Safeguarding and Child protection policy

Decrypthut Limited
Effective: September 2026
Review date: September 2027

1. Our commitment

Decrypthut is committed to safeguarding and promoting the welfare of every child and young person who participates in our programmes.

The welfare and safety of the child are paramount.

No member of staff, facilitator, contractor, volunteer or other person acting on behalf of Decrypthut may inflict physical, sexual, emotional or psychological harm on a child.

Every person working on behalf of Decrypthut shares responsibility for creating safe learning environments, recognising concerns and reporting them appropriately.

2. Scope

This policy applies to:

  • directors;
  • employees;
  • facilitators;
  • tutors;
  • mentors;
  • contractors;
  • consultants;
  • volunteers;
  • university students or graduates engaged in delivery;
  • creative and technical specialists; and
  • anyone otherwise acting on behalf of Decrypthut.

It applies to Decrypthut activities delivered:

  • in person;
  • online;
  • in schools;
  • in community settings;
  • at partner venues;
  • through workshops and courses;
  • through roadshows;
  • through mentoring;
  • through events; and
  • through other Decrypthut programmes.

For this policy, a child is anyone under 18.

3. Designated Safeguarding Lead

Decrypthut’s Designated Safeguarding Lead (“DSL”) is:

Michaela Carew
Founder & CEO, Decrypthut Limited
info@decrypthut.com

The DSL is responsible for overseeing safeguarding practice, receiving concerns, maintaining appropriate records, supporting staff and determining when concerns need to be referred to another organisation or statutory authority.

Where Decrypthut is delivering within a school, council facility or partner setting, the host organisation’s safeguarding procedures and DSL arrangements must also be identified before delivery.

If there is an immediate risk of serious harm, staff must contact 999 rather than waiting for the DSL.

4. Principles

Decrypthut will:

  • put children’s welfare first;
  • listen to children and take concerns seriously;
  • treat children with dignity and respect;
  • provide inclusive learning environments;
  • maintain appropriate professional boundaries;
  • respond promptly to safeguarding concerns;
  • minimise opportunities for abuse or inappropriate conduct;
  • recognise online and technology-related safeguarding risks;
  • consider additional vulnerabilities associated with SEN, disability or communication differences;
  • work appropriately with parents, schools, councils and safeguarding agencies; and
  • maintain appropriate safeguarding records.

5. Safer recruitment and suitability

People working with children on behalf of Decrypthut must be suitable for their role.

Depending on the role and its eligibility under applicable law, Decrypthut’s checks may include:

  • identity verification;
  • employment or activity history;
  • references;
  • interview or suitability assessment;
  • right-to-work checks;
  • relevant qualification checks;
  • appropriate Disclosure and Barring Service checks, including barred-list information where the role is legally eligible;
  • safeguarding induction; and
  • ongoing supervision.

A DBS check will only be requested at the level legally available and appropriate for the role.

No person should undertake regulated activity with children unless applicable safeguarding and suitability requirements have been completed.

6. Code of conduct

Adults working with children must:

  • behave professionally;
  • treat learners fairly and respectfully;
  • maintain appropriate physical and emotional boundaries;
  • use appropriate language;
  • use authorised communication channels;
  • avoid unnecessary private communication with children;
  • avoid inappropriate one-to-one situations;
  • never pursue or encourage a sexual or romantic relationship with a child;
  • never engage in bullying, harassment, discrimination or intimidation;
  • never exchange inappropriate images or messages;
  • never use personal social-media relationships as a means of communicating privately with children;
  • never consume alcohol or illegal drugs while responsible for learners; and
  • report safeguarding concerns.

Staff must not promise a child complete confidentiality where safeguarding information is disclosed.

7. Recognising safeguarding concerns

Concerns may relate to:

  • physical abuse;
  • sexual abuse;
  • emotional abuse;
  • neglect;
  • domestic abuse;
  • bullying;
  • cyberbullying;
  • grooming;
  • sexual harassment;
  • sexual violence;
  • child-on-child abuse;
  • exploitation;
  • online abuse;
  • harmful or inappropriate online content;
  • discrimination;
  • self-harm or serious welfare concerns;
  • radicalisation;
  • inappropriate adult conduct; or
  • any other situation in which a child may be at risk of harm.

Staff are not responsible for investigating suspected abuse.

Their responsibility is to recognise, respond, record and report.

8. Responding to a disclosure

If a child discloses something that may indicate harm:

  1. listen calmly;
  2. take the child seriously;
  3. do not express disbelief;
  4. do not interrogate the child;
  5. ask only questions necessary to clarify what is being said;
  6. do not promise secrecy;
  7. explain that the information needs to be shared with someone who can help;
  8. make a factual written record as soon as possible; and
  9. report the concern immediately.

Records should distinguish clearly between what the child said, what was observed and any professional judgement.

9. Reporting concerns

Concerns must be reported promptly to the Decrypthut DSL.

Where delivery takes place within a school or other partner setting, the host organisation’s DSL or safeguarding lead must also be informed where its procedures require this.

Depending on the concern, information may need to be referred to:

  • children’s social care;
  • the relevant local authority;
  • the Local Authority Designated Officer where appropriate;
  • the police;
  • emergency services;
  • the Disclosure and Barring Service; or
  • another relevant safeguarding authority.

If a child appears to be in immediate danger, call 999.

A concern must not be ignored simply because the person reporting it does not have complete evidence.

10. Allegations or concerns about adults

Any allegation that a person working for or with Decrypthut has:

  • harmed a child;
  • possibly committed an offence involving a child;
  • behaved in a way indicating they may pose a risk to children; or
  • behaved in a way that raises concern about their suitability to work with children

must be reported immediately to the DSL.

