Privacy Policy

YOUR PRIVACY MATTERS

We understand that contacting PAG UK may mean sharing something deeply personal or difficult.We aim to collect as little personal information as possible and treat anything you share with care and respect.

We do not sell your information or use it for commercial marketing.

However, there may be circumstances where information needs to be shared to help protect a child or another person from serious harm, or where the law requires us to do so.

Last Updated: 5 September 2026

1. Who We Are

PAG UK (Parents Against Grooming UK) operates this website, pag-uk.org.

PAG UK provides information, education, resources and guidance relating to child sexual abuse, child protection and safeguarding. The website is also intended to provide information and resources for survivors of abuse, parents, families and others affected by abuse.

For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, PAG UK is responsible for the personal information we process.

Contact email: pag_uk@outlook.com
Postal address: 138 Yorkshire St, Rochdale, OL16 1LD

We aim to collect as little personal information as possible.

2. Information We May Collect

The information we collect depends on how you interact with PAG UK.

Information you provide to us

If you contact PAG UK by email or another communication channel, you may choose to provide:

• Your name

• Your email address

• Other contact details

• Information about your circumstances

• Information relating to abuse, safeguarding or your experiences

• Any other information you choose to include in your communication

Because PAG UK supports survivors and people affected by abuse, communications may contain highly sensitive personal information.

Please do not send unnecessary personal information, photographs, videos or other material relating to a child unless you have been specifically advised that it is appropriate to do so.

Technical information

When you visit our website, certain technical information may be collected automatically by Google Sites, Google services or other technical services supporting the website.

This may include information such as:

• IP address

• Browser and device information

• Operating system

• Referring website

• Pages visited

• General information about how the website is accessed and used

The information collected depends on the services and settings used by the website.

3. How We Use Personal Information

We may use personal information to:

• Respond to enquiries or requests for information

• Respond appropriately to safeguarding concerns

• Provide information or signpost people towards appropriate support

• Maintain and improve the PAG UK website

• Improve accessibility and user experience

• Maintain the security and functionality of our website and communications

• Keep appropriate records where necessary

• Comply with legal or safeguarding responsibilities

PAG UK does not sell personal information or use information provided to us for commercial marketing purposes.

4. Sensitive Information and Survivor Privacy

We understand that someone contacting PAG UK may be sharing extremely personal or difficult information.

This may include information about experiences of abuse, sexual abuse, trauma, health, family circumstances or concerns about the safety of a child.

We will treat information provided to us with care and respect and will seek to minimise the amount of sensitive information we collect and retain.

However, we cannot guarantee absolute confidentiality.

There may be circumstances where information needs to be shared with an appropriate organisation or authority where there is a serious safeguarding concern, an immediate risk of serious harm, or where disclosure is required or permitted by law.

5. Safeguarding and Information Sharing

PAG UK's work involves child protection and safeguarding.

If someone provides information suggesting that a child or another person may be at serious risk of harm, we may need to consider whether information should be shared with an appropriate safeguarding organisation or statutory authority.

This may include:

• The police

• Children's Social Care

• Appropriate safeguarding professionals

• Other statutory authorities

• Other organisations where there is a lawful and appropriate reason to share information

We will consider information sharing carefully and will seek to share only information that is relevant and necessary.

You do not need to prove abuse before seeking advice or support.

PAG UK is not a replacement for the police, Children's Social Care, medical services or other statutory safeguarding agencies.

If someone is in immediate danger, contact the emergency services directly.

6. Our Lawful Basis for Processing Information

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, this may include:

• Consent, where you have given consent for us to use your information for a specific purpose

• Legitimate interests, where processing is necessary for the legitimate activities of PAG UK

• Legal obligation, where we are required to process or disclose information by law

• Vital interests, where processing is necessary to protect someone's life or prevent serious harm

• Other lawful bases where applicable

Where particularly sensitive information is involved, additional requirements under data protection law may apply.

7. Google Sites and Google Drive

The PAG UK website is created and hosted using Google Sites.

