FAACTS Ltd
Privacy Policy
How we collect, use, and protect your personal data
This privacy policy explains how FAACTS Ltd collects and uses your personal data when you visit our website or use our services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
FAACTS Ltd (Fostering Advocacy Assessments Contact & Training Solutions Ltd) is a company registered in England and Wales. Our registered office is at West Midlands House, 25 Gipsy Lane, Willenhall WV13 2HA.
We are the data controller for the personal information we collect through this website and our services. If you have any questions about this policy or how we handle your data, please contact us at info@faacts4fostering.co.uk.
2. What personal data we collect
We may collect the following types of personal data:
• Contact information — your name, email address, and telephone number when you submit an enquiry, expression of interest, or contact form.
• Account information — your name, email address, and password (stored securely as a hash) if you create a member account.
• Booking information — details of consultations or training sessions you book, including payment confirmation references from Stripe.
• Usage data — anonymised analytics data about how you use our website, collected only with your consent via our cookie consent mechanism.
• Communications — the content of messages you send us through our contact forms or by email.
3. How we use your data
We use your personal data to:
• Respond to your enquiries and provide the services you have requested.
• Process bookings and payments for consultations and training.
• Manage your member account and fostering journey tracker.
• Send you service-related communications (not marketing, unless you have opted in).
• Improve our website and services using anonymised analytics data.
• Comply with our legal obligations.
4. Legal basis for processing
We process your personal data on the following legal bases under UK GDPR:
• Contract — to fulfil a booking or service you have requested.
• Legitimate interests — to respond to enquiries and improve our services, where this does not override your rights.
• Consent — for analytics cookies and any optional marketing communications.
• Legal obligation — where we are required to process data to comply with the law.
5. Cookies and analytics
We use cookies to improve your experience on our website. We only set non-essential cookies (including Google Analytics) with your explicit consent, which you can give or withdraw at any time using the cookie consent banner.
Essential cookies required for the website to function are set automatically and do not require consent.
6. Sharing your data
We do not sell your personal data. We may share it with trusted third-party service providers who help us operate our website and services, including:
• Stripe — for secure payment processing. Stripe is PCI-DSS compliant.
• Google Analytics — for anonymised website analytics (consent-gated).
• Our hosting provider — for website infrastructure.
All third parties are required to handle your data securely and in accordance with UK GDPR.
7. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact enquiries are retained for up to two years. Booking records are retained for six years for accounting purposes. You may request deletion of your data at any time (see section 9).
8. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Passwords are stored as secure hashes and are never stored in plain text. Payment data is handled entirely by Stripe and is never stored on our servers.
9. Your rights
Under UK GDPR, you have the right to:
• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at info@faacts4fostering.co.uk. We will respond within one calendar month.
10. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
11. Changes to this policy
We may update this privacy policy from time to time. The current version will always be available on this page. We will notify you of significant changes where we are able to do so.
This policy was last updated in September 2026.
Questions about your data?
Contact us at info@faacts4fostering.co.uk and we will respond within one calendar month.
Get in touch