Privacy Policy

Your trust matters to us, and so does your family’s privacy.

This policy explains how The Vilij collects, uses, stores and protects the personal data you share with us — and the rights you have over it.

Effective from

Because sharing your story should always feel safe.

What’s In This Policy

1. Introduction

1.1

The Vilij Limited (“The Vilij”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal data in a transparent, secure and responsible manner.

1.2

We recognise that many members of the Vilij community may share information relating to their families, children, education, health, wellbeing and support needs. We take our responsibilities in relation to personal data seriously and are committed to safeguarding the information entrusted to us.

1.3

This Privacy Policy explains how we collect, use, store, share and otherwise process personal data when you:

(a) visit our website;
(b) create or use an account on the Platform;
(c) subscribe to our services;
(d) participate in our community;
(e) communicate with other Users or Experts;
(f) interact with Experts;
(g) attend events, webinars or community activities;
(h) submit enquiries, complaints or safeguarding reports; or
(i) otherwise engage with The Vilij.
1.4

This Privacy Policy also explains your rights in relation to your personal data and how to contact us if you have any questions about our data processing activities.

1.5

Please read this Privacy Policy together with our User Terms of Use, Community Guidelines, Complaints and Reporting Procedure and any other policies referred to within those documents.

2. Who We Are

2.1

The Vilij is the controller of the personal data described in this Privacy Policy. Our details are:

The Vilij Limited

Registered in England and Wales under company number 16718802

Registered office: The Meakin Suite, Ravenscliffe, First Avenue, Newcastle Under Lyme, Staffordshire, United Kingdom, ST5 8QX

Email: privacy@thevilij.co.uk

Safeguarding concerns: safeguarding@thevilij.co.uk

2.2

As the controller, we are responsible for deciding how and why your personal data is processed and for ensuring that it is handled in accordance with applicable data protection laws.

2.3

If you have any questions about this Privacy Policy, how we process your personal data, or if you wish to exercise any of your data protection rights, please contact us using the details above.

2.4

You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office, although we would appreciate the opportunity to address your concerns before you do so.

3. Changes to this Privacy Policy

3.1

We may update this Privacy Policy from time to time to reflect changes to:

(a) the Platform and its functionality;
(b) the services we provide;
(c) applicable laws and regulatory requirements; or
(d) our data processing practices.
3.2

The most recent version of this Privacy Policy will always be available on the Platform and will take effect from the date stated at the top of the policy.

3.3

Where we make material changes, we may notify you through the Platform, by email or by other appropriate means.

3.4

We encourage you to review this Privacy Policy periodically to ensure that you remain informed about how we collect, use and protect your personal data.

4. Personal Data We Collect

4.1

The personal data we collect depends on how you interact with the Platform, your membership status and the features you choose to use. We may collect the following categories of personal data.

4.2

Identity Information. This may include:

(a) name;
(b) username;
(c) title;
(d) date of birth (where required); and
(e) profile information.
4.3

Contact Information. This may include:

(a) email address;
(b) telephone number; and
(c) postal address.
4.4

Account Information. This may include:

(a) account credentials;
(b) membership type;
(c) subscription status;
(d) account preferences;
(e) communication preferences; and
(f) records relating to your use of the Platform.
4.5

Community and Platform Participation Information. This may include:

(a) forum posts;
(b) comments;
(c) discussion contributions;
(d) uploaded content;
(e) event participation records;
(f) survey responses;
(g) feedback;
(h) testimonials; and
(i) communications made through Platform features.
4.6

Messaging Information. Where messaging functionality is available, we may collect and process:

(a) direct messages exchanged through the Platform;
(b) records of communications between Users and Experts; and
(c) information relating to the operation, moderation or safeguarding of messaging services.
4.7

Expert Information. Where you apply to become an Expert, we may collect:

(a) qualifications and certifications;
(b) professional registrations;
(c) professional memberships;
(d) insurance information;
(e) DBS information (where applicable);
(f) identity verification information;
(g) verification documents;
(h) professional biographies;
(i) profile information;
(j) service descriptions; and
(k) other information reasonably required for onboarding, safeguarding, compliance or verification purposes.
4.8

Transaction Information. This may include:

(a) subscription purchases;
(b) membership payments;
(c) billing information;
(d) transaction history;
(e) payment status; and
(f) records relating to refunds, cancellations or payment disputes.

