Policies &
governance.

Safeguarding

TLEP is at its first stage: the founder does paid work for organisations and builds the tools, and no programme for participants is running yet. As each stage opens, TLEP will work first with young adults who are disadvantaged or not in education, employment or training, and later with people in the justice system (prison-leavers and people on probation). Some of the people we work with may be adults at risk. This policy sets out how we protect the people we work with, learners, volunteers, workers and visitors, and each other, from abuse, harm and neglect. It applies to everyone acting for TLEP, on our premises, at partner sites, or online.

Adults first, with a child-safeguarding trigger

Our default is adult safeguarding. TLEP does not knowingly deliver services to under-18s. If under-18s are ever involved, stricter child-safeguarding measures apply automatically, built with a qualified adviser before any such activity.

Our principles

The six statutory principles of adult safeguarding: empowerment, prevention, proportionality, protection, partnership and accountability, plus Making Safeguarding Personal, where outcomes are led by what the adult wants.

Legal framework

Grounded in the Care Act 2014 (s.42), the Care and Support Statutory Guidance, and the Southwark Safeguarding Adults Board, supported by the Mental Capacity Act 2005, the Equality Act 2010, UK GDPR and the Data Protection Act 2018, and the Public Interest Disclosure Act 1998.

Designated Safeguarding Lead

Our current Designated Safeguarding Lead is Theone Coleman (founder). If you have a safeguarding concern, contact us at info@tleproject.org. If someone is in immediate danger, call 999. You can also contact Southwark Council's adult social care team, or the police on 101.

DBS checks

DBS checks are carried out where roles involve regulated activity or where our risk assessment requires them. Working with justice-affected adults does not by itself require a DBS check; we assess based on who is actually in the room.

Code of conduct

Everyone involved with TLEP, staff, volunteers, learners and partners, agrees to a few simple expectations:

• Respect. Treat everyone with dignity. No harassment, bullying or discrimination of any kind.
• Confidentiality. What people share about their circumstances stays private. Client work and any personal data are handled with care and not shared without permission.
• Honesty. Be straight with each other and with the organisations we work with.
• Safety. Follow the safeguarding policy and speak up if something feels wrong.
• No judgement. People arrive from all sorts of places. The past is not held against anyone here.

Privacy notice

Last updated: 22 October 2026

Who we are. The Lived Experience Project CIC (“TLEP”, “we”) is a Community Interest Company registered in England and Wales (Company No. 16939549), based in London. We are the data controller for the information described here. You can contact us about anything in this notice at info@tleproject.org.

This website

This website has no analytics or tracking cookies. When you send us a message through one of its forms, what you type is sent to us and a copy is emailed to you: see “When you contact us” below. Nothing else you type or choose is sent. The kit list, the problem field, the route drawn at the end of the home page and the games on the rules page are worked out in your browser and are not stored or sent unless you put them in a message. Video updates are links to YouTube: nothing from YouTube loads until you choose to open one, and YouTube’s own privacy policy applies there. The Instagram posts shown on this site are copied once a day from our Instagram account, @theonecoleman, by our own server on Cloudflare, and shown from this site. Your browser doesn’t contact Instagram when you view them. A post opens on Instagram only if you select it, and Instagram’s own privacy policy applies there. Fonts, images and films are served by this site, so no other service is contacted when a page loads. The site is hosted on Cloudflare Pages, which processes technical information such as IP addresses to deliver and protect it.

Links to other sites, such as GOV.UK and the ICO, open only when you select them. If you use “Share the mission”, your device’s own share menu handles it, or the link is copied for you. We do not see what you share or who with.

When you contact us

You can send us a message through a form on this site or by email. A form sends your message to us through our email sending service, Resend, and emails you a copy with what happens next. The website itself stores nothing. If a form can’t send, it offers to open your own email app instead, and nothing is sent until you choose to send it.

To stop spam, our forms use Cloudflare Turnstile. It loads only when you open a form, and Cloudflare uses technical information such as your IP address to check that a person is sending the message.

What we receive. Your email address, your name and organisation if you give them, whatever you write or attach, and which part of the site you sent it from. For example: an offer of equipment, space or time; a problem you would like a tool for; a partnership idea; or a question about supporting the build.

Why we use it, and our lawful basis. We use it to reply and to talk through what you have raised. Our lawful basis is our legitimate interest in replying to people who contact us. If you are offering equipment, space or time, or proposing work together, we also use it to take the steps you ask for before any agreement.

The updates and interest lists. If you ask to join the updates list, or to hear when KONTROL, RE:KONNECT or membership opens, we keep your email address to send you those updates and use it for nothing else. Joining is not a purchase or a membership. Our lawful basis is your consent. You can withdraw it at any time with the unsubscribe link in any updates email, or by emailing us.

Please leave out bank details, health information, details of offences, and anything that identifies a young person. If something like that is relevant to what you want to tell us, say so and we will agree the safest way to share it.

Who processes it

Messages from the website’s forms are sent by Resend, our email sending service, using its EU (Ireland) region. Email is handled by our email provider. Cloudflare hosts the website and runs the forms, as described above. These providers may process information outside the UK. Where they do, they use the safeguards UK data protection law requires. We do not sell your data or share it with anyone else for their own marketing.

How long we keep it

We keep enquiry emails for up to two years after our last contact, then delete them. If an enquiry leads to an agreement, such as a loan of equipment, we keep what we need for as long as the agreement lasts and for as long as the law requires afterwards.

We keep interest-list details for as long as you want to hear from us. If you ask to leave the list or ask us to delete your data, we remove it promptly.

Requests made through the previous website

Before 22 October 2026, this site had a form for requesting information. If you used it:

• We collected your email address, your selected interest (RE:ENTRY, UP:SKILL, LDN:KNEKT or general updates), and the source page.
• We use it to respond about the topic you selected. General updates were a separate choice; a programme-information request did not subscribe you to general updates. Our lawful basis is your consent, which you gave by submitting the form. You can withdraw it at any time.
• Information requests are stored using Supabase. If you chose general updates, your email address was also sent to Kit (formerly ConvertKit), our email platform.
• We keep your details for as long as you want to hear from us. If you unsubscribe or ask us to delete your data, we remove it promptly.

Cookies

This site does not use tracking or advertising cookies, and the site does not save anything in your browser. If we add analytics or payments in future, we will update this notice first and, where required, ask for your consent.

Changes to this notice

We will update this notice before the site changes how it handles information, and change the date at the top.

Your data rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to withdraw consent, to object to or restrict our use of it, and to receive a copy in a portable format. To exercise any of these, email info@tleproject.org.

Every general-updates email includes a one-click unsubscribe link. You do not need to give a reason.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.