Privacy policy

OnePlusOne Marriage and Partnership Research (“OnePlusOne”, “we”, “us”, “our”) is a charity registered in England and Wales, number 1087994, with its registered office at c/o MHA MacIntyre Hudson, 6th Floor, 2 London Wall Place, London EC2Y 5AU. This notice explains what personal information we collect about you, why we use it, who we share it with, how long we keep it and what rights you have. It covers our websites, our online services and community spaces, our events, our newsletters and other communications, donations, and enquiries you send us. It does not cover our research studies, our staff or job applicants. Research participants should read our Research Participant Privacy Notice, applicants should read our Recruitment Privacy Notice, and staff should read our Privacy Notice for Employees and Other Personnel.

OnePlusOne is the data controller for the personal information described in this notice. That means we decide why and how it is used. Some of the organisations that provide our software and services act as our processors, which means they only use your information on our instructions. A small number act as controllers in their own right for their own purposes, and we say so where that applies.

Our Data Protection Officer.We have appointed a Data Protection Officer, who is responsible for overseeing how we look after personal information. You can contact them at privacy@oneplusone.org.uk, or by post at Data Protection Officer, OnePlusOne, c/o MHA MacIntyre Hudson, 6th Floor, 2 London Wall Place, London EC2Y 5AU.

We handle your information in line with UK data protection law, which means the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025, together with the Privacy and Electronic Communications Regulations for marketing messages and cookies.

We may collect and process the following types of personal information:

• Information you provide by filling in contact forms on our website, including your name, email address, telephone number, and any additional comments you choose to provide.
• Information you provide when signing up for our newsletter service, which is facilitated through a service called MailChimp. This includes your name and email address. You have the option to unsubscribe from our newsletters at any time by clicking the 'unsubscribe' link in the email.
• Information you provide when signing up for our lunch and learn communication, including your full name, email address, and county council or organisational representation. This communication is also managed through the MailChimp service.
• Information collected automatically through the third-party services that run parts of our websites and online services. These include Google Analytics and Google Ads, Microsoft, Stripe for donations, Vimeo for video, Typeform for forms and surveys, Memberstack for member accounts, CookieYes for managing your cookie choices, and the platforms that host our e-learning and community spaces. This may include your IP address, browser type, operating system and other technical information about your device and how it interacts with our services.
• Information collected through cookies. Please refer to our separate Cookie Policy for more details on our use of cookies and how you can manage them.

Where we get your information from

• Most of the information we hold comes directly from you, when you fill in a form, sign up, donate, register for an event, join our community or email us. We also collect some information automatically when you use our websites and online services, such as your device and browsing information.
• We may also receive information about you from other people or organisations. This includes partner organisations and practitioners who refer people to us, funders and commissioners we deliver work with, event and training platforms where you register through them, the platforms that host our community spaces, and publicly available sources such as an organisation's own website where we contact someone in a professional capacity.

We use your personal information for the following purposes:

• To communicate with you and respond to your enquiries promptly and effectively
• To provide you with information about our services and newsletters if you have opted to receive them
• To manage our lunch and learn communication and ensure you receive relevant content
• To improve our website and services through data analysis and statistical insights, helping us to better understand user behaviour and preferences
• To process donations and other transactions made through our website securely and efficiently
• To comply with legal and regulatory obligations that apply to our organisation
• To carry out research to develop our interventions (covered in detail by our Research Privacy Policy)

We must have a lawful basis for everything we do with your personal information. Which basis applies depends on what we are doing. The table below sets out the main purposes and the basis we rely on for each. Where we rely on legitimate interests, we have weighed our interests against your rights, and you can ask us for a summary of that assessment.

• Answering your enquiry. Legitimate interests, so that we can respond to people who contact us.
• Sending you our newsletter and updates about our work. Consent, or the charitable purposes soft opt-in explained in the next section. You can opt out at any time.
• Managing your registration for an event, webinar or training session. Contract, or legitimate interests where there is no contract.
• Processing a donation and claiming Gift Aid. Contract for the donation itself, and legal obligation for the tax and accounting records.
• Running our online community and member areas. Contract for your membership or account, and legitimate interests in keeping the space safe and well moderated.
• Understanding how our website is used so we can improve it. Legitimate interests, together with the separate cookie rules explained below.
• Keeping people safe. Where we act on a safeguarding concern we may rely on the recognised legitimate interest of safeguarding vulnerable individuals, on your vital interests, or on a legal obligation.
• Meeting our legal and regulatory duties, for example accounting, tax, charity law and responding to lawful requests. Legal obligation.