Where the concern relates to the DSL, it should be reported to another Decrypthut director or, where appropriate, directly to the relevant local authority safeguarding service.

Decrypthut will not conduct an internal investigation in a way that compromises a police, local-authority or other statutory investigation.

Appropriate referral obligations will be followed.

11. Child-on-child abuse and bullying

Abuse between children will not be dismissed as “banter”, normal behaviour or part of growing up.

Concerns involving bullying, sexual harassment, sexual violence, discriminatory behaviour, coercion, online abuse or other harmful behaviour between children will be taken seriously and addressed through safeguarding procedures.

Both the child who may have experienced harm and other children involved should receive appropriate consideration and support.

12. Online safety

Because Decrypthut teaches technology, online safety forms a core part of our safeguarding approach.

Relevant risks include:

  • inappropriate content;
  • cyberbullying;
  • grooming;
  • sexual exploitation;
  • sharing personal information;
  • harmful communications;
  • impersonation;
  • scams and fraud;
  • misuse of AI;
  • unsafe online communities;
  • inappropriate image sharing; and
  • unauthorised contact between adults and children.

Adults should use approved platforms and professional accounts when communicating with learners.

Personal social-media accounts must not be used to establish private relationships with children participating in Decrypthut programmes.

Online sessions must be delivered using appropriate safeguarding arrangements.

13. AI and emerging technologies

Where AI or other emerging technologies are used during learning, facilitators should consider:

  • age appropriateness;
  • privacy;
  • personal information entered into systems;
  • harmful or inaccurate content;
  • inappropriate generated material;
  • intellectual property;
  • bias; and
  • safe and responsible use.

Children should not be encouraged to enter sensitive personal information into public AI systems as part of a Decrypthut activity.

14. SEN, disability and neurodivergence

Decrypthut recognises that children with SEN, disabilities, neurodivergence or communication differences may experience additional barriers to:

  • recognising inappropriate behaviour;
  • communicating concerns;
  • being understood;
  • accessing support; or
  • being believed.

Staff should take communication and support needs into account when responding to safeguarding concerns.

Behaviour or distress must not automatically be attributed to a diagnosis, disability or additional need.

15. Photography, filming and images

Photography and filming involving children must be managed safely.

Where consent is required for promotional photography or video, appropriate permission must be obtained.

Children who do not have promotional photography permission should, where practicable, be positioned so that they are not identifiable in promotional material.

Staff, contractors and volunteers must not:

  • use images of children for personal purposes;
  • take unnecessary photographs using personal devices;
  • publish children’s images on personal accounts; or
  • accompany identifiable images with unnecessary personal information.

A child should not be pressured to participate in photography.

Parents, guardians or learners may request that an identifiable promotional image be removed by contacting:

info@decrypthut.com

Decrypthut will stop future use and take reasonable steps to remove the image from digital channels under its control where the relevant consent has been withdrawn.

16. One-to-one working

One-to-one activity must be appropriately managed.

Where possible:

  • sessions should occur in observable or appropriately supervised environments;
  • another responsible adult should know the session is taking place;
  • online sessions should use authorised systems;
  • unnecessary private communication should be avoided; and
  • appropriate records should be maintained.

The safeguarding arrangements should reflect the child’s age, the nature of the programme and the environment in which it is delivered.

17. Missing children, collection and supervision

Where Decrypthut is responsible for supervision or collection arrangements, appropriate procedures must be established before delivery.

A child should only be released in accordance with the agreed collection arrangements applicable to the programme.

If a child cannot be located, staff must act immediately, alert the responsible programme lead and venue, and contact emergency services where necessary.

18. Photography and visitors at events

Parents, visitors, photographers or partner representatives attending Decrypthut activities must comply with venue and programme rules concerning images and safeguarding.

Permission to attend an event does not automatically give permission to photograph or publish images of children.

19. Confidentiality and information sharing

Safeguarding information is confidential but is not secret.

Information should be shared on a need-to-know basis where necessary to safeguard a child or comply with legal responsibilities.

The safety of a child takes priority over a desire to keep information confidential.

20. Record keeping

Safeguarding records should be:

  • factual;
  • dated;
  • appropriately detailed;
  • securely stored;
  • accessible only to authorised persons; and
  • retained in accordance with appropriate safeguarding and legal requirements.

21. Working with schools, councils and partners

Before delivery, Decrypthut will establish appropriate arrangements concerning:

  • responsibility for safeguarding;
  • relevant DSL contacts;
  • emergency procedures;
  • attendance;
  • collection where applicable;
  • first aid;
  • photography;
  • reporting concerns; and
  • relevant learner needs.

When working in a school, Decrypthut personnel must comply with applicable school safeguarding arrangements.

22. Training

People working with children must receive safeguarding information and training appropriate to their role.

Safeguarding forms part of relevant Decrypthut induction and programme preparation.

The DSL should maintain safeguarding knowledge appropriate to the responsibilities of the role.

23. Whistleblowing

Anyone working for Decrypthut who has concerns about unsafe practice, inappropriate behaviour or the way a safeguarding matter has been handled should raise the concern.

No person should suffer retaliation for raising a genuine safeguarding concern in good faith.

Where internal reporting is inappropriate or ineffective, concerns may be raised with an appropriate external safeguarding or statutory body.

24. Review

This policy will be reviewed at least annually and sooner where:

  • legislation or guidance materially changes;
  • Decrypthut’s activities change;
  • a safeguarding incident identifies learning;
  • a partner or authority requires changes; or
  • safeguarding practice indicates that the policy should be strengthened.

Designated Safeguarding Lead: Michaela Carew
Contact: info@decrypthut.com
Policy owner: Decrypthut Limited
Next scheduled review: September 2027

Secret Link