may share your personal information with third parties (e.g. subcontractors, suppliers) who provide services on our behalf.  We will only provide those companies with the information they need to deliver the relevant service, and we will make sure that your data is treated with the same level of care as if we were handling it directly.

​​

We require all third parties to respect the security of personal data and to treat it in accordance with the law.  We do not allow third party service providers to use your personal data for their own purposes and only permit them to process your personal data for specific purposes and in accordance with our instructions.

We may need to disclose your personal information if required to the police, regulatory bodies or legal advisors. We will only ever share your data in other circumstances if we have your explicit and informed consent or if there is a legal requirement for us to do this.

 

​We may disclose aggregate, anonymous, data based on information collected to investors, potential partners and clients.  In such cases, statistical information only will be disclosed, and personally identifiable data will be kept strictly confidential. 

​​​​

Our website may contain links to third party websites, plug-ins, social media platforms and applications.  We do not control these third party websites and platforms and we are not responsible for their privacy statements or any consequences from clicking on those links. Clicking on those links, and enabling those connections, may allow third parties to collect or share data about you.  This privacy policy only applies to this website, so when you link to other websites, you should read their privacy policies.

 

​

5. Your data protection rights

​

​You have a number of rights in relation to the processing of your personal data.

​​

You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

​

• Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.

​

• Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.

​​

• Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.

​​

• Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.

​​

• Your right to object to processing - You have the right to object to the processing of your personal data including for direct marketing purposes. Read more about the right to object to processing.

​​

• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.

​​

• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

​​​​​​

If you make a request, we must respond to you without undue delay and in any event within one month.

 

To make a data protection rights request, please contact us using the contact details in Section 1 of this Privacy Policy.

​

​

6. Our lawful bases for the collection and use of your data

​

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information.

 

There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

​

Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

​

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

​

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

​

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

​

• Legitimate interests – we are collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. By understanding personal information such as addresses, health information and its impact, it is possible to improve products and services that better meet the needs of children and adults with disabilities.  If any food or beverages are offered at in-person events, we will ask if you have any dietary requirements so that we can meet your dietary needs.

 

For more information on our use of legitimate interests as a lawful basis, you can contact us using the contact details set out above.

 

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

​

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

 

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

​

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

 

Our lawful bases for collecting or using personal information for research or archiving purposes:

​

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

​​

• Legitimate interests – we are collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. By understanding personal information such as addresses, health information and challenges it is possible to summarise collective need and the potential impact of initiatives in discussion with funding bodies, commissioners and service providers.

 

For more information on our use of legitimate interests as a lawful basis, you can contact us using the contact details set out above.

 

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

​

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

​​

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

 

 

7. How your data is kept securely

​

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way or disclosed.

 

In addition, we limit access to your personal data to those companies, agents, contractors and other third parties who have a business to know.  They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

 

We have put in place procedures to deal with any suspected personal data breach and will notify you of it and any applicable regulators of the breach when we are legally required to do so and/or as otherwise required by law.  Your personal information will be securely destroyed after the expiry of the applicable retention period.

​​

​

8. Where we get personal information from

​

You may give us your personal data by filling in online forms, or by corresponding with us by post, phone, email, surveys, social media comments, discussions or otherwise as part of our services. 

 

This includes personal data you provide when you:

​

• Apply for and use our services

• Create an account or interact with us on our website

• Subscribe to our services or publications

• Request marketing to be sent to you

• Enter a survey, focus group or webinar

• Give us feedback or contact us

 

This data may come directly from you or any other adult or family member that is advocating on your behalf.

 

 

9. How long we keep information

​

We store your personal information for the minimum period needed to carry out our services.  In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you. For more information on how long we store your personal information, or the criteria we use to determine this, please contact us using the details provided above.

​

​

10. How to complain

​

We hope that you won’t ever need to, but if you do want to complain about our use of personal data, please email details of the complaint to hello@rethinkingaccess.com.  Letting us know when and why you are not happy gives us the opportunity to put matters right for you in a transparent way and improve our service for everybody else. 

 

Please include your name and email address, a description of your concern, what you’d like Rethinking Access to do to put things right and a daytime phone number with the best time to contact you.

 

Once you've contacted us, we'll do our best to resolve any complaints within 10 working days. If we need more time to complete our investigations, we will keep you updated with our progress.

 

Again, we hope that you will not need to do this, but if you remain unhappy with how we have used your data after raising a complaint with us, you can also complain to the Information Commissioner’s Office (ICO).  However, before doing so, you must first have made your complaint to us or asked us for clarification if there is something you do not understand.  The ICO will expect you to have done this before receiving your complaint.

​

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

​Helpline number: 0303 123 1113

​Website: https://www.ico.org.uk/make-a-complaint

 

 

11. Changes to the Privacy Policy and your duty to inform us of changes

​

We keep our Privacy Policy under regular review.  This version was last updated on 19th June 2026.  Archived versions can be obtained by contacting Rethinking Access.

 

If is important that the personal data Rethinking Access holds about you is accurate or current.  Please keep us informed if your personal data changes during your relationship with us.  For example, a new postal address, contact phone number or email address.

 

Last updated 19/6/26