We understand that the privacy of all of our supporters, volunteers and website visitors is important to them and that they care about how their personal data is used. In this Privacy Notice, we refer to all of those individuals as “you” for convenience.
We respect and value your privacy and will only collect, hold, use, or share your personal data in ways that are described here, and in a way that is consistent with our obligations and your legal rights.
1. Information about us
Shropshire Cat Rescue is a registered charity no: 1071884 and is a charitable trust whose main office address is at Windyridge, Lyth Hill Road, Bayston, Hill, Shrewsbury SY3 0AU, and it is regulated by the Charity Commission
Data Protection Officer: Marion Micklewright.
Email address: firstname.lastname@example.org
Telephone number: 01743 872857
Postal address: Shropshire Cat Rescue, Windy Ridge, Lyth Hill Road, Bayston Hill, SY3 0AU.
2. What does this Notice cover?
This Privacy Notice explains the types of your personal data that we collect, how it is collected, how it is held, how we use it, and how it is processed. It also explains your rights under data protection legislation relating to your personal data. Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.
3. What is “personal data”?
Personal data is any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers. The personal data that we collect and use is set out in paragraph 5 below.
4. What are my rights?
Under the data protection legislation, you have the following rights, which we will always work to uphold. You have the right to:
be informed about how we process your personal data;
access and be given a copy of the personal data we hold about you. (See paragraph 10 below about this);
require us to correct any personal data that we hold about you if any of it is inaccurate or incomplete;
be forgotten: in certain circumstances you have a right to have your personal data erased from our records;
restrict (i.e. prevent) the processing of your personal data;
object to the way we process your personal data (e.g. for direct marketing);
withdraw consent: if we are relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time;
data portability: the right in certain circumstances to have us transfer your personal data to another organisation; and not be subject to a decision based solely on automated processing (including profiling) which produces legal effects on you. We do not use your personal data in this way.
As to how to contact us for more information about our use of your personal data or exercising your rights as outlined above, see paragraph 11 below.
It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed as long as we have that data.
If you wish to make a complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office but please contact us first (see paragraph 11 below) so that we might try to resolve your concerns ourselves.
5. How do you collect and use my personal data?
Under UK data protection legislation, we must always have a lawful basis for using personal data. The following examples describe how we may use your personal data, and our lawful bases for doing so:
Administrating our charity - we collect Name, Address, Date of Birth and Email Address. Our Lawful basis for doing so is our legitimate interest so we can administer our charity activity correctly
Managing our relationship with you, e.g. as a volunteer - we collect Name, Address, Date of Birth, Email Address. Our Lawful basis for doing so is our legitimate interest to manage our relationship with you as a volunteer
Managing payments for our services - we collect Name, Address, Date of Birth, Email Address, Payment Details. Our Lawful basis for doing so is our Legitimate interest to manage our relationship with you for our online shop.
Communicating with you - including where you enquire about us and our work, activities, volunteering, events - we collect Name, Address, Date of Birth, Email Address. Our Lawful basis for doing so is our Legitimate interest to respond to your enquiries about our charity.
Supplying you with information about our work by email and/or post - where you have opted-in-to that. We collect Name, Address, Date of Birth, Email Address. Our Lawful basis for doing so is our Legitimate interest to manage consent, You have given your active permission
Receiving a donation from you and claiming Gift Aid on your donations - we collect Name, Address, Date of Birth, Email Address, Payment Details. Our Lawful basis for doing so is our Legitimate interest, this is necessary for us to fulfil your intention of donating money and your expectation of a confirmation message
With your permission and/or where permitted by law, we may use your personal data for marketing purposes, which may include contacting you by email and / or telephone and / or text message and / or post with newsletters, fundraising appeals, campaigns, or other information or with information about our products or services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the UK data protection legislation and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.
We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose. If we do use your personal data in this way and you wish us to explain how the new purpose is compatible with the original, please contact us using the details in paragraph 11 below.
If we need to use your personal data for a purpose that is unrelated to, or incompatible with, the purpose(s) for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.
In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of the data protection legislation and your legal rights.
6. How long will you keep my personal data?
We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected.
7. How and where do you store or transfer my personal data?
We will only store or transfer your personal data within the UK. This means that it will be fully protected under the data protection legislation.
8. Do you share my personal data?
We will not share any of your personal data with any third parties for any purposes
9. How can I access my personal data?
If you want to know what personal data we hold about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a subject access request (“SAR”).
All SARS should be made in writing and sent to the email or postal address shown in paragraph 11.
There is not normally any charge for a SAR. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your SAR within 29 days and, in any case, not more than one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
10. How do I contact you?
To contact us about anything to do with your personal data and data protection, including to make a SAR, please use the following details, for the attention of Marion Micklewright, Data Protection Officer:
Email address: email@example.com
Telephone number: 01743 872857.
Postal Address: Shropshire Cat Rescue, Windy Ridge, Lyth Hill Road, Bayston Hill, SY3 0AU.