Privacy policy

This Privacy Policy applies between you, the User of this Website, and The Basement Recovery Project, the owner of recovery.place and its subdomains (including my.recovery.place).
Throughout this Policy, “we”, “us” and “our” refer to recovery.place and its related platforms, including my.recovery.place, the online learning platform owned and operated by The Basement Recovery Project, a not-for-profit Lived Experience Recovery Organisation (LERO) based in the United Kingdom.
This Policy explains how we use any and all personal data collected by us in relation to your use of these Websites and any Services or Systems provided through them.

1. Definitions and Interpretation

In this Policy, the following terms shall have the following meanings:
“Account”: collectively, the personal information, payment information and credentials used by Users to access material and/or any communications system on the Website.
“Content”: any text, graphics, images, audio, video, software, data compilations and any other form of information capable of being stored in a computer that appears on or forms part of the Website.
“Cookie”: a small text file placed on your device when you visit certain parts of the Website or use certain features. For more information, see our [Cookie Policy].
“Data”: collectively, all information that you submit to the Website. This includes, but is not limited to, Account details and information submitted using any of our Services or Systems.
“Service”: collectively, any online facilities, tools, services or information that we make available through the Website either now or in the future.
“System”: any online communications infrastructure that we make available through the Website, either now or in the future. This includes, but is not limited to, web-based email, message boards, live chat facilities and email links.
“User” / “Users”: any third party that accesses the Website and is not employed by us and acting in the course of their employment.
“Website”: means the websites you are currently using (recovery.place and its subdomains, including my.recovery.place) unless expressly excluded by their own terms and conditions.

2. Data Collected

Without limitation, we may collect the following Data:
  • name;
  • date of birth;
  • job title and profession;
  • contact information such as email addresses and telephone numbers;
  • demographic information such as postcode, preferences and interests;
  • financial information such as credit/debit card details;
  • IP address (automatically collected);
  • web browser type and version (automatically collected);
  • operating system (automatically collected);
  • a list of URLs starting with a referring site, your activity on this Website, and the site you exit to (automatically collected); and
  • Cookie information (see our Cookie Policy).

3. Our Use of Data

  • 3.1 Any personal Data you submit will be retained by us for as long as you use the Services and Systems provided on the Website. Data submitted through communications systems may be retained for up to one year.
  • 3.2 Unless we are obliged or permitted by law to do so, and subject to Clause 4, your Data will not be disclosed to third parties.
  • 3.3 All personal Data is stored securely in accordance with the principles of the UK GDPR and the Data Protection Act 2018.
  • 3.4 Data may be used by us for the following purposes:
  • 3.4.1 internal record keeping;
  • 3.4.2 improvement of our products / services;
  • 3.4.3 transmission by email of information or materials that may be of interest to you, where permitted by law;
  • 3.4.4 contact for research or feedback purposes (e.g. by email or telephone), to help us improve and customise the Website.
  • 3.5 Lawful Bases for Processing
    Under the UK GDPR, we must always have a lawful basis for using personal data. Depending on the context, we may rely on one or more of the following lawful bases:
    Consent – where you have given clear consent for us to process your personal data for a specific purpose (for example, subscribing to a newsletter or accepting non-essential cookies). You can withdraw consent at any time.
    Contract – where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract (for example, creating an account or purchasing a course).
    Legal Obligation – where we are required to process your personal data to comply with a legal or regulatory obligation (for example, tax, accounting, or safeguarding requirements).
    Legitimate Interests – where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Examples include improving our services, ensuring security, or keeping in touch with you about recovery-related opportunities relevant to your engagement with us.

4. Third Party Web Sites and Services

We may, from time to time, employ the services of other parties for purposes including but not limited to payment handling, delivery of purchased items, analytics, search engine facilities, advertising and marketing.
These providers may be given access only to the Data necessary to perform the services we request. Any Data processed by such third parties must be done in accordance with this Policy and the UK GDPR.

5. Changes of Business Ownership and Control

  • 5.1 We may, from time to time, expand or reduce our business and this may involve the transfer of control of certain divisions to other parties. Data relevant to any transferred division will be transferred to the new owner or controller, who will be permitted to use the Data for the purposes for which it was originally supplied.
  • 5.2 In the event of such a transfer, you will be contacted in advance and given the choice to have your Data deleted or withheld from the new owner or controller.

6. Controlling Access to your Data

  • 6.1 Whenever you are required to submit Data, you will be given options to restrict our use of that Data. This may include
  • 6.1.1 use of Data for direct marketing purposes; and
  • 6.1.2 Sharing Data with third parties.

7. Your Right to Withhold Information

  • 7.1 You may access certain areas of the Website without providing any Data. However, to use all Services and Systems available, you may be required to submit Account information or other Data.
  • 7.2 You may restrict your internet browser’s use of Cookies. For more information, see our Cookie Policy

8. Accessing your own Data

  • 8.1 You may access your Account at any time to view or amend the Data. You may need to modify or update your Data if your circumstances change. 
  • 8.2 Under the UK GDPR, you have the right to request:

       access to the personal Data we hold about you;
       correction of any inaccurate or incomplete Data;
       deletion of your Data where legally applicable;
       restriction of our processing of your Data;
       portability of your Data to another provider; and
       to object to certain types of processing (e.g. direct marketing).

Requests should be sent to hello@recovery.place

9. Security

Data security is of great importance to us. To protect your Data, we have put in place appropriate technical and organisational measures to safeguard and secure Data collected online.

10. Cookies

We use Cookies and similar technologies to enhance your experience of the Website. All use of Cookies is governed by our [Cookie Policy], which forms part of this Privacy Policy.

11. Changes to this Policy

We may update this Privacy Policy from time to time as required by law or where we change our business practices. Any changes will be posted on this page and will become binding on your first use of the Website after the update. You are advised to check this page regularly.

12. Contacting Us

If you have any questions about this Privacy Policy or our Data practices, please contact us at: hello@recovery.place
Empty space, drag to resize
Last updated: 29 September 2025