Data Controller
OCG Solutions UK

At OCG Solutions UK, we are committed to protecting the privacy and security of the personal data we process. As a violence reduction and criminal justice consultancy providing mentoring, advocacy, and evidence analysis, we handle highly sensitive information. This policy outlines what data we collect and why we process it in accordance with UK data protection laws.

1. Data We Collect

To deliver our specialised services, we collect and process the following categories of data:

• Personal Identifiers: Names, dates of birth, home addresses, phone numbers, and email addresses.
• Case and Legal Data: Police investigation reports, witness statements, court documents, charging sheets, and information regarding active criminal proceedings.
• Sensitive Personal Data (Special Category): Criminal histories, alleged offences, risk assessments, and details relating to institutional placements or safety vulnerabilities.
• Participant Progress Records: Mentoring notes, course attendance data, and performance outcomes from our youth and prisoner programmes.

2. Purpose of Processing Data

We collect and use this data strictly for specific, legitimate operational and legal purposes:

• Service Delivery: To provide tailored mentoring, strategic advocacy, and forensic case analysis for defendants and suspects.
• Case Assessment: To evaluate the credibility of witness statements and identify structural flaws or inconsistencies in prosecution evidence.
• Risk Mitigation: To manage and assess cell sharing risks, prisoner safety concerns, and youth vulnerability regarding county lines or gang exploitation.
• Contractual Obligations: To administer formal client service-user agreements, manage outcome-based guarantees, and process payments.
• Statutory Compliance: To cooperate with regulatory legal frameworks, court requirements, and public safety obligations where mandated.

3. Data Retention and Security

All personal and sensitive data is securely stored using encrypted digital systems and restricted access protocols. We retain your information only for as long as necessary to fulfil the purposes outlined above, to meet our contractual obligations, or to comply with statutory legal retention periods.