In short
- We collect the minimum data we need to do our work.
- We never sell or share your data with third parties for marketing.
- You can ask us at any time to access, correct, or delete your data.
- We use a small number of cookies — see our Cookie Policy.
- If we get something wrong, you can complain to us or to the ICO.
Who we are
The Avon Trust ("we", "us", "our") is a registered charity in England and Wales (No. 219050) and a company limited by guarantee (No. 00781432). Our registered office is 12 Pulteney Court, Bath, Somerset, BA2 4DN. We are registered as a data controller with the Information Commissioner's Office (ICO), registration ZA418329.
What data we collect
From supporters and donors
Name, address, email, phone number, bank or card details (processed by Stripe — we do not store full card numbers), donation history, communication preferences, and Gift Aid declaration status.
From volunteers
Name, contact details, emergency contact, references, DBS check status (for roles requiring it), training history and time logged. We retain volunteer records for seven years from the end of your service, after which they are anonymised for our archives.
From newsletter subscribers
Email address and, if you choose to provide it, first name. Held by our mail provider Mailchimp under the EU-US Data Privacy Framework.
From visitors to this website
Anonymised analytics data (page views, country, device type) via a self-hosted Plausible Analytics instance. No personal identifiers, no third-party tracking. See our Cookie Policy.
Why we use your data
To process your donation; to send you the updates you have requested; to invite you to events; to administer volunteer placements; to comply with our legal obligations (e.g. Gift Aid, anti-money-laundering, safeguarding); and to evaluate the effectiveness of our work in aggregated, anonymised form.
Lawful basis
We rely on (a) your consent for marketing emails and event invitations; (b) contractual necessity for processing your donation or volunteer placement; (c) legal obligation for HMRC and safeguarding records; and (d) legitimate interest for administering supporter relationships, evaluated against your rights and freedoms.
Who we share your data with
We share only with the providers we strictly need to: Stripe (payments), Mailchimp (mailings), Bishop Fleming (audit), and — where legally required — HMRC and the Charity Commission. We never sell or trade data, and we never share with other charities or commercial partners.
How long we keep it
Supporter records: 7 years after your last interaction with us (HMRC requirement for Gift Aid). Volunteer records: 7 years after end of service. Marketing consent: until you withdraw it. Anonymised analytics: indefinitely.
Your rights
Under UK GDPR you have the right to: access your data; correct inaccuracies; ask us to delete data (the "right to be forgotten"); object to processing; restrict processing; and request data portability. To exercise any of these, email [email protected] or write to our Data Protection Lead at the registered office. We will respond within one calendar month.
Cookies
We use a small number of strictly necessary cookies and one anonymised analytics cookie. See our Cookie Policy for the full list.
Children
We do not knowingly collect personal data from children under 13 without parental consent. Story Boats and Bridge to Sixth participant data is processed under specific consent agreements with parents/carers and partner schools.
Changes to this policy
We review this policy annually each April. Material changes are notified to active supporters and volunteers by email. The version date is at the top of this page.
Complaints
If you are unhappy with how we have handled your data, please write to our Chief Executive at the registered office. You also have the right to complain directly to the Information Commissioner's Office: ico.org.uk · 0303 123 1113.