Privacy Policy

Legacy in the Community Privacy Policy

Our contact details

Name: Legacy in the Community

Address: Crownford House, Swan St, Merthyr Tydfil, CF47 8EU

Phone Number: 01685709549


The type of personal information we collect

We currently collect and process the following information:

  • Personal identifiers, contacts and characteristics (for example, name, IP address and contact details)

  • If an individual is using our services such as Working on Wellbeing, an external online sign-up form will collect information pertaining to disability, national insurance number, benefits, and personal information regarding reasonable adjustments. This information is private and confidential and goes straight to the Legacy in the Community team

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • An individual may wish to subscribe to Legacy in the Community for digital updates and newsletter purposes

  • Person(s) wishes to enrol onto an employability programme

  • An enquiry is made

We also receive personal information indirectly, from the following sources in the following scenarios:

  • Person(s) may be featured in a blog post or social media update

  • An individual may be referred or signposted to our website

Accessing other website links via Legacy in the Community

Legacy in the Community’s website contains links to other websites, who each may operate on different terms of conditions and privacy statements. Legacy in the Community wish to note this as this is down to user discretion.

How information is processed

We use the information that you have given us in order to:

  • Contact an individual directly so they can access our services

  • To signpost individuals to projects, organisations and referral partners to assist in matters that Legacy in the Community cannot

  • Improve our services through feedback and marketing data analysis

We may share this information with the Welsh Government, Scope, and delivery partners on the Working on Wellbeing programme (Whitehead Ross, Disability Can Do, reSource) but this information applies ONLY to individuals enrolling on the Working on Wellbeing Starting Line programme.

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting

(b) We have a contractual obligation.

(c) We have a legal obligation.

(d) We have a vital interest.

(e) We need it to perform a public task.

(f) We have a legitimate interest.

How we store your personal information

Your information is securely stored.

We keep contact and personal information for as long as it is needed as per our service requirements, but an individual can opt out of this at any time by contacting Legacy in the Community at

In general Legacy in the Community only hold personal information for as long as there is a genuine reason to keep it which will be no more than that required by law.

Keeping your information secure is very important to us and we have systems to stop personal information being lost or used in the wrong way.  

If Legacy in the Community have reason to believe that information has been accessed, we will inform the individual(s) when the law requires.

Data will be disposed of via internal and external systems.

Childrens data

Legacy in the Community support individuals of all ages, but currently do not hold data of individuals younger than 16. Children have the same rights as adults over their personal data. These include the rights to access their personal data; request rectification; object to processing and have their personal data erased (Information Commissioners Office).

Data is stored securely, and information collected from individuals under 18 is done so with explicit consent of an individual, parent/guardian or appointee. Data concerning individuals under 16 is not shared with third parties or partners unless otherwise stated.

Your rights

Data is only stored to carry out the purposes that Legacy in the Community has been contacted/visited for. In this circumstance, if enrolling or subscribing, data collection will be mandatory (email addresses and names are collected). We respect your rights to protecting your data, and at any point an individual can:

  • Access their personal information
  • Ask for a copy of personal information
  • Make edits/amendments to personal information
  • Object to processing, storing or profiling of information
  • Have information removed (in accordance with your Right to Erasure)

Changes to this notice

We may make changes to this privacy notice from time to time. If we make any changes in the way personal information is used this will be made clear here on the Legacy in the Community website or by contacting you directly.

This privacy notice was last updated in March 2023.

Complaints procedure

If you have a complaint or have an issue to raise with statements raised in this policy, Legacy in the Community can be contacted by the details provided below.

Telephone: 01685709549


Our privacy notice is in accordance with the Information Commissioner’s Office (ICO). If you are unhappy with how your information has been collected, handled or processed, you can make a complaint to the ICO directly.