GDPR & Data Protection Policy
MACSAIL is committed to protecting the privacy and personal data of all individuals in
accordance with the UK General Data Protection Regulation (UK GDPR) and the Data
Protection Act 2018.
Last updated: January 2026
1. Data Controller
Media Action for Child Safety and Information Literacy (MACSAIL) is the data controller for the purposes of data
protection legislation. We determine the purposes and means of processing personal data in connection with our
activities.
protection legislation. We determine the purposes and means of processing personal data in connection with our
activities.
2. Data We Collect
We may collect and process personal data including names and contact details of supporters, partners, and
enquirers; information submitted through our reporting and contact forms; data relating to training participants
and programme beneficiaries; website usage data through cookies and analytics; and employment and volunteer
application data.
enquirers; information submitted through our reporting and contact forms; data relating to training participants
and programme beneficiaries; website usage data through cookies and analytics; and employment and volunteer
application data.
3. Lawful Basis for Processing
We process personal data under the following lawful bases: consent, where individuals have given clear consent;
contract, where processing is necessary for a contract; legal obligation, where processing is necessary for
compliance with the law; legitimate interests, where processing is necessary for our legitimate
organisational purposes; and vital interests, particularly in safeguarding contexts.
contract, where processing is necessary for a contract; legal obligation, where processing is necessary for
compliance with the law; legitimate interests, where processing is necessary for our legitimate
organisational purposes; and vital interests, particularly in safeguarding contexts.
4. Data Subject Rights
Under the UK GDPR, individuals have the right to be informed about data collection and use, to access their
personal data, to rectification of inaccurate data, to erasure (the right to be forgotten), to restrict processing, to data
portability, to object to processing, and rights related to automated decision-making.
personal data, to rectification of inaccurate data, to erasure (the right to be forgotten), to restrict processing, to data
portability, to object to processing, and rights related to automated decision-making.
5. Data Security
MACSAIL implements appropriate technical and organisational measures to protect personal data against
unauthorised access, loss, destruction, or damage. This includes encrypted data storage, access controls and
authentication, regular security assessments, and staff training on data protection.
unauthorised access, loss, destruction, or damage. This includes encrypted data storage, access controls and
authentication, regular security assessments, and staff training on data protection.
6. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as
required by law. Safeguarding records may be retained for longer periods in line with statutory guidance.
required by law. Safeguarding records may be retained for longer periods in line with statutory guidance.
7. Contact
For data protection enquiries or to exercise your rights, please contact our Data Protection Officer at
dpo@macsail.org.
dpo@macsail.org.
If you have any questions about this policy, please contact us at info@macsail.org