Where the information is more sensitive, for example information about health or relationships that you choose to share with us, we need an additional condition under Article 9 of the UK GDPR as well as a lawful basis. We rely on your explicit consent, or on the substantial public interest conditions for safeguarding, and we keep an appropriate policy document explaining how we do this.

We only send you marketing by email or text where the law allows it. That will either be because you told us you wanted to hear from us, or because we are relying on the charitable soft opt-in.

The charitable soft opt-in lets a charity send messages about its own charitable purposes to people who gave their contact details when they showed an interest in that work or offered support for it. It only applies where we gave you a clear and free way to opt out when you gave us your details, and in every message since, and it only applies to details we collected from 5 February 2026 onwards.

You can opt out at any time. Every marketing email has an unsubscribe link, and you can also email us at privacy@oneplusone.org.uk. Once you opt out we will stop sending marketing, although we may still contact you about something you have asked us for, such as an event you have booked or a donation receipt.

Our websites and online services use cookies and similar technologies, such as pixels, tags, scripts and local storage, to make them work, to keep them secure, to remember your preferences, to understand how they are used so we can improve them, and in some cases to help us reach people who might benefit from our work.

We use essential technologies to provide the services you ask for and to keep them secure. We ask for your consent before using analytics, advertising and other non-essential tracking technologies. You can refuse these technologies or change your choices at any time through the CookieYes cookie settings on our website.

In practice this means: technologies that keep the site working and secure, such as session and login cookies and our payment provider's fraud checks; technologies that remember your cookie choices; analytics that tell us how the site is used; video playback; member account access; and advertising and remarketing technologies, which we set only if you consent. Full details, including what each technology does, who provides it and how long it lasts, are in our Cookies and Online Tracking Notice. You can change your choices at any time using the cookie preferences tool on our website.

We share personal information only where we need to. We do not sell, rent or trade your personal information, and we do not share it with third parties for their own marketing.

We share information with the following kinds of organisation:

• Suppliers who run our systems on our behalf, such as website hosting, email and file storage, email marketing, online forms and surveys, event and booking tools, video hosting, our community platform and payment processing. These are our processors. They are bound by a written contract, may only use your information on our instructions, and must keep it secure.
• Partner organisations, where you have asked us to put you in touch with them or where we are delivering something jointly and we have told you so at the time.
• Professional advisers, such as our auditors, accountants and legal advisers, where they need the information to advise us.
• Regulators, public authorities and law enforcement, where the law requires or allows it, including where we need to act on a safeguarding concern.

A small number of organisations decide for themselves how they use information collected through our services, and are controllers in their own right for that use. Payment providers are the usual example, because they have their own legal duties for fraud prevention and financial regulation. Where that applies, their own privacy notice explains what they do.

Some of the organisations that provide our systems are based outside the United Kingdom, or store information outside it. This applies to a number of the services named above. When your information is transferred outside the UK we make sure it is protected to a standard similar to the protection it has here. We do that either because the UK Government has decided that the country concerned provides suitable protection, or by putting an approved contract in place, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission's standard clauses. We also consider the risks in the country concerned before the transfer goes ahead. You can ask us for more detail about a particular transfer.

We keep your personal information only for as long as we need it. How long that is depends on why we collected it. Some periods are set by law, for example financial and tax records. Others we set ourselves, based on how long the information is genuinely useful and how long we might need it if there were a dispute.

As a guide:

• Enquiries:kept while we deal with your enquiry and for a short period afterwards.
• Newsletter and marketing contacts: kept while you want to hear from us, or until two years without engagement, whichever comes first. After you unsubscribe, subscription details are kept for up to six months while we apply the change. We keep a minimal suppression record so that we do not contact you again by mistake.
• Event attendance records: kept for two years after the event for evaluation and follow-up.
• Donations and Gift Aid:kept for at least six years from the end of the financial year, because charity and tax law requires it.
• Community and member accounts:kept while your account is active and for a period afterwards.
• Safeguarding records:kept for longer, because concerns can come to light many years later.

