Last Updated: July 2026

Disability Action is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, use our services, make an enquiry, register for an event, subscribe to our communications, donate to us, volunteer with us or otherwise engage with our organisation.

We process personal information in accordance with:

UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Privacy and Electronic Communications Regulations (PECR)

By using our website, you agree to the practices described in this Privacy Policy.

Who We Are

Disability Action is the Data Controller responsible for the personal information collected through this website.
Disability Action
Portside Business Park
189 Airport Road West
Belfast
BT3 9ED
Email: info@disabilityaction.org
Telephone: (028) 90 297880
If you have any questions regarding this Privacy Policy or the way we process your personal information, please contact us using the details above.

Information We Collect
We may collect and process the following types of information:
Information you provide to us when you contact us, register for an event, complete a form, subscribe to our newsletter, apply for services, volunteer or donate, we may collect:

• Name

   

• Postal address

   

• Email address

   

• Telephone number

   

• Organisation or employer details

   

• Job title

   

• Information contained in your enquiry or correspondence

   

• Accessibility requirements

• Donation information

• Event registration details

Information Collected Automatically

When you visit our website, we may automatically collect information about:

• IP address

• Browser type and version

• Device type

• Operating system

• Website usage data

• Pages visited

• Date and time of visits

• Referral sources

This information helps us improve our website, services and user experience.

How We Use Your Information

We may use your personal information to:

• Respond to enquiries and requests

• Provide services and support

• Manage event registrations

• Process donations

• Communicate with supporters, volunteers and service users

• Send newsletters and marketing communications where you have consented or where we have another lawful basis

• Monitor website performance and user experience

• Meet legal and regulatory obligations

• Protect the security of our systems and users
  
  

What is a Lawful Basis for Processing?

Under UK GDPR, we process personal information using one or more of the following lawful bases:

Consent: Where you have given us clear permission to process your information for a specific purpose, such as subscribing to our newsletter.

Contract: Where processing is necessary to provide services you have requested or to enter into or fulfil an agreement with you.

Legal Obligation: Where we are required by law to process personal information.

Legitimate Interests: Where processing is necessary for our legitimate interests as a charitable organisation, provided those interests do not override your rights and freedoms.

Marketing Communications

We may send you information about our services, activities, campaigns, fundraising initiatives, events and news where:

You have provided consent  or  We have a lawful basis to contact you.

You may unsubscribe from marketing communications at any time by:

Clicking the unsubscribe link in any email  or by contacting us directly.

Withdrawing consent will not affect any processing carried out before consent was withdrawn.

Website Hosting and Third-Party Providers

Our website is hosted using HubSpot, which provides website hosting, customer relationship management (CRM), online forms, marketing communications, analytics and website management services.

When you submit information through our website, some or all of your information may be stored and processed within HubSpot's systems to enable us to provide services, respond to enquiries and manage communications.

We may also use carefully selected third-party providers to assist with:

• Website hosting

• Analytics

• Email communications

• Event management

• Payment processing

• IT support and security services

All third-party providers are required to process personal information securely and only in accordance with our instructions and applicable data protection laws.

International Transfers

Some of our third-party providers, including HubSpot, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we ensure that appropriate safeguards are in place, including:

UK International Data Transfer Agreements (IDTAs)

Standard Contractual Clauses

Adequacy decisions recognised by UK law

These safeguards help ensure your information receives an appropriate level of protection.

Website Analytics

We use analytics tools, including HubSpot Analytics and, where applicable, Google Analytics, to understand how visitors interact with our website.

The information collected may include:

• Pages visited

• Time spent on pages

• Device information

• Browser information

• General geographic location

• Referral sources

Analytics information is used to improve website performance, content and user experience.

Where required by law, analytics cookies will only be activated after consent has been provided.

Cookies

Cookies are small text files placed on your device when you visit a website.

We use cookies to:

• Ensure the website functions correctly

   

• Remember your preferences

   

• Improve website performance

   

• Analyse website usage

• Support marketing and communications activities

The cookies we use fall into the following categories:

Strictly Necessary Cookies: These are essential for the operation and security of the website.

Functional Cookies: These remember choices you make to enhance your experience.

Analytics Cookies: These help us understand how visitors use our website.

Marketing Cookies: These may be used to support communications and measure campaign effectiveness.

You can manage your cookie preferences through our cookie consent banner or through your browser settings.

For detailed information, please refer to our Cookie Policy.

Contact Forms and Online Enquiries

When you complete a form on our website, we may collect the information you provide in order to:

• Respond to your enquiry
• Deliver requested services
• Register you for events
• Process referrals
• Provide information you have requested

We will only use this information for the purposes for which it was collected unless we are legally required or permitted to do otherwise.

Fundraising and Supporter Engagement

If you support Disability Action through donations, fundraising activities, campaigns or events, we may process your information to:

• Administer donations

• Manage supporter relationships

• Communicate about our work and impact

• Invite you to future fundraising opportunities where appropriate

You may opt out of fundraising and marketing communications at any time.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.

Retention periods vary depending on factors such as the nature of the information, legal requirements, financial and regulatory obligations or operational need. When personal information is no longer required, it will be securely deleted or anonymised.

Data Security

We take appropriate technical and organisational measures to protect personal information from:

• Unauthorised access

• Loss

• Misuse

• Disclosure

• Alteration

• Destruction

These measures include secure systems, access controls, staff training and regular security reviews.

While we take reasonable steps to protect personal information, no method of internet transmission or electronic storage is completely secure.

External Links

Our website may contain links to external websites operated by other organisations.

This Privacy Policy applies only to Disability Action's website. We encourage users to review the privacy policies of any external websites they visit.

We are not responsible for the privacy practices or content of external websites.

Social Media

We maintain official profiles on social media platforms including LinkedIn, Facebook, Instagram, X and other relevant channels.

Any information shared through social media platforms is governed by the privacy policies of those platforms.

We encourage users not to share sensitive personal information through public social media channels.

Your Rights

Under UK GDPR, you have the right to:

• Request access to your personal information

• Request correction of inaccurate or incomplete information

• Request deletion of your personal information in certain circumstances

• Request restriction of processing

• Object to processing based on legitimate interests

• Withdraw consent where processing is based on consent

• Request transfer of your personal information to another organisation where applicable

To exercise any of these rights, please contact us using the details provided above.

Complaints

If you are unhappy with how we process your personal information, please contact us so that we can attempt to resolve your concerns.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

Website: https://www.ico.org.uk

Telephone: 0303 123 1113

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, technology, our services or our processing activities.

The latest version will always be available on our website and the revision date will be displayed at the top of this page.