GDPR & Privacy Policy

Reset, Go

Your privacy matters to us.

At Reset, Go, we respect your privacy and are committed to keeping your personal information safe. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we may share it with, and the rights you have over your information.

We handle personal information in accordance with applicable UK data protection law, including the UK GDPR, Data Protection Act 2018 and Data (Use and Access) Act 2025, together with other applicable privacy legislation.

Last updated: September 2026

1. Who We Are

Reset, Go provides support and services that may include wellbeing, therapy, employability, training, community participation and other support services.

For most of the information we collect and use, Reset, Go is the Data Controller. This means we are responsible for deciding why and how your personal information is used.

Reset, Go
Privacy Contact: [Insert name or role]
Email: [Insert privacy email address]
Telephone: [Insert telephone number]
Address: [Insert business address]

2. What Information Do We Collect?

The information we collect depends on the services you use and your relationship with us.

This may include:

Personal information

Your name, address, telephone number, email address, date of birth and emergency contact details.

Information about your circumstances

Information about your employment, education, skills, qualifications, support needs, personal circumstances and goals.

Therapy, wellbeing and support information

Where relevant, we may collect information relating to your wellbeing, therapy, health, disability, neurodiversity, support needs, assessments, appointments and progress.

Some of this information may be classed as special category data under UK data protection law and receives additional protection.

Safeguarding information

Where necessary, we may collect and record information relating to safeguarding concerns, risks, incidents or vulnerabilities.

Employment and recruitment information

For applicants, employees, workers and contractors, this may include CVs, qualifications, references, employment history, right-to-work information and other information needed for recruitment and employment.

Website and technical information

When you use our website, we may collect information such as your IP address, browser type, device information and how you interact with our website, depending on the technologies and cookies we use.

3. How Do We Collect Your Information?

We may receive information:

• directly from you;

• from someone acting on your behalf;

• from a referral organisation;

• from an employer or prospective employer;

• from a commissioner or funding organisation;

• from healthcare, education or support professionals;

• from safeguarding or statutory organisations where appropriate;

• through our website;

• through forms, assessments and applications;

• during telephone, online or face-to-face conversations; or

• from publicly available information where lawful and appropriate.

Where information is received from another organisation, we will provide appropriate privacy information where required.

4. Why Do We Use Your Information?

We use personal information to provide and manage our services and to operate KW Life Solutions effectively.

This may include:

Providing services
To deliver therapy, wellbeing, employability, training, community and other support services.

Understanding your needs
To assess your circumstances, identify support needs and develop appropriate plans.

Managing your support
To arrange appointments, communicate with you, monitor progress and record outcomes.

Safeguarding
To help protect individuals from abuse, neglect, exploitation, serious harm or other risks where appropriate.

Working with partner organisations
To coordinate services, referrals and support where information sharing is lawful and necessary.

Managing our organisation
To manage staff, volunteers, contractors, finances, administration, complaints, insurance and business operations.

Meeting legal obligations
To comply with legal, regulatory, contractual and safeguarding responsibilities.

Improving our services
To monitor service quality, understand outcomes and improve the support we provide.

5. What Gives Us the Right to Use Your Information?

UK data protection law requires us to have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

• Your consent;

• A contract with you or steps taken before entering into a contract;

• A legal obligation;

• Protection of vital interests;

• A public task, where applicable; or

• Legitimate interests, where this is appropriate and your rights do not override those interests.

Where we process health or other special category information, we will also identify an appropriate additional legal condition required by data protection law.

We will only collect and use information that is relevant and necessary for the purpose concerned.

6. Health, Therapy and Sensitive Information

Some of the services provided by Reset, Go may involve sensitive personal information.

This could include information about:

• physical or mental health;

• disability;

• neurodiversity;

• therapy or wellbeing;

• medication or treatment;

• personal circumstances;

• safeguarding;

• vulnerabilities; or

• other support requirements.

We understand the importance of keeping this information confidential.

Access will be restricted to people who have a legitimate need to see it, and appropriate technical and organisational safeguards will be used to protect it.

7. Confidentiality and Safeguarding

We respect the confidentiality of information shared with us.

However, confidentiality cannot always be absolute.

There may be circumstances where we are legally permitted or required to share information, particularly where there is a safeguarding concern or a serious risk of harm.

Information may be shared where necessary to:

• protect a child or adult at risk;

• protect someone from serious harm;

• respond to an emergency;

• prevent or detect crime;

• comply with the law; or

• support a lawful safeguarding investigation.

Where appropriate and safe to do so, we will explain why information needs to be shared.

8. Who Might We Share Your Information With?

We do not sell your personal information.

Where necessary and lawful, we may share information with organisations such as:

• commissioners and funding organisations;

• employers and prospective employers;

• referral organisations;

• healthcare or support professionals;

• local authorities;

• safeguarding organisations;

• government departments;

• emergency services;

• regulators or law enforcement organisations;

• professional advisers;

• insurers; and

• trusted IT, software, cloud and administrative service providers.