We do not store full payment card details. Payments are processed by Stripe or other payment providers used by The Vilij from time to time.

4.9

Technical Information. This may include:

(a) IP address;
(b) browser type and version;
(c) device information;
(d) operating system;
(e) login information;
(f) website usage information;
(g) analytics information; and
(h) cookie and similar technology data.
4.10

Complaints Information. Where complaints are raised, we may collect and process:

(a) complaints submitted by or about Users or Experts;
(b) correspondence relating to complaints;
(c) information and evidence provided during investigations;
(d) investigation records; and
(e) decisions, actions and outcomes.
4.11

Safeguarding Information. Where safeguarding concerns arise, we may collect and process:

(a) safeguarding reports;
(b) risk assessments;
(c) investigation records;
(d) communications relating to safeguarding concerns;
(e) information provided by Users, Experts or third parties;
(f) records of actions taken; and
(g) information shared with relevant authorities or safeguarding organisations.

Not all categories of personal data will apply to every User. The personal data we collect will depend on how you use the Platform and the services, features and functionality you choose to access.

5. Special Category Data

5.1

Given the nature of the Platform and the community it supports, we may collect, receive or otherwise process information that is classified as special category personal data under applicable data protection laws. This may include information relating to:

(a) children’s special educational needs and disabilities (SEND);
(b) physical or mental health conditions;
(c) diagnoses and assessments;
(d) therapies, treatments and support services;
(e) wellbeing and support needs;
(f) educational provision, Education, Health and Care Plans (EHCPs) and support arrangements;
(g) safeguarding concerns; and
(h) other health-related or sensitive information voluntarily shared by Users or Experts.
5.2

Special category personal data may be provided to us:

(a) when creating or updating profiles;
(b) when participating in community discussions;
(c) when interacting with Experts;
(d) when attending events, webinars or community activities;
(e) when submitting enquiries, complaints or safeguarding reports; or
(f) through other use of the Platform.
5.3

We only process special category personal data where permitted by applicable data protection laws and where an appropriate legal basis and additional condition for processing applies.

5.4

Depending on the circumstances, this may include where:

(a) you have chosen to provide the information;
(b) processing is necessary for safeguarding purposes;
(c) processing is necessary to establish, exercise or defend legal claims;
(d) processing is necessary for reasons of substantial public interest;
(e) processing is necessary to protect the vital interests of an individual; or
(f) another lawful condition under applicable data protection laws applies.
5.5

Users should take particular care when sharing information relating to themselves, their children or other individuals through community discussions, messages or other interactive features of the Platform. Information that you choose to post within community areas of the Platform may be visible to other Users depending on the functionality and settings of the relevant feature.

5.6

We ask Users not to share more personal information than is reasonably necessary and to avoid publishing information that could unnecessarily identify a child, vulnerable individual or other member of the community.

5.7

Where safeguarding concerns arise, we may process special category personal data where reasonably necessary to:

(a) investigate concerns;
(b) assess and manage risks;
(c) protect children, vulnerable individuals and members of the community;
(d) comply with legal and regulatory obligations;
(e) cooperate with law enforcement agencies, local authorities, safeguarding organisations or other relevant bodies; and
(f) maintain appropriate safeguarding records.
5.8

Where special category personal data is shared within community areas of the Platform, the visibility of that information will depend on the functionality of the relevant feature and the settings applied to it. Users should assume that information shared within community discussions may be visible to other members of the Platform and should exercise appropriate caution when posting personal information.

