Privacy policy
Last updated: September 2026
Enable Leisure and Culture (“Enable”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This privacy notice explains how we collect, use, store and share personal information when you visit our websites, contact us, use our services or otherwise interact with us.
This notice applies to personal information collected through the Enable website and, where relevant, our associated websites and online services.
We keep this privacy notice under regular review and will update it when necessary. The latest version will always be published on this page.
1. Who we are
Enable Leisure and Culture is the organisation responsible for deciding how and why your personal information is processed in connection with the activities covered by this notice.
The “Organiser” is Enable, a company incorporated in England and Wales company number 09487276, and registered with the Charity Commission (no. 1172345) and with registered offices at Battersea Park Offices, Battersea Park, London SW11 4NJ.
If you have any questions about how we use your personal information, or about this privacy notice, you can contact our data protection team:
Email: dataprotection@enablelc.org
Post:
Data Lead
Enable Leisure and Culture
Staff Yard
Battersea Park
London
SW11 4NJ
2. What personal information we collect
Depending on how you interact with us, we may collect different types of personal information, including:
contact details, such as your name, email address, telephone number and postal address;
location information, such as your postcode;
information you provide when making an enquiry or requesting a service;
information you provide when completing a survey, competition, promotion or special offer;
information relating to bookings, events, activities or services you use;
information about how you use our websites and online services;
technical information, such as your IP address, browser type, device information and information about how you interact with our websites;
information contained in communications you send to us; and
any other information you choose to provide to us.
We will only collect personal information that is relevant and necessary for the purposes for which we use it.
3. How we collect your information
We may collect personal information:
· directly from you when you contact us, use our website, sign up for communications, complete a survey or use one of our services;
· automatically when you use our websites, through cookies and similar technologies;
· from organisations that provide services to us;
· from partner or referral organisations, where appropriate;
· from publicly available sources, where permitted; or
· from other sources where we have a lawful basis for doing so.
Where we obtain personal information from another organisation or source, we will provide you with the relevant privacy information where required by law.
4. How we use your personal information
· We may use personal information for purposes including:
· providing and administering our services;
· responding to enquiries and requests;
· processing bookings, registrations and applications;
· communicating with you about services, activities or events;
· sending information or marketing communications where permitted by law and, where required, with your consent;
· carrying out surveys and obtaining feedback;
· understanding how people use our websites and services;
· monitoring and improving our websites, services and customer experience;
· maintaining the security and performance of our websites and systems;
· keeping appropriate business and administrative records;
· investigating and responding to complaints;
· complying with legal and regulatory obligations;
· establishing, exercising or defending legal claims; and
· protecting the rights, safety and security of Enable, our staff, customers and visitors.
· We will only use your personal information where we have a lawful basis to do so.
5. Our lawful bases for using personal information
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on one or more of the following lawful bases:
Consent
We may ask for your consent before using your personal information for particular purposes, such as certain types of marketing or non-essential cookies.
Where we rely on consent, you can withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew it.
Contract
We may need to process your personal information to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
Legal obligation
We may process personal information where this is necessary for us to comply with a legal or regulatory obligation.
Legitimate interests
We may process personal information where this is necessary for our legitimate interests, or those of a third party, provided that those interests are not overridden by your interests or fundamental rights and freedoms.
Where we rely on legitimate interests, we will consider the impact of the processing on your rights and interests.
Public task
6. Special category information
Some types of personal information are subject to additional protection under UK data protection law. These are known as “special category data” and include information such as health information, information about racial or ethnic origin, religious beliefs and certain biometric or genetic information.
Where Enable processes special category information, we will only do so where an appropriate lawful condition applies in addition to a lawful basis under Article 6 of the UK GDPR.
7. Who we share your information with
We may share personal information with third parties where this is necessary and lawful.
These may include:
organisations that provide services to Enable;
· technology, website and hosting providers;
· providers of email and communications services;
· analytics and website performance providers;
· survey providers;
· professional advisers;
· organisations involved in investigating or responding to complaints;
· regulators, public authorities or law-enforcement bodies where required or permitted by law; and
· other organisations where you have given permission or where another lawful basis allows us to do so.
· Where we use a third party to process personal information on our behalf, we will put appropriate contractual and security arrangements in place.
We do not sell your personal information.
8. International transfers
Some of the organisations we use to provide services to Enable may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.
These safeguards may include an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism.
9. How long we keep your information
We will only keep personal information for as long as it is reasonably necessary for the purposes for which it was collected, including where necessary to meet legal, accounting, reporting or other regulatory requirements.
Different types of information may be retained for different periods.
When determining how long information should be retained, we consider factors including:
· the purpose for which the information was collected;
· whether we have an ongoing relationship with you;
· legal and regulatory requirements;
· whether the information may be required to establish, exercise or defend legal claims; and
· our legitimate business and operational requirements.
· When personal information is no longer required, we will securely delete it or anonymise it where appropriate.
10. Cookies and similar technologies
Our websites use cookies and similar technologies.
