Privacy & data protection
Privacy notice
This notice explains how Eights & Arrows Pathways CIC uses personal information when you visit our website, contact us, use our forms or take part in our programmes.
Who we are
Eights & Arrows Pathways CIC is a Community Interest Company limited by guarantee, registered in England and Wales. Company number: 17348068. Registered office: 11 Buckingham Close, Thetford, IP25 6WL.
Privacy enquiries: contact@eightsandarrows.org.uk.
Information we may collect
The information we collect depends on how you interact with us. It may include your name and contact details; enquiry or expression-of-interest information; programme or session information; parent/carer or emergency contact information where needed; accessibility or adjustment information you choose to provide; support, equipment, coaching or travel-request information; feedback and impact information; and records of our communications with you.
Some information, such as health, disability or other sensitive information, may be special category personal data and receives additional protection.
How we use information
We may use personal information to respond to enquiries; administer programmes, sessions, equipment donations and support requests; make practical participation arrangements; communicate with people who have asked to hear from us; protect participants and manage safeguarding; meet legal, regulatory, insurance, accounting and funder requirements; monitor and report impact in an aggregated form; and improve our services.
Our lawful bases
Depending on the activity, we may rely on legitimate interests, steps connected with a contract or service arrangement, consent, or a legal obligation. For optional marketing or publication of a story/testimonial, we use a separate appropriate permission process.
Where we process special category data, we also identify and document an appropriate Article 9 condition before processing. For some voluntary health or disability information used to arrange participation support, this may include explicit consent. Other circumstances, such as safeguarding or legal claims, may require a different condition.
Forms and third-party services
Some links on this website open forms hosted by Google. Information you submit through those forms is processed for the purpose described on the form and may also be processed by the relevant technology provider under its own terms and privacy arrangements. Our website is hosted on Netlify, which may process technical request and security logs needed to deliver and protect the site.
Cookies and website analytics
This website build does not intentionally set third-party advertising pixels or non-essential browser cookies. We use hosting and aggregate website reporting to understand website use. If we introduce non-essential cookies or tracking technologies in future, we will update this notice and use an appropriate consent mechanism where required.
Sharing information
We only share personal information where there is a reason to do so. Depending on the activity, recipients may include delivery partners, coaches, venues, safeguarding personnel, funders where reporting is appropriately aggregated or otherwise justified, professional advisers, insurers, technology providers, regulators or emergency/public authorities where necessary.
We do not sell personal information to advertisers.
International processing
Some technology providers may process information outside the UK. Where this happens, we use provider arrangements and safeguards intended to meet applicable UK data-protection requirements.
How long we keep information
We keep personal information only for as long as it is needed for the purpose for which it was collected and any applicable legal, safeguarding, insurance, accounting or funder requirements. When information is no longer needed, it is deleted or anonymised in line with our records-management approach.
Your rights
Depending on the circumstances, you may have rights to access your personal information, ask us to correct it, request erasure or restriction, object to certain processing, receive certain information in a portable format, or withdraw consent where consent is the basis we rely on.
To exercise a right or raise a privacy concern, email contact@eightsandarrows.org.uk. You can also complain to the Information Commissioner’s Office if you are unhappy with how your personal information has been handled.
Survey privacy information
Women and Girls Cue Sports Pathway research
Data controller: Eights and Arrows Pathways CIC, company number 17348068.
Privacy Lead: Emma Cunningham.
Contact: contact@eightsandarrows.org.uk.
Purpose of the research
The research helps us understand why women and girls start playing cue sports, what supports retention, what prevents participation and progression, what competition opportunities participants want and what practical programmes should be tested. Anonymised findings may inform pilot programmes, partnerships, funding applications, the Eights and Arrows Live Impact Dashboard and the annual State of Women and Girls in Cue Sports report.
Consent and special category information
Ordinary survey participation is voluntary and is based on consent. Optional questions may be skipped and a respondent may stop before submitting.
Optional information concerning health, disability, ethnicity, periods or other special category information requires explicit consent. We will not use a response to an optional special category question where the required explicit consent has not been provided.
Separate records
Survey responses are kept separately from contact details, consent records, assent records and safeguarding records. Contact information supplied for updates or future opportunities must not be connected to an individual’s survey answers.
Retention
Anonymised survey responses are normally retained for five years after publication of the final report. Identifiable contact, consent, assent or safeguarding records may have different retention periods where this is required for their specific purpose, safeguarding or legal obligations.
Your rights and complaints
You may ask us to provide access to personal information, correct it, erase it or restrict its use where the relevant right applies. You may also withdraw consent for future processing where consent is the basis relied upon. Withdrawal does not affect processing that was lawful before consent was withdrawn. Once a response has been fully anonymised, it may no longer be possible to identify and remove it.
To ask a question or exercise a right, email contact@eightsandarrows.org.uk.
People in the United Kingdom may contact the Information Commissioner’s Office, external website, opens in a new tab. Where Irish data protection law is relevant, people may contact the Irish Data Protection Commission, external website, opens in a new tab.
Women’s Challenges Centre
The Women’s Challenges Centre is primarily a read-only information resource in Phase 1. It does not include public diagnostic quizzes, individual test interpretation or sensitive symptom-checking tools. Any future interactive tool involving health or other sensitive data will require a defined purpose, lawful basis, Article 9 condition where applicable, safeguarding process and updated privacy information before it is enabled.
Changes to this notice
We may update this notice when our services, forms, technology or legal obligations change.
Last updated
15 August 2026