6. Children

6.1

The Platform is intended for use by adults, including parents and carers. Children are not permitted to create Platform accounts.

6.2

However, information relating to children may be provided by parents, carers or Experts in connection with use of the Platform. Where this occurs, we process such information only for the purposes described in this Privacy Policy.

7. How We Collect Personal Data

We collect personal data in a number of ways, depending on how you interact with the Platform and the services you use.

7.1

We collect personal data that you provide directly to us when you:

(a) create an account;
(b) subscribe to a membership plan or purchase services;
(c) complete registration, onboarding or verification forms;
(d) create or update your profile;
(e) participate in community discussions, forums or messaging features;
(f) upload content or submit information through the Platform;
(g) attend events, webinars or community activities;
(h) contact us with enquiries or requests;
(i) subscribe to newsletters or marketing communications;
(j) submit feedback, surveys or testimonials;
(k) apply to become an Expert;
(l) submit complaints, reports or safeguarding concerns; or
(m) otherwise communicate with us.
7.2

When you access or use the Platform, we may automatically collect certain technical and usage information through cookies and similar technologies, including:

(a) IP address;
(b) browser type and version;
(c) device information;
(d) operating system;
(e) login information;
(f) pages viewed and features used;
(g) dates, times and duration of visits;
(h) referral sources; and
(i) analytics and usage information.

Further information is available in our Cookie Policy.

7.3

We may receive personal data from third parties, including:

(a) payment providers, including Stripe, in connection with subscriptions and payments;
(b) service providers supporting the operation, administration and security of the Platform;
(c) Experts, where reasonably necessary in connection with complaints, safeguarding concerns or investigations;
(d) publicly available professional registers, regulatory bodies and professional organisations for the purposes of Expert verification and compliance checks;
(e) other Users, where they submit reports, complaints or safeguarding concerns;
(f) law enforcement agencies, regulators, local authorities or safeguarding organisations;
(g) social media platforms or third-party authentication providers where you choose to connect or access the Platform through those services; and
(h) other third parties where we are permitted or required to obtain information under applicable laws.
7.4

We may also collect personal data that you choose to make available through community features of the Platform, including posts, comments, messages, uploaded content and other contributions.

7.5

Please be aware that information shared through community areas of the Platform may be visible to other Users depending on the functionality and settings of the relevant feature.

7.6

Users should exercise caution when sharing personal information through community discussions, comments, messaging features or other interactive areas of the Platform. Information shared through these features may be accessible to other Users and may remain visible until removed, moderated or deleted in accordance with our policies.

8. How We Use Personal Data

We use personal data for a variety of purposes connected with operating, administering and improving the Platform, supporting our community and complying with our legal obligations.

8.1

We use personal data to:

(a) create and administer user accounts;
(b) manage memberships and subscriptions;
(c) provide access to Platform features and functionality;
(d) enable users to participate in the community;
(e) authenticate users and maintain account security; and
(f) provide the services and features available through the Platform.
8.2

We use personal data to:

(a) facilitate community discussions and engagement;
(b) enable interactions between Users and Experts;
(c) support forums, groups and messaging features;
(d) administer events, webinars and community activities; and
(e) promote a safe, supportive and inclusive community environment.
8.3

We use personal data to:

(a) assess applications to become an Expert;
(b) verify qualifications, registrations, insurance and other credentials;
(c) undertake onboarding and compliance checks;
(d) create and publish Expert profiles;
(e) administer Expert memberships; and
(f) monitor compliance with Platform policies and professional obligations.
8.4

We use personal data to:

(a) respond to enquiries and requests;
(b) provide customer support;
(c) send service updates and administrative communications;
(d) notify users of changes to the Platform, policies or services; and
(e) communicate information relating to memberships, subscriptions and events.
8.5

We may use personal data to:

(a) send welcome materials;
(b) provide membership benefits;
(c) send gifts or community engagement items;
(d) administer promotions, competitions or campaigns; and
(e) encourage participation in community initiatives and activities.
8.6

