Privacy notice

What information do we collect?

We collect information in the following ways.

• Information you give to us. This includes your name, email address, and any other personal data freely volunteered when you sign up for, or are invited to our service. If we request personal sensitive information (such as health information), this is to make reasonable adjustments to accommodate you (for example, for an event), otherwise we will be clear about the sensitive information we are collecting and why.
• Information we collect through your use of our platform. We collect information about how you interact with the content on our platform, including whether you watch embedded content from third-party websites (for example, YouTube and Vimeo), how much content you create an engage with, frequency of engagement, and the links you click. We collect your IP address but we remove the last digits to protect your privacy. This means we only have region level information about your location. We also collect information about the device you use to browse the website, including browser type/version, and operating system.

How do we collect your information?

Most of the information we collect comes directly from you. We collect and process your information when you do the following.

• Sign up to the platform
• Voluntarily complete a survey or provide feedback to us via phone or email.
• Visit and use our platform, through cookies and a tag manager (this controls the analytics data we collect).
• Meet with us in person.

How will we use your information?

We collect your information so that we can:

• provide access to our service
• follow up on requests for support;
• notify you of relevant content;
• improve the website content and experience.

How do we store your information?

We are committed to storing your information securely. To prevent unauthorised access or disclosure, we have put in place physical and electronic measures to safeguard and secure it.

When we use other organisation’s services to support our work, we sometimes send and store the information we collect outside the European Economic Area (EEA), to carry out the activities described in “How will we use your information?”. The organisations we use who are outside the EEA either have the EU-US Data Privacy Framework accreditation, or we have standard UK/EU model contract clauses in place.

Marketing

We may contact you with news and events if you are within our ZING network, and have shared your contact details with us for the purpose of being contacted in this way. You can opt out of this communication at any time by replying and asking us to remove you from our mailing list, or contacting privacy@zing.org.uk.

If you sign up through the platform, we will not add you to any marketing lists you are not already a member of, unless we ask you separately.

What are your rights and choices?

• The right to access – You have the right to request copies of your personal information.
• The right to rectification – You have the right to request that we correct any information you believe is factually inaccurate, or complete any incomplete information.
• The right to deletion – You have the right to request that we delete your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we provide back to you the personal information you have provided us, under certain conditions. This right also includes us sending that information directly to a third party if you request it, and if it is technically feasible.

If you make a request, we have one month to respond to you. If the request is significantly onerous, we have the right to take up to two months, and we will be upfront if this is the case. If you would like to make a rights request please contact us as follows.

Information required by EU privacy law

As well as the other information in this privacy notice, EU privacy law requires us to provide the following extra information.

Lawful bases for processing

This refers to the reasons why we collect and use your personal information. We explain these above in plain English but in legal terms we collect and use your personal information using the following lawful bases.

• Performance of a contract: to provide you with products, services and information you request or that are integral to our business.
• Legitimate interests: for legitimate business purposes. To use this lawful basis we assess both our interests and yours, to make sure that what we’re doing does not cause any unjustified privacy intrusion.
• Consent: for optional activities where you need to give us permission or opt in.
• Legal obligation: to comply with legal obligations (for example, relating to equality law obligations, tax, customer due diligence and so on).

What are cookies?

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our website, we will collect information from you automatically through cookies and similar technology.

For further information, visit cookiesandyou.com.

How do we use cookies?

We use cookies in a range of ways to improve your experience on our website, including the following.

• Understanding how you use the website and embedded content.
• For enabling functionality like remembering your login, and providing access to embedded third party content.
• For content delivery security.

We have also given permission for embedded video services like YouTube and Vimeo to set cookies on our site, so they can understand how you engage with the content they host. Where possible, we prevent their ability to set cookies and track your usage until you engage with the content.

What type of cookies do we use?

There are a number of different types of cookies, however, our website uses the following.

• Functional - we use these cookies so that we can recognise you on our website, remember your previous visits, and the preferences you made. We use a mix of first-party and third-party cookies.
• Advertising – we use these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, and part of your IP address (the last digits are removed). We sometimes share anonymous data with third parties for advertising purposes.

First-party cookies

Third-party providers

How to manage your cookies

You can edit your cookie preferences at any time by opening the cookie preference manager here, or by clicking the ‘lock’ icon in the bottom left corner of our website.

Subprocessors

To deliver the Road to Joy service, we use the following subprocessors. ZING is the data controller, but does not own your data. ZING will store your name, email address, profile photo and any content saved to your account for the purpose of providing the service, but your data is not processed for any purpose other than providing the “Road to Joy” service to you, and monitoring your usage of the platform to improve it over time. Your data will not be sold or used to train AI models, and you can delete your account at any time.

To provide this service, we use the following data processors:

• Lovable Cloud / Supabase - for database, authentication, file storage (avatars), email queue and delivery.
• Google Cloud - for Google OAuth, capturing your name, email address and profile photo.
• Cloudflare - edge hosting / worker runtime.
• Google Analytics - anonymised acquisition analytics.
• Hotjar - anonymised user experience analytics.
• Google Tag Manager - management of our analytics and marketing properties, on the platform.

Privacy notices on other websites

The Road to Joy platform contains links to other websites. Our privacy notice applies only to our website, so if you click on a link to another website, you should read their privacy information.

Changes to our privacy policy

We keep our privacy notice under regular review and place any updates on this web page. This privacy notice was last updated on 26th June 2026.

How to contact us

If you have any questions about our privacy policy, the information we hold on you, or you would like to make a rights request, please contact us.