Privacy Policy

Kandryn (“we”, “us”, “our”) is operated by Andrew Bennett. We are committed to protecting your privacy and handling your personal information openly and responsibly. This policy applies to the website at www.kandryn.co.uk and explains how we collect, use, store and share information when you visit the site or get in touch.

Because Kandryn supports people with their mental wellbeing, we know that the information you share with us can be personal and sensitive. We treat it with care, and we keep this policy in plain language so you can understand exactly what happens with your data.

Information we collect

Information you give us

When you complete the contact form, we collect the details you choose to provide:

• Your name
• Your email address
• The reason for getting in touch (for example, that you are looking for support, or that you would like to support our work)
• Your message, and anything you choose to include within it

If you email us directly, we will also hold the contents of that correspondence.

Information collected automatically

Like most websites, our hosting keeps standard server records when pages are requested. These can include your IP address, the type of browser and device you are using, the pages you visit and the date and time of your visit. This information helps keep the site secure and running properly.

When you send the contact form, a copy of your enquiry is delivered to us by email and a record is also written to a log on the server so that we can manage enquiries reliably and look into any delivery problems.

Spam protection

To protect the contact form from automated abuse, we use Google reCAPTCHA. This service checks whether a submission is likely to come from a real person rather than a bot, and to do this it may collect device and usage information and set its own cookies. Your use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.

Donations

If you choose to support the #MattsMessage Hope Fund, payments are handled securely by Stripe. We never see or store your card details - these are processed directly by Stripe as the payment provider. We may receive confirmation that a payment has been made, along with limited information such as the amount and the date. Stripe processes this information in line with its own Privacy Policy.

Sensitive information

If you contact us about support, your message may include information about your health, your feelings or your circumstances. Under data protection law this is treated as “special category” information, which carries extra protection.

We only use this information to respond to you and to provide the support you have asked about. We do not share it for marketing, and we apply the confidentiality and safeguarding commitments set out on our eligibility page. As explained there, the only circumstances in which confidentiality may be overridden are where there is a genuine concern about immediate risk to life, where safeguarding concerns involve a child or vulnerable adult, or where disclosure is required by law.

How we use your information

We use the information we collect to:

• Reply to your enquiry and arrange any support, session or talk you have asked about
• Keep a record of our correspondence with you
• Protect the website and the form from spam and abuse
• Process and acknowledge donations to the Hope Fund
• Understand, in aggregate, how the website is used so we can improve it
• Meet our safeguarding responsibilities and any legal obligations

We do not sell your information, and we do not use it to send you marketing unless you have asked us to.

Our lawful basis

Under the UK GDPR we rely on the following lawful bases for using your information:

• Consent - when you send us a message or share sensitive information, you are choosing to give it to us so that we can help
• Legitimate interests - to respond to enquiries, keep records, and keep the website secure
• Legal obligation and safeguarding - where we are required to act, or where there is a genuine concern about someone’s safety

You can withdraw your consent at any time by contacting us using the details below.

Cookies and analytics

We do not use advertising or tracking cookies, and we do not build profiles of visitors.

To understand how the website is performing, we use Plausible Analytics, a privacy-focused measurement tool. It does not use cookies and does not collect or store any information that could be used to identify you personally. The statistics it produces are anonymous and aggregated - for example, the total number of visits to a page, or the broad region that visitors come from - and this data is processed within the European Union. Nothing is shared with third parties for advertising purposes.

The main cookies you may encounter are those set by Google reCAPTCHA on the contact page, and any set by Stripe if you proceed to make a donation. These are used for security and to process payments, rather than for tracking.

Who we share it with

We do not sell or rent your information. We share it only where necessary with the trusted providers that help us run the website and respond to you, including:

• Our website host and email provider, who store the site and deliver your enquiry to us
• Google reCAPTCHA, for spam protection on the contact form
• Stripe, if you make a donation, to process the payment securely
• Plausible Analytics, for anonymous, aggregated website statistics

We may also disclose information if we are required to do so by law, or where it is necessary to protect someone from immediate risk of harm, in line with our safeguarding responsibilities.

How long we keep it

We keep enquiry information for as long as we need it to respond to you and to keep a reasonable record of our contact, after which it is deleted. Where information relates to support we have provided, or to a safeguarding matter, we may keep it for longer where we have a clear reason or legal duty to do so. Server and enquiry logs are held only for as long as they are useful for security and reliability, and are then removed.

How we protect it

The website is served over a secure (HTTPS) connection, and we take reasonable technical and organisational measures to protect the information we hold against loss, misuse and unauthorised access. No method of transmitting information over the internet is completely secure, so while we work hard to protect your data we cannot guarantee absolute security.

Your rights

Under data protection law you have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct information that is inaccurate or incomplete
• Ask us to delete your information, where there is no overriding reason to keep it
• Ask us to restrict or object to how we use your information
• Withdraw your consent at any time

To exercise any of these rights, please contact us using the details below. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at ico.org.uk.

Children’s privacy

This website and our services are intended for adults. We do not knowingly collect information from children. If you are under 18 and would like support, we would encourage you to speak with a parent, carer, teacher or another trusted adult, who can help you get in touch. If you believe a child has provided us with personal information, please contact us so we can remove it.

Other websites

Our site may link to other websites and social media pages that we do not control. This policy does not apply to those sites, and we encourage you to read their own privacy policies before sharing any information with them.

Changes to this policy

We may update this policy from time to time to reflect changes to the website or to the law. When we do, we will revise the “last updated” date at the top of this page. We encourage you to review it occasionally so you stay informed.