We use personal data to:

(a) process subscription payments;
(b) administer billing arrangements;
(c) manage renewals, cancellations and refunds;
(d) maintain financial records; and
(e) detect and prevent payment-related fraud.
8.7

We use personal data to:

(a) investigate complaints and reports;
(b) enforce our User Terms, Community Guidelines and other Platform policies;
(c) investigate suspected misconduct or breaches of Platform rules;
(d) maintain complaint records; and
(e) take appropriate action to protect Users, Experts and the wider community.
8.8

We may use personal data, including special category personal data where necessary, to:

(a) assess safeguarding concerns;
(b) investigate reports and incidents;
(c) protect children, vulnerable individuals and members of the community;
(d) cooperate with law enforcement agencies, local authorities, safeguarding organisations and other relevant bodies;
(e) maintain safeguarding records; and
(f) take appropriate action to protect individuals from harm.
8.9

We use personal data to:

(a) analyse how the Platform is used;
(b) improve user experience;
(c) develop new services, features and functionality;
(d) undertake research and analytics; and
(e) troubleshoot technical issues and improve security.
8.10

Where permitted by law, we may use personal data to send information about:

(a) Platform developments;
(b) events and webinars;
(c) community initiatives;
(d) membership opportunities;
(e) promotions; and
(f) other products or services that may be of interest.
8.11

You may opt out of marketing communications at any time by using the unsubscribe link in our communications or by contacting us.

8.12

We may use personal data where reasonably necessary to:

(a) comply with legal and regulatory obligations;
(b) respond to requests from regulators, law enforcement agencies or public authorities;
(c) establish, exercise or defend legal claims;
(d) enforce our contractual rights; and
(e) protect the rights, property, safety or security of The Vilij, its Users, Experts or third parties.

9. Our Legal Bases for Processing

We will only process personal data where we have a lawful basis for doing so under applicable data protection laws. Depending on the circumstances, we may rely on one or more of the following legal bases.

9.1

Performance of a Contract. We process personal data where necessary to:

(a) create and administer user accounts;
(b) provide access to the Platform and its features;
(c) manage memberships and subscriptions;
(d) communicate with Users and Experts regarding the Platform; and
(e) fulfil our obligations under our agreements with Users and Experts.
9.2

Legitimate Interests. We process personal data where it is necessary for our legitimate interests or the legitimate interests of others, provided those interests are not overridden by your rights and freedoms. These legitimate interests include:

(a) operating, administering and improving the Platform;
(b) facilitating community participation;
(c) onboarding and managing Experts;
(d) maintaining the safety, integrity and security of the Platform;
(e) investigating complaints and reports;
(f) preventing misuse of the Platform;
(g) conducting analytics and service improvement activities;
(h) communicating with Users and Experts; and
(i) protecting the rights, property and interests of The Vilij, its Users and Experts.
9.3

Legal Obligations. We may process personal data where necessary to comply with legal and regulatory obligations, including obligations relating to:

(a) safeguarding;
(b) fraud prevention;
(c) financial record keeping;
(d) regulatory compliance; and
(e) responding to lawful requests from regulators, law enforcement agencies or public authorities.
9.4

Consent. In certain circumstances, we may rely on your consent to process personal data, including where consent is required by law. Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

9.5

Legal Claims. We may process personal data where necessary to establish, exercise or defend legal claims or legal rights.

9.6

Special Category Data. Where we process special category personal data, we will only do so where an additional condition for processing applies under applicable data protection laws. Depending on the circumstances, this may include:

(a) your explicit consent;
(b) safeguarding purposes;
(c) reasons of substantial public interest;
(d) the establishment, exercise or defence of legal claims;
(e) the protection of the vital interests of an individual; or
(f) another condition permitted under applicable data protection laws.

10. Experts and Independent Services

10.1

Experts participating in the Platform are independent professionals, advisers, practitioners, consultants or other specialists and are not employees, agents or representatives of The Vilij unless expressly stated otherwise.

