Updated July 2026
PACT operates the CATCH and Bounce Digital Hubs. These platforms provide information, resources, learning and support for adopters, parents, carers, professionals and partner organisations.
PACT is a registered charity and an Ofsted-regulated Voluntary Adoption Agency. We are committed to protecting your personal information and using it responsibly.
Depending on how your account is created, PACT may act as either a Data Controller or a Data Processor.
If your Local Authority, or an organisation you are working for or receiving support from, has provided us with your details to provide you with a login for one of our digital hubs, we will be acting as a data processor. This means we are processing your data to deliver a service on behalf of a data controller (this may include but not be restricted to a Local Authority, Regional Adoption Agency, Voluntary Adoption Agency, virtual school and fostering service) and can only process it in accordance with their instructions. We cannot use your personal data for our own purposes.
If you register directly with one of our Digital Hubs, PACT is the Data Controller. This means we decide how and why your personal information is used.
If your account is created for you by a Local Authority, Regional Adoption Agency, Voluntary Adoption Agency, Virtual School, Fostering Service or another organisation, that organisation remains the Data Controller and PACT acts as a Data Processor. This means we process your information only on their instructions to provide the Digital Hub service.
This notice applies to:
When you register for a Digital Hub account, we collect information needed to create and manage your account. This may include:
To create and manage your account, provide access to the Digital Hub and deliver the services you have requested.
Performance of a contract.
As you use the platform, we collect information about how you access and use Digital Hub content.
This may include:
To provide Digital Hub services, improve the user experience and ensure the platform operates effectively.
Performance of a contract and legitimate interests.
Some Digital Hubs include forums and community features that allow users to communicate with one another. We may process:
We may monitor content to ensure compliance with platform rules and to identify safeguarding concerns.
To operate community features, maintain a safe environment and support safeguarding responsibilities.
Performance of a contract, legitimate interests and legal obligations where safeguarding concerns arise.
We may send you:
To keep you informed about your account and ensure the Digital Hubs continue to operate effectively.
Performance of a contract.
We analyse how Digital Hubs are used so that we can improve our services and meet reporting requirements.
Where access is funded by another organisation, we may provide usage reports to that organisation.
This may include:
Where possible, reports will be anonymised so that individuals cannot be identified.
To evaluate services, demonstrate outcomes, improve content and meet contractual reporting requirements.
Legitimate interests, performance of a contract and consent where required.
We may collect: Name, Email address, Organisation, Agency information, Username, and Password.
We may collect: Age, Family status, Ethnicity, Sex or gender, other profile information you choose to provide.
We may collect: Login records, pages viewed, resources accessed, course completion information, and forum activity.
We may collect messages sent through the platform, support requests, enquiries, feedback and survey responses.
Some information we use is more sensitive.
This may include: ethnicity, sex or gender information, information you choose to share in forums, information provided through surveys
We only collect this information where it is necessary and, where required by law, with your explicit consent.
Your personal information may come from:
Where an organisation funds your access to a Digital Hub, we may share account usage information with them. We may also share anonymised information for reporting, research and service evaluation purposes.
We collect information about you so that we can:
We take safeguarding seriously. We may share information without your consent if:
We keep your information secure by:
Information about how we use cookies is available in our separate Cookie Notice.
We keep your information only for as long as necessary.
We may retain information for longer where required for legal, safeguarding or regulatory reasons.
| Type of data | Legal Basis |
|---|---|
| Active user accounts | Duration of active access |
| Expired user accounts | Up to 2 years after access ends |
| Forum content | Linked to account retention period |
| Payment records | In line with legal and financial requirements |
| Support requests and enquiries | In line with operational requirements |
Some of our service providers may be located outside the UK. Where this happens, we ensure appropriate safeguards are in place and that any transfers comply with UK data protection law.
You have rights under data protection law. These include:
If you have questions about this notice or wish to exercise your rights, please contact:
If you are unhappy with how your information has been used, you can contact the Information Commissioner’s Office (ICO).