We also use Google Drive to store and provide access to some PAG UK resources, including downloadable documents and leaflets.

Some resources may be shared using Google's "Anyone with the link" functionality so that members of the public can access them without needing a Google account. Google states that files shared in this way can be accessed without signing in. (Google Support)

The resources provided through PAG UK's website are intended to contain information and educational material rather than personal information about individual survivors or members of the public.

We take reasonable steps to ensure that personal or confidential information is not inadvertently included in publicly accessible resources.

Google processes information in accordance with its own privacy policies and terms.

8. Email and Communications

PAG UK uses Outlook and Gmail for email communication.

If you contact PAG UK by email, the information contained in your message, including your email address and any information you choose to provide, will be processed in order for us to respond and, where appropriate, deal with safeguarding or other legitimate concerns.

Please remember that email is not an emergency service.

If someone is in immediate danger, contact the emergency services.

Please also avoid sending unnecessary photographs, videos or other sensitive material involving children.

9. Canva

PAG UK uses Canva to create some of its educational, awareness and informational materials.

Canva may process information associated with our Canva account and the content we create using its services in accordance with Canva's own privacy arrangements. Canva states that it has security and data protection measures in place and provides information about how it processes and transfers data. (Canva)

PAG UK does not intentionally use Canva to collect personal information from visitors to this website.

10. Cookies and Website Technologies

Our website may use cookies or similar technologies associated with Google Sites and other services used to operate the website.

These technologies may be used to support website functionality, security and, where applicable, understand general website usage.

You can control cookies through your browser settings.

11. External Websites and Resources

The PAG UK website contains links to external organisations, support services, reporting systems, social media platforms and other resources.

These websites are operated independently from PAG UK.

Once you leave the PAG UK website, the privacy policy and terms of the organisation operating that website will apply.

PAG UK is not responsible for the privacy practices, security or content of external websites.

We encourage you to review the privacy information provided by external organisations before submitting personal information to them.

12. Data Security

We take reasonable steps to protect personal information against:

• Unauthorised access

• Loss

• Misuse

• Accidental disclosure

• Unauthorised alteration

• Unauthorised destruction

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

Because PAG UK may receive highly sensitive information, we encourage people contacting us to provide only information that is necessary for their enquiry.

13. How Long We Keep Information

We will retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or where there is a legal, safeguarding or other legitimate reason to retain it.

Retention periods may vary depending on the nature and sensitivity of the information.

When information is no longer required, we will take reasonable steps to securely delete or dispose of it.

14. Your Data Protection Rights

Depending on the circumstances, you may have rights under UK data protection law, including the right to:

• Ask what personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your information in certain circumstances

• Request restriction of processing in certain circumstances

• Object to certain processing

• Withdraw consent where consent is the lawful basis for processing

• Request a copy of certain personal information

These rights are subject to legal exceptions and may not apply in every situation.

To exercise your rights, contact: pag_uk@outlook.com

We may need to verify your identity before responding to a request.

5. Complaints

If you have concerns about how PAG UK has handled your personal information, please contact us first: pag_uk@outlook.com

We will take reasonable steps to investigate and address your concerns.

You also have the right to complain to the UK's independent data protection regulator, the Information Commissioner's Office (ICO).

Information Commissioner's Office (ICO)

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, legal requirements or how we process personal information.

The latest version will always be published on this page.

Last updated: 5 September 2026

I'd also put this small box right at the top

Because of who PAG UK is actually there to help, I think this is really important:

💙 

That gives a survivor the reassurance they actually need before they get into the legal wording.

One thing I would change from your original policy: don't say “we handle all communications with strict confidentiality.” For PAG UK, that's potentially too absolute. The wording above is safer and more honest because it makes the safeguarding exception clear without making survivors feel that everything they say will automatically be passed on.

And your Google Drive setup itself isn't inherently a privacy problem. Google's current documentation confirms that “Anyone with the link” can access a shared file without signing into Google, which is exactly what you want for your public resources. (Google Support)