The Winch

The Winch

The Winch (The Winchester Project) is a Camden-based charity supporting children and young people across North London. Its team of 50 employees delivers a wide range of services to help reduce the impact of poverty and inequality in the local community, including afterschool clubs, mentoring, and enterprise programmes. The Winch approached The DPO Centre for a data protection audit to ensure special category data was handled compliantly. They were awarded a grant through The DPO Centre’s Charity and Community Fund, which provides access to expert support at a significantly subsidised rate.

Key Challenges

• Handling special category data
• Establishing retention periods
• Managing multiple digital systems

Solution

The designated Data Protection Officer (DPO) reviewed how sensitive data was accessed and used in practice, identifying risks and where controls could be optimised. Clear, practical recommendations followed, including a defined retention policy and schedule, giving the organisation confidence that data is kept only for as long as necessary and reducing the risk of inappropriate storage. To improve data handling across various digital platforms, the DPO introduced a standardised naming convention, making information easier to find and manage. Tailored advice was also provided on how to communicate data protection topics in an age-appropriate way to children and young people. This built understanding and trust while meeting safeguarding expectations.

Outcome

Soye Briggs, Chief Operating Officer at The Winch, said: ‘Working with The DPO Centre was rewarding as they stimulated deep dive thinking around our data processes. Their Community Fund enabled us to move forward on one of our strategic objectives: We learn, adapt and grow. The Data Protection Audit has given us the tools and confidence to adapt, and ensure we remain compliant with UK data protection laws’

Download case study PDF