Privacy Policy

Who we are

Willoughby Place is a supported accommodation provider operating three homes in London for young people aged 16–18+. For the purposes of UK data protection law, Willoughby Place is the data controller for personal data collected through this website. Referral information relating to a young person is processed under a shared or joint responsibility with the placing local authority in line with the placement agreement.

What we collect through this site

• Contact and referral enquiries. When you use our contact or referral form we collect the details you provide, typically your name, role, organisation, email, phone number and the content of your message.
• Career applications. If you apply for a role, we process the information and any documents you send us for recruitment purposes.
• Technical data. Standard server logs (IP address, user agent, pages requested) are held briefly for security and reliability.
• Cookies. We use only essential cookies needed to serve the site and remember your cookie preference. We do not use advertising, profiling or cross-site tracking cookies.

Lawful bases

• Legitimate interests, responding to enquiries from commissioners and other professionals about placements and services.
• Public task / legal obligation, processing referral information necessary to safeguard and support a young person, and to meet regulatory requirements applicable to supported accommodation providers in England.
• Contract, where processing is necessary to enter into or perform a placement agreement or employment contract.
• Consent, for optional communications such as an outcomes newsletter, where clearly requested.

How long we keep information

We hold enquiry and referral correspondence only for as long as it is needed for the purpose it was collected and to meet our regulatory record-keeping duties. Care and safeguarding records relating to a young person are retained in line with statutory guidance for looked-after and care-experienced young people. Recruitment records for unsuccessful applicants are held for a limited period and then deleted.

Who we share information with

We share personal data only where necessary and with appropriate safeguards. Recipients may include: the placing local authority and its social care and commissioning teams; safeguarding partners including the Local Authority Designated Officer (LADO) and police where required; health, education and welfare services supporting the young person; our regulators; and trusted service providers (for example our website hosting and secure email providers) acting under written instructions.

How we protect information

Access to personal data is limited to staff who need it for their role. Systems are protected by access controls, encryption in transit, and organisational safeguards including staff training, supervision and confidentiality agreements. Any suspected personal data breach is investigated and, where required, reported to the Information Commissioner's Office within 72 hours.

Your rights

Under the UK GDPR you have the right to be informed about our processing; to request access to your personal data; to have inaccurate data corrected; to request deletion or restriction of processing in certain circumstances; to object to processing based on legitimate interests; and to data portability where applicable. To exercise any of these rights, contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Cookies on this site

We use a small number of essential cookies: one records your cookie choice so we don't ask again on every visit, and our hosting provider may set short-lived cookies needed to deliver the site securely. You can clear cookies at any time through your browser settings.

Contact us

For any privacy question, or to make a data subject request, please contact us via the contact page. Please mark correspondence "Data Protection" so it reaches the right person promptly.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of the page will always reflect the most recent revision.