Privacy policy
How ULDA & Partners Cooperative Ltd collects, uses and protects your personal data, and the rights you have over it under UK GDPR.
This policy explains what we do with personal data you give us through this website. It was last updated on 13 September 2026.
Who we are
The data controller is ULDA & PARTNERS COOPERATIVE LTD ("UK ULDA"), a company limited by guarantee registered in England & Wales under company number 11728901.
Registered office: C/O Spearmans, 333 Edgware Road, London NW9 6TD, United Kingdom.
Contact for data protection matters: info@ukuldacoop.org.
What we collect, and why
Membership applications
When you apply to join the cooperative we collect:
- your name and title;
- your date of birth — to confirm you meet the minimum age of 16 required by Article 12;
- your nationality, if you give it;
- your email address, phone number and correspondence address;
- the membership type, contribution amount, payment frequency and intended start date you propose;
- how you heard about us, and anything you write in the notes field;
- your declarations — that you have read the constitution, accept the members’ commitments, understand the risk, and agree to this policy;
- whether you opted in to marketing updates.
We deliberately do not collect bank details, card numbers, National Insurance numbers, passport or identity-document numbers, or document uploads through this website. Payment arrangements and any identity verification are handled separately, through our own process. If a web page ever asks you for those things in our name, do not supply them — tell us instead.
Contact form
We collect your name, email address, optional phone number, the subject you choose and the content of your message.
Technical data
Our host records standard web server logs, which include IP addresses. When you submit a form we store the submitting IP address and a timestamp, so that we can enforce rate limits and investigate abuse.
Our lawful basis
| What we do | Lawful basis (UK GDPR Article 6) |
|---|---|
| Process your membership application and, if approved, administer your membership | Steps taken at your request prior to entering a contract, and performance of that contract — Article 6(1)(b) |
| Answer your enquiry | Our legitimate interests in responding to people who contact us — Article 6(1)(f) |
| Keep records required of a UK company, including the register of members | Legal obligation under the Companies Act 2006 — Article 6(1)(c) |
| Send you marketing updates | Your consent — Article 6(1)(a). Given separately, never pre-ticked, and withdrawable at any time. |
| Prevent spam and abuse of our forms | Our legitimate interests in keeping the service available and secure — Article 6(1)(f) |
Who we share it with
We do not sell your data, and we do not share it for anyone else’s marketing. We do share it with:
- Our web host, which stores the site, its database and its email, as our processor.
- Our email provider, to deliver the acknowledgement and notification messages.
- Professional advisers — accountants, auditors and lawyers — where they need it to advise us.
- Regulators and authorities where we are legally required to, including Companies House filings.
Our delivery partner ULDA in Nigeria does not receive member personal data as a matter of course. If a specific arrangement ever requires a transfer outside the UK, we will rely on an appropriate safeguard under Chapter V of the UK GDPR and tell you first.
How long we keep it
| Record | Kept for |
|---|---|
| Unsuccessful or withdrawn membership applications | 12 months from the decision, then deleted |
| Member records while you are a member | For the duration of your membership |
| Former member records, including the register of members | As required by the Companies Act 2006 — at least 10 years from the date membership ended |
| Contact form enquiries | 24 months from your last contact, then deleted |
| Form submission IP addresses and timestamps | 90 days |
| Marketing consent records | Until you withdraw consent, plus 24 months as proof the consent existed |
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to erase data, where we have no continuing lawful reason to keep it;
- ask us to restrict how we use it, or object to processing based on legitimate interests;
- receive data you gave us in a portable, machine-readable form;
- withdraw consent to marketing at any time, without affecting anything done before you withdrew it.
To exercise any of these, email info@ukuldacoop.org with "Data request" in the subject line. We respond within one month. We may ask you to confirm your identity first — so that we do not disclose your data to someone else.
Some rights are limited where we have a legal obligation to keep a record. For example, we cannot erase entries from the statutory register of members while the Companies Act requires us to maintain them.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office, at ico.org.uk or on 0303 123 1113.
Cookies
This site sets no tracking or advertising cookies. See the cookie policy for the full detail of the small number of strictly necessary items we do use.
Changes to this policy
If we change this policy we will update the date at the top. Material changes affecting members will also be notified directly.