029 2094 1442
|
info@fosterteam.org.uk
|

Data Protection Statement

DATA PROTECTION STATEMENT

Fostering Independence Team (FIT)
Last Updated: 2026


1. Our Commitment

Fostering Independence Team (FIT) is committed to protecting the personal data of all individuals who engage with our services, including children, foster carers, families, employees, partners, and visitors to our website.

We recognise the importance of handling personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

FIT ensures that personal data is processed lawfully, fairly and transparently, and that appropriate safeguards are in place to protect sensitive information.


2. Principles of Data Protection

FIT processes personal data in accordance with the following core data protection principles:

• Personal data must be processed lawfully, fairly and transparently.
• Personal data must be collected for specified, explicit and legitimate purposes.
• Data collected must be adequate, relevant and limited to what is necessary.
• Personal data must be accurate and kept up to date where necessary.
• Personal data must not be retained longer than necessary.
• Appropriate security measures must protect personal data from loss, misuse or unauthorised access.


3. Personal Data We Handle

Due to the nature of fostering services, FIT may process personal information relating to:

• Foster carers and applicants
• Children and young people in care
• Birth families
• Employees and staff
• Professionals and partner organisations
• Individuals contacting us through the website

Some of this information may be classified as sensitive or special category data, including safeguarding-related information.


4. Lawful Processing

FIT processes personal data where one or more of the following legal bases apply:

• Consent
• Legal obligation
• Legitimate interests
• Contractual necessity
• Safeguarding responsibilities

Processing always takes place in accordance with relevant legal and regulatory requirements.


5. Data Security

FIT implements appropriate technical and organisational measures to ensure personal data is protected.

Security measures include:

• Secure hosting infrastructure
• Encrypted website connections (HTTPS)
• Role-based access to systems
• Multi-factor authentication (MFA) and two-factor authentication (2FA) where appropriate
• Controlled access to sensitive information
• Staff awareness of data protection responsibilities

The FIT website infrastructure and security architecture has been designed and implemented with cybersecurity best practices.


6. Data Retention

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or to meet legal, safeguarding and regulatory requirements.

Once data is no longer required, it is securely deleted or anonymised.


7. Individual Rights

Individuals have the following rights under UK GDPR:

• The right to access personal data
• The right to request corrections
• The right to request deletion where appropriate
• The right to restrict processing
• The right to object to certain processing
• The right to data portability

Requests can be submitted using the contact details provided below.


8. Contact

If you have any questions regarding data protection or how personal data is handled, please contact:

Fostering Independence Team (FIT)
South Wales, United Kingdom

Email: info@fitfostering.co.uk
Phone: 07838 534521