10.2

Where you choose to engage directly with an Expert, the Expert may collect, receive, use and store personal data independently of The Vilij.

10.3

In most circumstances, the Expert will act as a separate controller of any personal data provided directly to them in connection with their services. This means that the Expert will be independently responsible for:

(a) how they collect and use your personal data;
(b) complying with applicable data protection laws;
(c) providing any privacy information required in relation to their services; and
(d) responding to requests relating to your personal data.
10.4

The Expert’s own privacy policies, notices and practices may apply to personal data that you provide directly to them or that they collect in connection with the services they provide. We encourage you to review any privacy information provided by the relevant Expert before engaging their services.

10.5

The Vilij and an Expert may each hold separate records relating to your interactions with the Platform and the Expert’s services.

10.6

The Vilij is not responsible for how an Expert processes personal data outside the Platform or in connection with services provided independently of the Platform.

10.7

Nothing in this Privacy Policy alters the independent relationship between Users and Experts or makes The Vilij responsible for the provision of professional services by an Expert.

11. Sharing Personal Data

11.1

We may share personal data with trusted third parties where reasonably necessary for the purposes described in this Privacy Policy. Depending on the circumstances, this may include:

(a) hosting providers;
(b) technology and software providers;
(c) analytics providers;
(d) payment providers, including Stripe;
(e) customer support and communications providers;
(f) professional advisers, including legal, accounting and insurance advisers;
(g) insurers;
(h) auditors;
(i) regulators and professional bodies;
(j) law enforcement agencies;
(k) local authorities;
(l) safeguarding organisations and agencies;
(m) service providers supporting the operation, administration and security of the Platform; and
(n) other third parties where disclosure is required or permitted by law.
11.2

We may share personal data where reasonably necessary to:

(a) operate and administer the Platform;
(b) process subscriptions and payments;
(c) verify the credentials of Experts;
(d) investigate complaints, reports or safeguarding concerns;
(e) protect the safety, welfare and wellbeing of Users, Experts and other individuals;
(f) comply with legal and regulatory obligations;
(g) establish, exercise or defend legal claims; or
(h) protect the rights, property, safety or security of The Vilij, its Users, Experts or third parties.
11.3

Where you engage directly with an Expert, certain information may be shared with that Expert where necessary to facilitate communications, enquiries or the provision of services.

11.4

Experts are independent providers and may process personal data in accordance with their own privacy practices.

11.5

Where safeguarding concerns arise, we may share information with relevant authorities, safeguarding organisations, law enforcement agencies, healthcare providers, educational institutions or other appropriate bodies where we reasonably consider such disclosure necessary to protect an individual from harm or to comply with legal obligations.

11.6

If The Vilij undergoes a business reorganisation, merger, acquisition, investment transaction or sale of assets, personal data may be disclosed to prospective or actual purchasers, investors, advisers or successor organisations, subject to appropriate confidentiality protections.

11.7

We do not sell personal data and we do not permit third parties to use personal data for their own direct marketing purposes without your consent.

12. International Transfers

12.1

Some of the service providers and third parties with whom we share personal data may process that information outside the United Kingdom.

12.2

Where personal data is transferred outside the United Kingdom, we will take appropriate steps to ensure that the information remains adequately protected and that the transfer complies with applicable data protection laws.

12.3

Depending on the circumstances, the safeguards we rely upon may include:

(a) regulations confirming that the destination country provides an adequate level of protection for personal data;
(b) approved international data transfer agreements or standard contractual clauses;
(c) binding corporate rules; or
(d) any other transfer mechanism recognised under applicable data protection laws.
12.4

Where appropriate, we will take additional measures to protect personal data transferred internationally, taking account of the nature of the information and the risks associated with the transfer.

12.5

Further information regarding international transfers and the safeguards we use may be requested by contacting us using the details set out in this Privacy Policy.

