Privacy Notice and
Cookie Policy

Introduction

Community Development and Health Network (CDHN) (“we”, “us”, “our”) is a regional infrastructure organisation working across Northern Ireland to address health inequalities and the social determinants of health. We are committed to protecting the privacy and security of anyone who visits our website, joins as a member, attends our events and training, or otherwise contacts us.

This notice explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have. It applies to www.cdhn.org and to personal data we collect through membership sign-up, contact forms, newsletters, and event or training bookings.

We are the “data controller” for the personal data described in this notice for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Community Development and Health Network Address: 30A Mill St, Newry, BT34 1EY Email: info@cdhn.org Charity/Company number: NI 106078

If you have any questions about this notice or how we handle your data, please contact us.

What Personal Data We Collect

We only collect personal data that is necessary for the purposes described below. Depending on how you interact with our website, this may include:

• Contact details — name, email address, organisation, and phone number, collected when you use our contact form or membership form.
• Membership information — organisation name, role, sector, and areas of interest, collected via our membership sign-up form.
• Communication content — any information you choose to include in a message to us, whether via the contact form or by email.
• Technical data — IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics tools.

We do not knowingly collect any special category data (such as health data about you personally) through our website forms. We do not collect payment card details through this website.

How We Use Your Personal Data and Our Legal Basis

We use your personal data only for the purposes for which it was collected, relying on one of the following legal bases under UK GDPR:

• Responding to enquiries submitted via our contact form — on the basis of our legitimate interests in responding to people who contact us.
• Processing and managing your CDHN membership — on the basis of performance of a contract with you and/or our legitimate interests in running our membership network.
• Sending newsletters or updates you have signed up for — on the basis of your consent.
• Understanding how our website is used, to improve it — on the basis of your consent (analytics cookies).
• Complying with legal or regulatory obligations — on the basis of legal obligation.

Where we rely on consent, you may withdraw it at any time.

We do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you.

Who We Share Your Data With

We do not sell or rent your personal data. We may share personal data with:

• Service providers who process data on our behalf, such as our website host, email/newsletter platform, or IT support providers, under contracts that require them to protect your data.
• Funders or regulators, where we are required to report aggregated or anonymised information (we do not share your identifiable personal data with funders without a lawful basis for doing so).
• Professional advisers, such as auditors or legal advisers, where necessary.
• Authorities, where required by law.

Some of our service providers (for example, analytics or video-hosting platforms) may be based outside the UK. Where this is the case, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement or an adequacy decision.

How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes it was collected, taking account of legal, accounting, and reporting requirements. As a general guide:

• Enquiries via the contact form are retained for as long as needed to deal with the enquiry, then deleted or anonymised, typically within [12] months.
• Membership records are retained for the duration of your membership and for a reasonable period afterwards, to allow us to re-engage former members, unless you ask us to delete your data sooner.
• Newsletter subscribers are retained until you unsubscribe or ask us to remove you.

Cookies and Similar Technologies

Our website, www.cdhn.org, uses cookies and similar technologies to make the site work, understand how it is used, and, in some cases, to display content from third parties. This section explains what these are and how you can control them, in line with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR.

What is a cookie?

A cookie is a small text file placed on your device when you visit a website. Cookies allow a site to recognise your device and remember information about your visit.

Categories of cookies we use

• Strictly necessary cookies are required for the website to function — for example, security, load balancing, and remembering your cookie preferences. These cannot be switched off and do not require your consent.
• Analytics/performance cookies, including Google Analytics, help us understand how visitors use the site — such as pages visited, time on site, general location, and device type — so we can improve it. This data is generally aggregated or pseudonymised. These require your consent.
• Functionality cookies remember choices you make on the site, such as text size or region, to provide a more personalised experience. These require your consent.
• Third-party and embedded content cookies are set by embedded content such as YouTube videos or social media widgets (Facebook, Twitter/X, Instagram, LinkedIn). These third parties may set their own cookies when you interact with embedded content, over which we have no direct control. These require your consent.

Specific cookies (indicative — to be confirmed by cookie audit)

• _ga and _ga_*, set by Google Analytics, distinguish users for analytics reporting and last for up to 2 years.
• _gid, set by Google Analytics, distinguishes users and lasts 24 hours.
• VISITOR_INFO1_LIVE and YSC, set by YouTube/Google, are set when a YouTube video is embedded and played, with varying durations.
• Cookies such as datr and sb, set by Facebook, are set when Facebook content or widgets are embedded, with varying durations.
• Session and security cookies, set by the CDHN website (Drupal), maintain your session and site security, lasting only for the browsing session.

Managing your cookie preferences

When you first visit our website, you will be shown a cookie banner allowing you to accept or reject non-essential cookies, and to change your preferences at any time.

You can also control or delete cookies through your browser settings. Please note that blocking some cookies may affect the functionality of this and other websites. For guidance, see www.aboutcookies.org or your browser’s help pages.

How We Protect Your Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including access controls, staff training, and secure hosting arrangements. While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data in certain circumstances (the “right to be forgotten”)
• Restrict or object to our processing of your data
• Data portability, where applicable
• Withdraw consent at any time, where we rely on consent (for example, newsletters or analytics cookies), without affecting the lawfulness of processing before withdrawal
• Complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you believe we have not handled your data properly

To exercise any of these rights, please contact us at cdhn.org/contact-us/. We will respond within one month, as required by law.

Information Commissioner’s Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113

Children’s Privacy

Our website is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to This Notice

We may update this Privacy Notice and Cookie Policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date at the top of this page shows when it was last revised. We encourage you to review this notice periodically.

Contact Us

If you have any questions about this notice, or wish to exercise your data protection rights, please contact:

Community Development and Health Network Email: info@cdhn.org Address: 30A Mill St, Newry, BT34 1EY Website: www.cdhn.org/contact-us