Who We Are

Andy Robinson is the data controller for the purposes of this policy — responsible for deciding how your personal data is used and protected.

We process all personal data in line with the UK GDPR and the Data Protection Act 2018. In practice, this means we keep data accurate and up to date, store and delete it securely, only collect what we genuinely need, and protect it from loss, misuse, or unauthorised access.

What Information We Collect

Information you give us

We collect personal information when you interact with us, which may include when you:

• Contact us with a question or enquiry
• Make a donation
• Request information or resources
• Sign up for events or trips
• Volunteer or apply for a role

Website use

We collect basic technical information such as IP address, pages visited, and downloads. This helps us understand how people use the website and improve it. This data is collected using cookies.

From third parties

Sometimes we receive information from trusted third parties, such as event organisers, where you have given your consent.

Social media and public platforms

If you interact with us on platforms such as Facebook or LinkedIn, we may collect information you have made publicly available. Please check those platforms for details on how they process your data.

Sensitive Data

In some cases, you may choose to share sensitive information, such as details about your health or your religious beliefs.

How We Use Your Data

We use your information to:

• Provide services and support
• Respond to enquiries
• Manage events, trips, and activities
• Provide personal support and respond appropriately to those who reach out
• Communicate updates, news, and opportunities
• Process donations, including Gift Aid
• Manage volunteers and team members

We will only contact you in ways you have agreed to, and you can change your preferences at any time.

Legal Basis for Processing

We process your data based on:

• Your consent, which you can withdraw at any time
• Legitimate interests, such as communicating with supporters and managing relationships
• Legal obligations, including financial and regulatory requirements

Recruitment and Volunteering

If you apply for a role or volunteer with us, we may process your data to:

• Manage the application process
• Carry out checks such as references or qualifications
• Communicate with you about your application

In some cases, we may use trusted third parties to support these checks.

How Long We Keep Your Data

We only keep your data for as long as necessary.

Security

We take data security seriously. Our measures include:

• Secure systems and encrypted forms
• Restricted access to authorised people only
• Regular monitoring and updates
• Appropriate training for those handling data

Where we use external providers, we ensure they meet the same standards. Please note that no system is completely secure, and any data you share online is at your own risk.

Payments

If you make a payment, your information is processed securely in line with industry standards. If you set up a standing order, your bank details are stored securely and only for as long as required.

Where your data is stored

We use cloud-based systems, which means your data may be stored or processed outside the UK or European Economic Area. Where this happens, we ensure appropriate safeguards are in place to protect your data.

Sharing Your Data

We only share your information where necessary:

• With trusted service providers who help us operate
• Where required by law
• Where you have given consent

All third parties are required to handle your data securely and only for the agreed purpose.

Cookies and Third-Party Services

Cookies are small files stored on your device that help websites work properly and improve your experience. We use cookies, including Google Analytics, to understand how our website is used. You can control or disable cookies through your browser settings.

We also use third-party platforms such as YouTube, Vimeo, Google Analytics, and social media platforms. These services may collect and process data according to their own privacy policies.

Your Rights

Under UK data protection law, you have the following rights:

To exercise any of these rights, please contact us using the details on our website. You can also contact the Information Commissioner's Office for further guidance.

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will make this clear on our website or in our communications.

This policy is governed by English law, and any disputes are subject to the jurisdiction of the courts of England and Wales.