Privacy Policy

Effective: 27 May 2026

1. Introduction

SEE Change Happen Ltd is committed to protecting your privacy and handling your personal data responsibly, lawfully and transparently.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our websites, contact us, enquire about our services, attend our events or workshops, engage us for consultancy, subscribe to our communications, download our resources, or otherwise interact with us.

This policy applies to personal data processed in connection with SEE Change Happen Ltd and related services delivered through our websites, including https://seechangehappen.co.uk/ and https://joannelockwood.co.uk/.

This policy should be read alongside our Data Protection of Delegate Information Policy, our Reasonable Adjustments and Accessibility Policy, and our Inclusive Access Policy where relevant.

2. Who We Are

SEE Change Happen Ltd is the organisation responsible for deciding how and why personal data is processed in connection with our business activities, unless we tell you otherwise.

Our contact details are:

Organisation: SEE Change Happen Ltd
Email: info@seechangehappen.co.uk

If you have any questions about this Privacy Policy or how we handle personal data, please contact us using the email address above.

3. Personal Data We May Collect

The personal data we collect depends on how you interact with us. It may include:

name, job title, organisation and professional role;
email address, telephone number, postal address or other contact details;
enquiry details, correspondence, meeting notes or consultation information;
booking, event, workshop, webinar or training participation details;
accessibility, dietary, communication or reasonable adjustment requirements;
feedback, survey responses, testimonials or evaluation comments;
payment, invoice, purchase or transaction information;
newsletter, marketing preference or subscription information;
website usage data, such as IP address, browser type, device information, pages visited, referral source and interaction data;
information you choose to provide when completing forms, downloading resources, commenting, contacting us or engaging with our services.

4. Special Category Data

Some information you provide may include special category data under UK GDPR. This may include information relating to health, disability, neurodivergence, race or ethnicity, religious or philosophical belief, sexual orientation, sex life, gender identity, trade union membership, or other sensitive personal circumstances.

We may process special category data where it is relevant and necessary, for example to arrange reasonable adjustments, support accessibility, understand inclusion-related experiences, respond to delegate disclosures, provide consultancy, deliver equality, diversity and inclusion services, or support a safe and respectful learning environment.

Where we process special category data, we do so with additional care and only where we have both a lawful basis under Article 6 of UK GDPR and a relevant condition under Article 9 of UK GDPR. This may include explicit consent, substantial public interest, employment and social protection obligations, legal claims, or another applicable condition depending on the context.

Please avoid sending us sensitive personal data unless it is relevant to your enquiry, participation, access needs, consultancy request, or the service being delivered.

5. How We Collect Personal Data

We may collect personal data:

directly from you when you complete a form, email us, call us, book a service, attend a session, subscribe to updates or provide feedback;
from client organisations, event organisers, reseller partners, host organisations or colleagues where they arrange services involving you;
through our websites, cookies, analytics tools, embedded content or similar technologies;
through online meeting platforms, learning platforms, webinar tools, survey tools or booking systems;
from publicly available sources, such as LinkedIn, company websites or professional directories, where relevant to business development, relationship management or service delivery.

6. How We Use Personal Data

We may use personal data for the following purposes:

responding to enquiries and managing communications;
providing proposals, quotes, contracts and service information;
delivering workshops, training, consultancy, speaking engagements, events and digital learning services;
administering bookings, attendance, resources, access arrangements and follow-up communications;
supporting reasonable adjustments, accessibility, safeguarding, dignity and inclusive participation;
processing payments, invoices, accounting and financial records;
sending newsletters, updates, resources, event invitations or marketing communications where lawful;
requesting and analysing feedback, testimonials or evaluation responses;
improving our websites, services, learning materials and client experience;
maintaining business records, managing risk, handling complaints and protecting our legal rights;
complying with legal, regulatory, tax, accounting, insurance or contractual obligations.

7. Lawful Bases for Processing

We rely on different lawful bases depending on the purpose for which personal data is processed. These may include:

Contract: where processing is necessary to provide services, respond to an enquiry, manage a booking, deliver a workshop, administer a contract or take steps before entering into a contract.
Legitimate interests: where processing is necessary for our legitimate business interests, such as responding to enquiries, managing client relationships, improving services, maintaining records, promoting relevant services, protecting our business and ensuring effective administration, provided those interests are not overridden by your rights and freedoms.
Consent: where you have given clear consent for a specific purpose, such as optional marketing communications, use of testimonials, certain recordings, photographs, or processing specific sensitive information where consent is the most appropriate basis.
Legal obligation: where processing is necessary to comply with legal, tax, accounting, regulatory, safeguarding or other legal duties.
Substantial public interest, employment/social protection obligations or legal claims: where applicable to certain special category data in equality, inclusion, workplace, safeguarding, complaint-handling or legal contexts.

Where we rely on consent, you may withdraw consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

8. Marketing Communications

We may send marketing communications, newsletters, resources, event invitations or service updates where we have an appropriate lawful basis to do so.

