Privacy Policy

1. Introduction & Role

UnitSolutions takes data privacy incredibly seriously, particularly given the nature of youth organizations. Under UK GDPR, UnitSolutions acts as a "Data Processor" providing software tools. The individual Unit or Organization using our software acts as the "Data Controller".

2. The Data We Collect

We collect two tiers of data:

• Leader Data: Names, email addresses, and roles of the volunteer leaders who create accounts on our platform.
• Youth & Parent Data: Names, dates of birth, medical conditions, and emergency contact details submitted via our secure "Magic Link" forms.

3. How We Use and Store Data

Data is stored securely on servers compliant with modern encryption standards. We only use this data to provide the UnitSolutions service (e.g., populating dashboards, generating risk assessments). We will never sell, rent, or trade personal data to third parties.

4. The 30-Day Auto-Purge Policy (Starter Forms)

To minimize risk and ensure GDPR compliance regarding sensitive data, UnitSolutions operates a strict auto-deletion policy for incoming starter forms. Any parent-submitted data via our Magic Link system is permanently and irrecoverably deleted from our active database 30 days after submission, regardless of whether the Unit Leader has processed it. Unit Leaders are solely responsible for transferring required data to their official governing body systems within this window.

5. User Rights

Under UK GDPR, users have the right to access, rectify, or request the erasure of their personal data. Parents wishing to exercise these rights regarding their child's data should contact their Unit Leader (the Data Controller) directly. Leaders wishing to delete their UnitSolutions account and associated data can do so from their dashboard settings or by contacting our support team.