Privacy notice

enviroverse (“we”, “us”) is the data controller for the information described here. You can contact us about anything in this notice, including any request about your data, at charlie@enviroverse.org.uk.

Through the Operation Wildflower interest form we may collect:

• Registration details — your name (optional), email address, whether you are a university member or community member, your university or council area, your course or day-to-day role, and any society you belong to.
• Co-creation answers — what you hope to gain, issues you care about, project ideas, preferred activities, availability and what might make taking part difficult.
• Evaluation answers (“starting point”) — ratings about confidence, skills, belonging, wellbeing, loneliness and worry about environmental problems, and how often you take part in activities.
• Accessibility and adjustment needs — anything you tell us that would help you take part.
• Technical information — basic security and delivery logs created when you use the site.

Every question after the first step is optional. You can leave anything blank, and several questions offer “prefer not to say”.

Some answers — accessibility or disability needs, wellbeing, loneliness and distress about environmental problems — can reveal information about your health. This is “special category” data under UK GDPR. We only collect and use it where you have given us separate, explicit consent on the form (Article 9(2)(a)), and only for two clearly separated purposes:

• Support — arranging adjustments so you can take part.
• Evaluation — understanding, as a group, whether the programme improves wellbeing and confidence.

You can say yes to one and no to the other, and you can change your mind at any time by emailing us. If you say no, the sensitive questions are not shown and nothing of that kind is stored.

• Managing your registration and sending cohort dates and joining details — steps you asked us to take when you registered (Article 6(1)(b)).
• Telling you about future cohorts, events and opportunities — consent (Article 6(1)(a)), only if you opted in; it's off by default.
• Designing sessions around what people want and need — legitimate interests (Article 6(1)(f)): improving a free programme for participants.
• Evaluating whether the programme works — consent (Article 6(1)(a)), plus explicit consent (Article 9(2)(a)) for any health-related answers.
• Sharing with your university or local partners — consent (Article 6(1)(a)), only where you said yes to that specific sharing question.
• Site security and record keeping — legitimate interests.

• The enviroverse team — access is restricted to the programme lead account; responses cannot be read publicly.
• Our hosting and database provider — Lovable Cloud (built on Supabase), which stores the responses on our behalf under a data processing agreement.
• Your university’s sustainability team, or your council and local sustainability partners — only if you said yes to that question, and only to the extent you agreed: your interest and project interests, and separately any adjustments you need, or group-level evaluation summaries.

We never sell your information or use it for advertising.

Our data is hosted in the European Economic Area. If a supplier processes data outside the UK or EEA, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

• Registration and contact details: until you ask us to delete them, or three years after your last contact with the programme.
• Evaluation answers: up to three years after the programme cohort ends, so before-and-after comparisons can be completed, then deleted or fully anonymised.
• Accessibility and health-related answers: deleted at the end of the cohort you take part in, or sooner on request.

The optional parts of the form can be saved separately from your registration, without your name, email, course or society, under a tracking code you choose. Please note this is pseudonymous, not fully anonymous: your university or area, and anything you write in free text, could in principle identify you, especially in a small group. Please don’t include identifying details in free text answers. We only ever report results as group totals, and we suppress totals for very small groups.

You have the right to:

• ask for a copy of the information we hold about you;
• have inaccurate information corrected;
• ask us to delete your information;
• restrict or object to how we use it;
• receive your information in a portable format;
• withdraw any consent at any time — this doesn’t affect anything we did before you withdrew it.

To exercise any of these, email charlie@enviroverse.org.uk. We respond within one month. Every email we send also has an unsubscribe route.

If you’re unhappy with how we handle your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

We use only the cookies and local storage needed to keep the site working and to keep you signed in if you have an account. We don’t use advertising or third-party tracking cookies.