Privacy Policy

Bishopthorpe Charitable Partners' Trust is committed to protecting and respecting your privacy. This notice sets out how we collect, process and use your data. By using our website, emailing or writing to us you agree to the terms of our privacy policy. This notice tells you what to expect us to do with your personal information.

What data we collect and how we use it

We collect or use the following information about you when you use our website, write to us by post or email, give us any details at our events or contact us by phone: name and contact details,address, telephone number if provided, and any related correspondence.

We collect or use the following information to receive donations or funding and organise fundraising activities: names and contact details, address, telephone number if provided, payment or banking details, donation history, tax payer information (for Gift Aid purposes) and gifts in wills.

Our contact details

Bishopthorpe Charitable Partners' Trust, OGice of the Archbishop of York, Bishopthorpe Palace, Bishopthorpe, York YO23 2GE. Email: info@bcptrust.co.uk

Lawful basis and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. Which lawful basis we rely on may aGect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.

• Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.

• Your right to erasure - You have the right to ask us to delete your personal information.

• Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information.

• Your right to object to processing - You have the right to object to the processing of your personal data.

• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.

• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any timeIf you have concerns or comments about how we are using your personal data or would like to make a Data Subject request, you should get in touch with us in the first instance using our contact details (above) and put ‘Data Subject Request’ in the subject field of the email or letter.

If you make a request, we must respond to you without undue delay and in any event within one month. If you remain unhappy after complaining to us, you can also contact the ICO.

Our lawful basis for the collection and use of your data

Our lawful bases for collecting or using personal information i) to receive donations or funding and organise fundraising activities and ii) for dealing with enquiries, queries, complaints, grant applications and claims is:

• Legitimate interest – for example, in order for us to make you aware of our Trust and objectives and events, or decide to award a grant and administer it.

• Consent - we have permission from you after we gave you all relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Where we get personal information from

We get personal information directly from you, from publicly available sources and from our personal contacts.

Who we share information with

We may share your information with Donorfy. This data processor does the following activities for us: provision of customer relations management (CRM) services which store and manage our records of contacts, donors, our associate members (Bishopthorpe Partners) donations received and repayment of income tax. We may also share your information with Xero, the cloud-based accounting software which provides us with automated banking services, reconciliations, standard business and management reporting.

How we use your information

We may use your information to

• send you communications that may be of interest to you or you have requested (these may include information about our events, and ways in which you can help us practically and financially);

• carry out our obligations arising from any funding relationships entered into by you and us;

• to identify if there is mutual benefit in our trustees contacting you;

• seek your views or comments on the charitable grants we make; or

• process a grant or job application.

Who has access to your information?

All information you provide to us is stored on MS OGice 365 Share Point and at any approved thirdparty locations. We follow appropriate security procedures in the storage and disclosure of personal data so as to guard against loss, damage and unauthorised access by third parties.

We will not release your information to third parties except as stated above and will only share wider details where absolutely required by law.

How long we keep information

We will only hold your personal information for as long as is reasonably necessary for the purposes set out in our privacy policy and to fulfil our legal obligations.

Website, ‘cookies’ and links to other websites

Our website contains links to other websites which have their own privacy policies for which we are not responsible. While Bishopthorpe Charitable Partners' Trust does not use cookies to collect, analyse and use any personal data from visitors to our website, other website providers’ software may do so; such third-party activities are beyond our control, and we accept no responsibility for them. Visitors to other sites should satisfy themselves those sites will handle their personal data appropriately.

Changes

We may occasionally update our policy without notice to reflect changes in the way we operate. We suggest you check this notice from time to time to inform yourself of any such developments.