1. Who we are
PACT operates the CATCH and Bounce Digital Hubs. These platforms provide information, resources, learning and support for adopters, parents, carers, professionals and partner organisations.
PACT is a registered charity and an Ofsted-regulated Voluntary Adoption Agency. We are committed to protecting your personal information and using it responsibly.
Depending on how your account is created, PACT may act as either a Data Controller or a Data Processor.
1.1 When PACT is the Data Controller
If you register directly with one of our Digital Hubs, PACT is the Data Controller. This means we decide how and why your personal information is used.
1.2 When PACT is the Data Processor
If your account is created for you by a Local Authority, Regional Adoption Agency, Voluntary Adoption Agency, Virtual School, Fostering Service or another organisation, that organisation remains the Data Controller and PACT acts as a Data Processor. This means we process your information only on their instructions to provide the Digital Hub service.
Who this notice applies to
This notice applies to:
- Individuals who register directly for a Digital Hub account
- Individuals registered by Local Authorities
- Regional Adoption Agency users
- Voluntary Adoption Agency users
- Virtual School users
- Fostering Service users
- Professionals using the Digital Hubs
- Parents, carers and adopters using the Digital Hubs
How we use your data
3.1 Account Registration
When you register for a Digital Hub account, we collect information needed to create and manage your account. This may include:
- Name
- Email address
- Organisation or agency
- Username and password
- Location information such as city or Local Authority
Why we use this data:
To create and manage your account, provide access to the Digital Hub and deliver the services you have requested.
Legal basis:
Performance of a contract.
3.2 Using the Digital Hubs
As you use the platform, we collect information about how you access and use Digital Hub content.
This may include:
- Courses completed
- Resources viewed
- Login activity
- Learning progress
- Platform usage information
Why we use this data:
To provide Digital Hub services, improve the user experience and ensure the platform operates effectively.
Legal basis:
Performance of a contract and legitimate interests.
3.3 Forums and Community Features
Some Digital Hubs include forums and community features that allow users to communicate with one another. We may process:
- Forum posts
- Comments
- Messages
- Moderation records
We may monitor content to ensure compliance with platform rules and to identify safeguarding concerns.
Why we use this data:
To operate community features, maintain a safe environment and support safeguarding responsibilities.
Legal basis:
Performance of a contract.
3.4 Communications and Notifications
We may send you:
- Account-related emails
- Service notifications
- Security alerts
- Maintenance updates
- Subscription information
Why we use this data:
To keep you informed about your account and ensure the Digital Hubs continue to operate effectively.
Legal basis:
Performance of a contract.
3.5 Reporting and Service Improvement
We analyse how Digital Hubs are used so that we can improve our services and meet reporting requirements.
Where access is funded by another organisation, we may provide usage reports to that organisation.
This may include:
- Account activity
- Course completion information
- Usage statistics
Where possible, reports will be anonymised so that individuals cannot be identified.
Why we use this data:
To evaluate services, demonstrate outcomes, improve content and meet contractual reporting requirements.
Legal basis:
Legitimate interests, performance of a contract and consent where required.
4. What personal data we collect
4.1 Account Information
We may collect: Age, Family status, Ethnicity, Sex or gender, other profile information you choose to provide.
4.3 Usage Information
We may collect: Login records, pages viewed, resources accessed, course completion information, and forum activity.
4.4 Communications
We may collect messages sent through the platform, support requests, enquiries, feedback and survey responses
5. Sensitive information
Some information we use is more sensitive.
This may include: ethnicity, sex or gender information, information you choose to share in forums, information provided through surveys
We only collect this information where it is necessary and, where required by law, with your explicit consent.
6. Where your data comes from
Your personal information may come from:
- You directly
- Local Authorities
- Regional Adoption Agencies
- Voluntary Adoption Agencies
- Virtual Schools
- Fostering Services
- Other organisations funding or managing your access to a Digital Hub
7. Who we share your data with
We only share your information when necessary. This may include:
- Funding organisations
- Local Authorities
- Regional Adoption Agencies
- Voluntary Adoption Agencies
- Digital Hub service providers
- Hosting providers
- Technical support providers
Where an organisation funds your access to a Digital Hub, we may share account usage information with them. We may also share anonymised information for reporting, research and service evaluation purposes.
8. Safeguarding and sharing without consent
We take safeguarding seriously. We may share information without your consent if:
- There is a safeguarding concern
- Someone is at risk of harm
- We are required to do so by law
- It is necessary to protect the vital interests of an individual
9. How we store your data
We keep your information secure by:
- Using secure cloud-based systems
- Restricting access to authorised staff
- Using password-protected accounts
- Applying technical and organisational security measures
Information about how we use cookies is available in our separate Cookie Notice.
10. How long do we keep your data?
We keep your information only for as long as necessary.
| Active user accounts | Duration of active access |
| Expired user accounts | Up to 2 years after access ends |
| Forum content | Linked to account retention period |
| Payment records | In line with legal and financial requirements |
| Support requests and enquiries | In line with operational requirements |
We may retain information for longer where required for legal, safeguarding or regulatory reasons.
11. International transfers
Some of our service providers may be located outside the UK. Where this happens, we ensure appropriate safeguards are in place and that any transfers comply with UK data protection law.
12. Your rights
You have rights under data protection law. These include:
- The right to know how your information is used
- The right to access your information
- The right to correct inaccurate information
- The right to restrict processing in certain circumstances
- The right to object to processing in certain circumstances
- The right to request deletion of your information where applicable
- The right to withdraw consent where consent is relied upon
12. Contact us
If you have questions about this notice or wish to exercise your rights, please contact:
Data Protection Officer
- Email: dataprotection@pactcharity.org
- Post: PACT Head Office, 7 Southern Court, South Street, Reading, RG1 4QS
- Telephone: 0300 456 4800
14. Complaints
If you are unhappy with how your information has been used, you can contact the Information Commissioner’s Office (ICO).
- Telephone: 0303 123 1113
- Website: https://ico.org.uk
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Last updated: July 2026