You can unsubscribe from marketing communications at any time by using the unsubscribe link in our emails, changing your preferences where available, or contacting us at info@seechangehappen.co.uk.

We will not sell or rent your personal data to third parties for marketing purposes.

9. Cookies, Analytics and Similar Technologies

Our websites may use cookies, analytics tools, tracking pixels, embedded content or similar technologies to operate the website, understand how visitors use it, improve performance, remember preferences, support security, and where applicable provide relevant content or marketing.

Some cookies or similar technologies are strictly necessary for the website to function. Others, such as analytics, advertising, embedded media or marketing cookies, may require consent depending on their purpose and the technology used.

Where required, we will ask for your consent before setting non-essential cookies or similar technologies. You can usually manage cookies through your browser settings and, where available, through the cookie settings tool on our website.

Third-party services embedded on our websites, such as video platforms, social media tools, analytics providers, booking tools or payment platforms, may set their own cookies or collect data according to their own privacy information.

We do not sell or rent personal data.

We may share personal data where necessary with:

clients, event organisers, reseller partners or host organisations where this is necessary for service delivery, attendance, access arrangements, reporting or contractual administration;
online meeting, webinar, event, booking or learning platforms;
email, newsletter, CRM, survey, polling or communication service providers;
cloud storage, website hosting, IT support, security and document management providers;
payment processors, accountants, bookkeepers, banks and financial administration providers;
professional advisers, insurers, legal advisers, auditors or compliance providers;
accessibility providers, such as captioners, interpreters or alternative-format suppliers, where needed;
regulators, public authorities, law enforcement agencies, courts or other third parties where required by law or necessary to protect legal rights, safety or security;
prospective buyers, sellers or advisers in the event of a business sale, restructuring, merger or transfer of assets.

Where third-party providers process personal data on our behalf, we expect them to apply appropriate security and confidentiality measures and to process personal data only for agreed purposes. Where third parties act as independent controllers, they are responsible for their own data protection compliance.

11. International Transfers

Some of the platforms, systems or service providers we use may process or store personal data outside the United Kingdom.

Where personal data is transferred internationally, we will take reasonable steps to ensure appropriate safeguards are in place. These may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism where required.

12. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

These measures may include:

restricted access to personal data on a need-to-know basis;
secure storage and access controls;
password protection and appropriate platform security settings;
secure methods for sharing sensitive information where needed;
staff awareness of confidentiality and data protection responsibilities;
periodic review of data protection and information security practices.

No method of transmission over the internet is completely secure. However, we take reasonable steps to protect personal data and reduce the risk of unauthorised access, misuse or loss.

13. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including service delivery, administration, follow-up, legal, contractual, accounting, tax, insurance, safeguarding and legitimate business purposes.

As a general guide:

enquiry and correspondence records may be retained for up to 24 months after the last meaningful contact, unless a longer period is needed for business, legal or contractual reasons;
client, contract, proposal, invoice, payment and business records may be retained for up to 6 years for accounting, tax, insurance and legal purposes;
delegate lists and attendance records may be retained for up to 12 months after delivery unless a longer period is required by contract or law;
accessibility, dietary and reasonable adjustment information is normally deleted as soon as it is no longer needed after the event or programme, unless retention is necessary for follow-up, safeguarding, complaint-handling or legal reasons;
feedback, evaluation responses and testimonials may be retained for up to 24 months, or longer where anonymised or where permission has been given for ongoing use;
marketing subscription records may be retained while you remain subscribed, and suppression or unsubscribe records may be retained as necessary to respect your preferences;
website analytics data may be retained according to the settings of the relevant analytics or cookie tools.

When personal data is no longer required, it will be securely deleted, anonymised or archived where appropriate.

14. Your Rights

You have rights under UK data protection law. Depending on the circumstances, these may include the right to:

be informed about how your personal data is used;
access your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests or direct marketing;
request data portability where applicable;
withdraw consent where processing is based on consent;
complain to the Information Commissioner's Office if you are unhappy with how your personal data has been handled.

Some rights are subject to legal limits and may not apply in every situation.

15. Links to Third-Party Websites

Our websites may contain links to third-party websites, platforms, resources or services. We are not responsible for the privacy practices, security or content of those third-party websites. You should review their privacy information before providing personal data to them.

16. Children and Young People

Our websites and services are generally intended for adults and organisations. If we are engaged to provide services involving children or young people, data protection responsibilities, safeguarding arrangements, consent requirements and information-sharing arrangements should be agreed with the relevant client, school, college, parent, guardian or responsible organisation as appropriate.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, websites, working practices, technology, legal requirements or regulatory guidance. The latest version will be published on our website.

18. Contact Us

Questions, requests or concerns regarding this Privacy Policy should be emailed to info@seechangehappen.co.uk.

You also have the right to raise concerns with the Information Commissioner's Office. Information is available at https://ico.org.uk/.