Cookies are small text files placed on your device which can be used to make websites function, remember preferences, understand how visitors use a website and, where permitted, provide other functionality.
We may use:
· strictly necessary cookies, which are required for the website to operate;
· functionality cookies, which help provide features and remember preferences;
· analytics cookies, which help us understand how visitors use our websites; and
· other non-essential cookies or tracking technologies where applicable.
· Where consent is required for a cookie or similar technology, we will ask for your consent before using it.
· You can manage your cookie preferences through our cookie consent mechanism. You can also change your browser settings to block or delete cookies, although doing so may affect the functionality of some websites or services.
· For more information, including details of the cookies we use and their purposes, please see our Cookie Policy.
11. Website analytics
· We use analytics technologies to understand how visitors use our websites and to help us monitor and improve their performance and usability.
· We currently use Google Analytics.
· Analytics information may include information about your device, browser, IP address, pages visited, interactions with our website and other technical or usage information.
· Where required, analytics cookies or similar technologies will only be used after you have provided the necessary consent.
· We will not use analytics data for purposes that are incompatible with those described in this notice.
12. Website hosting, security and technology providers
Our websites use third-party technology and hosting providers.
These providers may process technical information, including IP addresses and information required to operate, secure and maintain our websites.
Our current providers may include website developers, hosting providers, content management systems and other technology suppliers.
We require relevant suppliers to maintain appropriate security and confidentiality arrangements and, where they act as our processors, to process personal information only in accordance with our instructions and applicable data protection law.
13. WordPress and other website platforms
Some Enable websites may use third-party content management or website platforms.
Depending on the website and the services provided, these platforms may process technical information and information submitted by visitors.
This includes Squarespace.
Where a third-party provider processes personal information on our behalf, we will ensure that appropriate contractual and security arrangements are in place.
14. E-newsletters and marketing communications
We use third-party email service providers to send newsletters and other communications.
Our current provider is Mailchimp.
If you subscribe to an Enable e-newsletter, we may collect information such as your name and email address and information about your interaction with our emails, including whether an email was opened or links were clicked.
We use this information to administer our mailing lists, deliver communications and understand how our communications are being used so that we can improve them.
You can unsubscribe from marketing communications at any time by using the unsubscribe link in the relevant email or by contacting us.
We will comply with applicable electronic marketing and data protection laws when sending marketing communications.
15. Surveys
We may use third-party survey platforms to conduct surveys and obtain feedback.
Our current survey provider is Jotform.
Depending on the survey, we may collect information such as contact details, responses, technical information and information about how you interact with the survey.
We use survey information to understand people's views, evaluate and improve our services, and for other purposes explained when the survey is provided.
16. Links to other websites
Our websites may contain links to websites operated by third parties.
This privacy notice does not apply to those websites. We are not responsible for the privacy practices or content of external websites.
We encourage you to read the privacy notice of any third-party website you visit.
17. Security
We take the security of personal information seriously.
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Access to personal information is limited to people and organisations that have a legitimate need to access it and, where appropriate, are subject to confidentiality obligations.
No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security.
18. Your data protection rights
Depending on the circumstances and subject to certain legal exemptions, you may have rights under UK data protection law, including the right to:
ask us whether we hold personal information about you;
request access to your personal information;
ask us to correct inaccurate or incomplete information;
ask us to delete your personal information;
ask us to restrict how we use your personal information;
object to certain processing of your personal information;
request the transfer of certain information to you or another organisation;
withdraw consent where we rely on consent to process your information; and
object to certain forms of direct marketing.
You may also have rights relating to solely automated decision-making and profiling where applicable.
These rights are not absolute and may be subject to legal conditions and exemptions.
19. How to exercise your rights
If you wish to exercise any of your data protection rights, please contact us at:
Email: dataprotection@enablelc.org
Post:
Data Lead
Enable Leisure and Culture
Staff Yard
Battersea Park
London
SW11 4NJ
You do not normally have to pay to exercise your rights.
We may need to ask for information to verify your identity before responding to a request. This is a security measure designed to prevent personal information being disclosed to someone who does not have a right to receive it.
We will normally respond to a valid request within one month, although this period may be extended where permitted by law.
20. Complaints
We take concerns about our use of personal information seriously.
If you have a question or complaint about the way we have collected or used your personal information, please contact us in the first instance:
Email: dataprotection@enablelc.org
Post:
Data Lead
Enable Leisure and Culture
Staff Yard
Battersea Park
London
SW11 4NJ
You also have the right to complain to the Information Commissioner's Office (ICO) if you believe that your personal information has been handled unlawfully.
Further information about making a complaint is available from the ICO.
https://ico.org.uk/global/contact-us/
21. Children's information
22. Automated decision-making and profiling
Where such processing takes place, we will provide the information required by applicable data protection law, including information about the logic involved, the significance and envisaged consequences of the processing and relevant rights.
23. Changes to this privacy notice
We keep this privacy notice under regular review.
When we make changes, we will update the “Last updated” date at the top of this notice. Where appropriate, we may also notify you of significant changes by other means.