In most cases giving us your information is entirely up to you. Where we do need certain information, for example to process a donation, to register you for an event or to set up a community account, we will make that clear at the time and explain what happens if you do not provide it, which is usually that we cannot provide the service.

We do not make decisions about you by purely automated means that have a legal effect on you or a similarly significant effect. Some of our systems use automated processing to support our work, for example spam filtering, website analytics and content moderation tools, but a person is involved in any decision that materially affects you. If that ever changes we will update this notice and explain the logic involved, what it means for you and your right to ask for a person to review the decision, to give your point of view and to challenge it.

Our services are aimed at adults. Some of our content is written about young people and family relationships, and some is intended for practitioners who work with them. Where we collect information about a child through a parent, carer or practitioner, we explain that at the point of collection. If we introduce a service aimed at or likely to be accessed by children, we will follow the Information Commissioner's Age Appropriate Design Code and provide privacy information written for younger readers.

We implement robust technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include:

• Use of encryption for data storage and data transfer using SSL (Secure Sockets Layer) technology
• Implementation of access management controls to restrict data access to authorised personnel only
• Regular security assessments and updates to ensure our systems remain secure
• Staff training on data protection and security best practices

You have a number of rights over the personal information we hold about you. Not all of them apply all of the time, and we will explain if a right does not apply in your case.

Right to access:you can request a copy of the personal information we hold about you.

Right to rectification:you can ask us to correct any inaccuracies in your personal information.

Right to erasure:you can request the deletion of your personal information (also known as the 'right to be forgotten'). Please also refer to our Research Privacy Policy for specific information related to research data.

• Data Retention and Destruction Policy V6
• GDPR Data Protection Policy V4
• OnePlusOne Cookies and Online Tracking Notice V1
• OnePlusOne Research Participant Privacy Notice V1
• OnePlusOne Recruitment Privacy Notice V1

Right to restrict processing:you can request that we limit the processing of your personal information in certain circumstances.

Right to data portability:you can request to receive your personal information in a structured, machine-readable format or have it transferred to another data controller.

Right to object:you can object to the processing of your personal information in certain circumstances, particularly in relation to direct marketing.

Right to withdraw consent:if you have given your consent for specific processing activities, you can withdraw it at any time.

Right to complain to us: you can complain directly to OnePlusOne if you think we have not handled your personal information properly. We will acknowledge your complaint within 30 days of receiving it, look into it, keep you posted and tell you the outcome as soon as we can.

To use any of these rights, please contact us using the details in the Contact us section. We may need to check who you are before we can act, and we may come back to you if we need you to tell us more about what you are looking for.

We will respond within one month. That month starts once we have your request, any information we need to confirm your identity and any fee we are entitled to charge. If your request is complex, or you have made several, we can take up to two months longer, and we will tell you within the first month if that happens. If you ask for a copy of your information and we need to ask you what you are looking for, the time we spend waiting for your answer does not count towards the month.

When you ask for a copy of your information, we will carry out a reasonable and proportionate search for it. That means we make a genuine and thorough effort to find what relates to you, rather than searching every system in every way regardless of the effort involved.

If we cannot do what you have asked, we will tell you why, and we will tell you that you can complain to us, complain to the Information Commissioner's Office and seek a remedy through the courts.

We may update this notice from time to time to reflect changes in what we do or in the law. Any changes will be posted on this page and the updated notice takes effect from the date it is posted. Where a change materially affects how we use your information, we will tell you directly if we can. The version history at the end of this notice records what has changed.

If you have any questions, concerns, or requests related to this Privacy Notice or how we handle your personal information, please contact us at:

• Email: privacy@oneplusone.org.uk for anything about your personal information, or info@oneplusone.org.uk for general enquiries
• Post: Data Protection Officer, OnePlusOne, c/o MHA MacIntyre Hudson, 6th Floor, 2 London Wall Place, London EC2Y 5AU

We would like the chance to put things right, so please come to us first if you can.

Complaining to the Information Commissioner

You also have the right to complain to the Information Commissioner's Office, which is the UK regulator for data protection. You can do that at any time. You do not have to complain to us first, although the ICO will normally ask you to give us the chance to respond, and that often sorts things out more quickly.

• Website: https://ico.org.uk/make-a-complaint/
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

You can also ask a court to look at how we have handled your personal information.

This policy should be read in conjunction with the following policies:

• Cookie Policy
• Research Privacy Policy