Data Protection Policy

Community Connect is committed to protecting all personal data with industry-leading security practices. We implement multiple layers of protection including:

• Encryption: All data is encrypted both in transit (using SSL/TLS) and at rest using advanced encryption standards.
• Access Controls: Strict role-based access controls ensure only authorised personnel can view sensitive data.
• Regular Audits: We conduct regular security audits and penetration testing to identify and address vulnerabilities.
• Secure Infrastructure: Data is stored on secure, GDPR-compliant cloud infrastructure with automatic backups.
• Staff Training: All team members receive regular data protection and privacy training.

Community Connect is built on a platform, which prioritises robust data security, compliance and is SOC 2 Type II compliant and ISO 27001 certified, adhering to international standards for information security management. We are committed to GDPR compliance, ensuring that all data processing activities meet stringent privacy regulations.Data is stored on servers located in the UK, and all vendors involved in data processing are bound by strict data processing agreements. The platform provides app-level security controls, including Row-Level Security (RLS), Field-Level Security (FLS), and Role-Based Access Control (RBAC) to manage data access. All API keys and secrets are stored securely and encrypted.

We never share your data without explicit consent. Your personal information is kept confidential and is only shared in the following circumstances:

• With Your Permission: When you explicitly consent to share your data with a service provider as part of a referral.
• Service Delivery: Only the minimum information necessary to deliver the service is shared with relevant organisations.
• Legal Requirements: Where legally required by law, we will comply with data disclosure requests.

Community Connect complies with the UK General Data Protection Regulation (GDPR) and follows international data protection best practices:

• Transparency: We are clear about what data we collect and how it's used.
• Purpose Limitation: Data is only used for the purposes you've consented to.
• Data Minimisation: We only collect data that is necessary and relevant.
• Accuracy: We maintain accurate, complete, and up-to-date data.
• Storage Limitation: Data is retained only for as long as necessary.
• Integrity & Confidentiality: Strong technical and organisational measures protect data from misuse.

We only collect personal data that is necessary to deliver our services: