Privacy notice

CounterSpike Limited is the controller of your personal data. We are a company registered in England and Wales, company number 15586774, with our registered office at Quarry Hill House, Burford Road, Chipping Norton, England, OX7 6HZ. We also operate in the United States as CounterSpike US.

Contact us about privacy at partysafe@counterspike.com.

• Account details. When you create a free membership: your email address, a securely stored password, and the member type you choose (for example parent, school or venue).
• Organisation details. If you join on behalf of a school, university, venue or other organisation: the organisation name, address, your role, and contact details.
• Pledge and enquiry details. When you use the pledge form: your name, email, and, if you choose to give them, your organisation, role and message.
• Incident reports. If you report a suspected spiking incident: the details you enter. Reports are anonymised by default and we do not ask for the name of the person affected.
• Training and certificates. If you take PartySafe training: your name, course progress, completion date and certificate number.
• Orders. If your organisation orders products: delivery address, billing contact and order history. Card payments are handled by our payment provider and we never see your full card number.
• Website usage. Basic, privacy-friendly analytics about pages visited and the device and browser used. We do not use advertising cookies.

• To run your membership and give you your resources (contract).
• To reply to your pledge or enquiry and keep you updated about the movement, where you have asked us to (consent, which you can withdraw at any time).
• To build a coalition picture of where spiking happens and where venues, schools and partners are taking action, using anonymised and aggregated data only (legitimate interests).
• To issue and verify training certificates (contract and legitimate interests).
• To process orders and meet our tax and accounting duties (contract and legal obligation).
• To keep the site secure and working (legitimate interests).

PartySafe accounts are for people aged 13 and over. Schools can use our education resources with pupils without pupils creating accounts. If we learn that a child under 13 has created an account, we will delete it.

When a school, college or university runs PartySafe Learn, the institution is the controller for its students' data. Students redeem a code on party-safe.com/redeem, which records only that the code was used. Course progress is held by our learning platform on the institution's behalf. We receive totals, never individual student results. Institutions can ask us to delete their codes and figures at the end of each academic year.

We share personal data only with service providers who help us run PartySafe, under contract and only for the purposes above. These include our website and database hosting, email, training platform, payment, and fulfilment providers. Coalition partners such as police, licensing authorities and health services receive anonymised and aggregated data only, never your personal details. We never sell personal data.

Some of our providers store data in the United States or elsewhere outside the UK. Where this happens we rely on UK adequacy regulations or the UK International Data Transfer Addendum to protect your data.

• Membership data: while your account is active, then 24 months after your last sign-in.
• Pledge and enquiry data: 24 months after your last contact with us.
• Training and certificate records: 6 years, so certificates can still be verified.
• Order records: 6 years, as required for tax.
• Anonymised incident data: kept indefinitely, as it no longer identifies anyone.

Under UK data protection law you can ask to access, correct, delete or move your data, object to or restrict how we use it, and withdraw consent at any time. Email partysafe@counterspike.com and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We will update this notice when our practices change and show the date at the top.