We only share information where there is a lawful reason to do so and will aim to share only the information that is necessary and proportionate.

9. Keeping Your Information Secure

We take the security of your information seriously.

Depending on the information and circumstances, our safeguards may include:

• password protection;

• access controls;

• secure electronic systems;

• encryption where appropriate;

• secure cloud systems;

• staff confidentiality requirements;

• data protection training;

• secure devices;

• secure backups;

• controlled access to paper records; and

• secure deletion and disposal.

No system can be guaranteed to be completely secure, but we take reasonable and proportionate steps to protect the information we hold.

10. What Happens If There Is a Data Breach?

A data breach can include information being accidentally lost, accessed, changed, disclosed or destroyed without authorisation.

Reset, Go has procedures for identifying, assessing, recording and responding to suspected data breaches.

Where the law requires it, we will report a breach to the Information Commissioner's Office (ICO) within the applicable legal timescale and, where appropriate, tell affected individuals.

11. How Long Do We Keep Your Information?

We do not keep personal information forever.

We retain information only for as long as it is reasonably necessary for the purpose for which it was collected, or where we are required to keep it by law, contract, funding requirements, professional obligations or other legitimate requirements.

Retention periods can vary depending on the type of information and service involved.

When information is no longer required, we will securely delete, destroy or anonymise it where appropriate.

Your Privacy Rights

You have important rights under UK data protection law.

Depending on the circumstances, you may have the right to:

Access your information

Ask for a copy of the personal information we hold about you.

Correct your information

Ask us to correct information that is inaccurate or incomplete.

Ask us to delete your information

In certain circumstances, you can ask us to erase your personal information.

Restrict how we use your information

In certain situations, you can ask us to limit how we process your information.

Object to processing

You can object to certain types of processing, including some processing based on legitimate interests and direct marketing.

Receive or transfer your information

In certain circumstances, you may have the right to receive information in a structured, commonly used and machine-readable format and have it transferred to another organisation.

Withdraw consent

Where we rely on your consent, you may withdraw it. This does not affect processing that was lawful before your consent was withdrawn.

Rights concerning automated decision-making

Where applicable, you may have rights relating to decisions made solely by automated means that have legal or similarly significant effects.

How Do I Exercise My Rights?

You can contact KW Life Solutions to exercise your data protection rights.

Please contact:

Reset, Go – Privacy Contact
Email: [Insert privacy email address]
Telephone: [Insert telephone number]
Post: [Insert postal address]

You do not normally need to use a special form.

For security purposes, we may need to confirm your identity before providing personal information.

We will normally respond to a valid data protection rights request within the legally applicable timeframe.

Cookies and Our Website

Our website may use cookies and similar technologies to provide essential functionality, remember preferences, understand website usage and, where permitted, support analytics or marketing.

Where consent is required, we will ask for your consent before using the relevant cookies or technologies.

You can manage certain cookie preferences through your browser and, where available, our website cookie settings.

Our website may also contain links to other websites. We are not responsible for the privacy policies or practices of external websites.

Children and Young People's Information

Where Reset, Go provides services to children or young people, we take additional care with their personal information.

We consider the child's age, understanding, circumstances and rights, together with safeguarding requirements and the nature of the service being provided.

Where appropriate, we may work with parents, guardians, professionals or other authorised individuals, while also respecting the rights and confidentiality of the young person.

International Data Transfers

Some technology providers we use may process or store information outside the United Kingdom.

Where this involves a restricted international transfer, we will ensure that the transfer is permitted under applicable UK data protection law and that appropriate safeguards are in place.

Complaints About Your Personal Information

We want you to feel confident about how we handle your information.

If you are unhappy about the way we have used or protected your personal information, please contact us first so that we can investigate your concern.

Privacy & Data Protection Contact
Reset, Go
Email: info@reset-go.org
Telephone: 0800 0096 904
Address: Peregrine Way, Lowestoft, Suffolk. NR33 7QH

We will acknowledge and investigate data protection complaints in accordance with applicable legal requirements.

You also have the right to complain directly to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

ICO website: www.ico.org.uk

Our Privacy Promise

At Reset, Go, we believe that privacy is more than a legal requirement — it is part of treating people with dignity, respect and care.

We will:

Collect information responsibly.

Use it fairly and lawfully.

Keep it secure.

Respect confidentiality.

Only share information when there is a legitimate and lawful reason.

Respect your data protection rights.

Be open about how we use your information.

Your information is important to us, and we are committed to protecting it.

Policy Information

Organisation: Reset, Go
Policy: GDPR & Privacy Policy
Version: 1.0
Effective: September 2026
Last reviewed: September 2026
Next review: September 2027