13. Data Retention

13.1

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

(a) provide and administer the Platform;
(b) comply with legal, regulatory and safeguarding obligations;
(c) resolve complaints and disputes;
(d) enforce our contractual rights; and
(e) establish, exercise or defend legal claims.
13.2

Retention periods vary depending on the nature of the information, the purposes for which it was collected, applicable legal requirements and any safeguarding considerations. Typical retention periods include:

Data Type Typical Retention Period
User account records Duration of membership plus up to 6 years
Subscription and payment records Up to 6 years
Expert onboarding and verification records Duration of membership plus up to 6 years
Complaints records Up to 6 years after closure
Community moderation records Up to 6 years after closure of the relevant matter
Marketing preferences Until withdrawn or no longer required
Safeguarding records For as long as reasonably necessary having regard to safeguarding, legal and regulatory obligations
13.3

Where you close or delete your account, we may retain certain information where reasonably necessary to:

(a) comply with legal or regulatory obligations;
(b) maintain appropriate business records;
(c) investigate complaints or safeguarding concerns;
(d) preserve the integrity of community discussions and Platform records; or
(e) establish, exercise or defend legal claims.
13.4

Where you have contributed content to community discussions, forums, comments or other Platform features, certain content may remain visible following account closure or deletion where reasonably necessary to:

(a) preserve the integrity and context of community discussions;
(b) maintain moderation, complaint or safeguarding records;
(c) comply with legal obligations; or
(d) establish, exercise or defend legal claims.
13.5

Where appropriate, personal data may be deleted, anonymised or aggregated so that it can no longer be associated with an identifiable individual.

13.6

We may retain personal data for longer than the periods described above where required by law or where reasonably necessary in connection with legal proceedings, investigations, complaints, safeguarding matters or regulatory requirements.

14. Your Rights

14.1

Subject to applicable data protection laws, you may have the right to:

(a) request access to the personal data we hold about you;
(b) request correction of inaccurate or incomplete personal data;
(c) request deletion of your personal data in certain circumstances;
(d) request restriction of processing in certain circumstances;
(e) object to the processing of your personal data in certain circumstances;
(f) request the transfer of your personal data to you or another organisation, where applicable;
(g) withdraw consent where we rely on consent as the legal basis for processing; and
(h) complain about our handling of your personal data.
14.2

If you wish to exercise any of your rights, please contact us using the details set out in this Privacy Policy.

Requests may be submitted by email to: privacy@thevilij.co.uk

14.3

We may ask you to provide information to verify your identity before responding to a request.

14.4

We will respond to requests in accordance with applicable data protection laws.

14.5

The exercise of certain rights may be subject to legal exemptions and limitations. Where we are unable to comply with a request, we will explain the reasons unless we are legally prevented from doing so.

14.6

If you are unhappy with how we have handled your personal data or responded to a request, you have the right to complain to the Information Commissioner’s Office. Further information is available from the Information Commissioner’s Office.

Visit the Information Commissioner’s Office →

15. Complaints

15.1

If you have any concerns about how we collect, use or otherwise process your personal data, we encourage you to contact us first so that we have an opportunity to investigate and address your concerns. You can contact us using the details set out in this Privacy Policy.

15.2

You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office, if you believe that we have processed your personal data in breach of applicable data protection laws. Further information is available from the Information Commissioner’s Office.

Visit the Information Commissioner’s Office →

16. Cookies

16.1

We use cookies and similar technologies to operate, maintain and improve the Platform.

16.2

Cookies may be used to:

(a) enable core Platform functionality;
(b) remember user preferences;
(c) improve security;
(d) analyse how the Platform is used; and
(e) enhance user experience.
16.3

Further information about the cookies we use and how you can manage your cookie preferences is available in our Cookie Policy.

Still got a question?

We’re happy to help.

If anything here isn’t clear, or you’d like to exercise your data rights,
just get in touch and a real person will come back to you.

EMAIL US