Version 1.0
Last Updated: January 2026
Who we are
Mum Matters CIC is a community interest company focused on improving maternal wellbeing and experiences of care during pregnancy and parenthood.
For the purposes of data protection law, Mum Matters CIC is the Data Controller for any personal information you provide.
If you have any questions about this Privacy Notice or how your information is used, please contact us at neena@mummatters.org.uk
Why we collect information
We collect information to:
- Understand mothers’ experiences of pregnancy, birth, and parenthood
- Identify what matters most to mums and where gaps in support exist
- Inform the co-design and development of community-based support and services
- Contribute to learning, evaluation, and service improvement in maternal health and wellbeing
Where appropriate, anonymised or aggregated findings may also be used to:
- Support funding or commissioning applications
- Inform service evaluation or improvement work
- Contribute to learning with health, social care, or academic partners
Any such use will be consistent with the original purpose for which the data was collected and will not identify individuals.
What information we collect
Depending on how you engage with Mum Matters, we may collect:
Personal data
- Email address (if you choose to provide it)
- Postcode or partial postcode
- Any other identifying information you choose to share
Special category data
Because our work focuses on maternal wellbeing, we may also collect special category data, including:
- Ethnicity
- Information about physical or mental health
- Experiences of care, wellbeing, or support
Our legal basis for processing your data
We rely on your consent as the lawful basis for processing your data.
- Article 6(1)(a) UK GDPR – Consent
- Article 9(2)(a) UK GDPR – Explicit consent for processing special category data
You provide this consent by actively opting in (for example, by ticking consent boxes in a survey).
If Mum Matters enters into future partnerships that require additional data governance arrangements (such as Data Processing Agreements or Data Protection Impact Assessments), these will be put in place before any new processing takes place.
How we store and protect your information
We aim to collect only the minimum amount of personal data necessary for our work and to anonymise data as early as possible during analysis.
We take appropriate and proportionate steps to keep your information secure, including:
- Secure, password-protected systems
- Limiting access to authorised individuals only
- Storing contact details separately from survey responses where possible
- Anonymising qualitative data (such as written responses or voice notes) prior to analysis
We do not sell your data. We only use personal data for marketing, communications, or public-facing purposes where you have given specific, explicit consent.
Who we share information with
We do not share identifiable personal data with third parties without your explicit consent.
We may share anonymised or aggregated findings with:
- Community and voluntary sector partners
- Health and social care organisations
- Academic or research partners
- Funders or commissioners
This will never include information that identifies you personally.
How long we keep your data
We keep personal data only for as long as necessary to:
- Complete analysis and reporting
- Support service development, evaluation, and learning
- Meet ethical and accountability requirements
Personal data will normally be reviewed and securely deleted within 3–5 years, unless you have agreed to further contact or longer retention is justified.
Your rights
Under UK GDPR, you have the right to:
- Access the data we hold about you
- Ask for inaccurate data to be corrected
- Ask for your data to be deleted
- Withdraw consent at any time
- Ask how your data is being used
To exercise any of these rights, contact Neena Garnavos, Founding Director and Data Protection Lead, at neena@mummatters.org.uk?subject=Privacy%20Notice%20Query.
If you are unhappy with how we have handled your data, you also have the right to raise a concern with the Information Commissioner’s Office (ICO).
Withdrawing consent and deleting your data
You have the right to withdraw your consent at any time.
If you have provided contact details (such as an email address), we will be able to identify and delete your identifiable personal data on request.
If you choose not to provide contact details, your responses will not be directly identifiable. In this case, we may not be able to locate or delete individual responses once they have been submitted.
Where data has been anonymised or combined with other responses for analysis, reporting, or communications, it will no longer be possible to remove individual contributions. This is because anonymised or aggregated data cannot be linked back to identifiable individuals.
Withdrawing consent will not affect any use of anonymised data that has already taken place.
Changes to this notice
We may update this Privacy Notice as our work develops.
The most recent version will always be published here, with the date clearly shown.
Thank you for trusting Mum Matters with your experiences. We are committed to using what you share responsibly, respectfully, and with care.
Mum Matters 