Last updated: July 2025

Who We Are

CT5 Pride is a Community Interest Company (C.I.C) based in Whitstable, Kent, UK. We are committed to protecting your privacy and being transparent about how we use your information.

What Data We Collect and Why

  • Name – to identify you for applications and communication
  • Email address – to contact you about your application or volunteering
  • CV files (uploaded via volunteer applications) – to assess your suitability for volunteer roles
  • Application details – information you provide about your experience, interests, and role preferences
  • Role interest areas – to match you with suitable opportunities

Third-Party Services We Use

We use trusted third-party services to help us run CT5 Pride securely and efficiently. Your data may be processed by:

  • Supabase – for secure storage of application and CV data
  • Render – for backend infrastructure (Node server)
  • Netlify – for static site hosting
  • GitHub – for version control and admin content commits (no personal data)
  • Eventbrite – for ticketing and RSVP functionality
  • Zoho CRM (planned) – for community updates and email contact management
  • Jotform (planned) – for community stallholder registration forms
  • Mailchimp (planned) – for email newsletters

Personal data is only shared with these providers when necessary and always under secure conditions.

How We Keep Your Data Safe

We take your privacy seriously. We protect your information using secure technology and safe practices:

  • We use encrypted (HTTPS) connections so your information is protected in transit.
  • Your CVs and personal data are stored in a secure, private Supabase database and file storage.
  • Only authorised members of CT5 Pride’s team can access your data.
  • Admin access is protected using Supabase login and identity checks.
  • We never publish your personal data or sell it to other companies.
  • We regularly update our systems and delete your data when it’s no longer needed.

Secure Document Access

Any documents you upload as part of a volunteer or membership application — such as your CV or cover letter — are stored securely in our encrypted storage system. These files are not publicly accessible, and access is restricted to authorised CT5 Pride administrators only. When a file needs to be viewed (e.g. by an admin processing your application), our system generates a temporary, time-limited secure link that expires after 10 minutes. This ensures your documents are never stored with open access, reducing the risk of unauthorised access, token leakage, or browser caching vulnerabilities. We do not store or share permanent links to your files. This approach follows modern data security practices and aligns with our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

How Long We Keep Your Data

  • CVs and applications from unsuccessful candidates are deleted within 6 months.
  • Anonymised statistical data (e.g., total applications per role) may be kept for longer for reporting and improvement purposes.

Your Rights (UK GDPR)

  • You can ask to see the data we hold about you at any time.
  • You can request deletion or correction of your data.
  • You can withdraw your consent for us to use your data at any time.
  • You can complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.
To make a data request or ask a question about your privacy, please contact us:
Email: hello@ct5pride.org.uk
Or write to: CT5 Pride CIC, Whitstable, Kent, UK

Changes to This Policy

We may update this privacy policy from time to time. The latest version will always be available on this page.