1. Introduction
The River Arrow Trust (we, us, our) is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, store and safeguard your personal data when you contact us through our website’s contact form.
2. Data controller
We (River Arrow Trust) are the “data controller” for the personal data you provide via our contact form. If you have any questions about this policy or our data practices, you can contact us at: enquiries@riverarrowtrust.org.
3. What personal data we collect
When you fill in the contact form on our website, we collect the following personal data from you:
- Your name
- Your email address
- Your organisation name
No other personal data is collected via that form (unless you voluntarily include further information in the message field).
We use MailChimp to collect your name and email address for the purpose of sending you newsletters. You can unsubscribe at any time by clicking the link in the footer of our emails.
4. Purpose and lawful basis for processing
We collect your name and email address so that we can reply to your enquiry submitted via our contact form. The lawful basis for this processing is your consent (you voluntarily submit the form) and/or our legitimate interest in responding to enquiries addressed to us.
5. How we use your data
If you use our contact form, we will use your provided name and email in order to respond to your query.
Once your query has been addressed, we retain your name and email on file indefinitely for record-keeping purposes (unless you ask us to delete it) so we can maintain a history of enquiries and ensure continuity of care.
We use Mailchimp as our email marketing platform. By subscribing to our newsletter, you acknowledge that the information you provide will be transferred to Mailchimp for processing in accordance with their Privacy Policy and Terms.
We do not sell your personal information.
6. Data retention
We will retain your name and email address indefinitely, unless you ask us to delete them. You have the right to request deletion (see section 8 below).
7. Data sharing and transfers
We will not share your personal data with any third parties except where required by law. Your data will not be transferred outside the UK or the European Economic Area (EEA). If in future we do transfer data internationally, we will ensure appropriate safeguards are in place.
8. Your rights
Under the UK Data Protection regime (the Information Commissioner’s Office (ICO) and the UK General Data Protection Regulation / Data Protection Act 2018) you have certain rights in relation to your personal data. These include:
- The right to access the personal data we hold about you.
- The right to have inaccurate personal data corrected.
- The right to have your personal data erased (i.e., deletion).
- The right to restrict or object to our processing of your personal data.
- The right to withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).
If you wish to exercise any of these rights, please contact us at the contact details above.
You also have the right to lodge a complaint with the ICO. Information Commissioner’s Office
9. Security of your data
We take appropriate technical and organisational measures to safeguard your personal data, including restricting access to the data, storing it securely, and regularly reviewing our procedures to ensure a level of security appropriate to the risk.
10. Changes to our privacy policy
We may update this privacy policy from time to time (for example to reflect changes in law or our practices). The updated version will be published on our website and the “last updated” date at the top will be revised accordingly.
11. Cookies / other data collection
This policy covers only the personal data you actively submit via our contact form. If we use cookies, analytics, or other tracking technologies on our website, these are addressed in our cookie policy, and in line with ICO guidance.
12. Contact details and supervisory authority
If you have any questions about our privacy practices, or wish to exercise your rights, please contact:
admin@riverarrowtrust.co.uk
If you are unhappy with how we have used your data, you have the right to raise a complaint with the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk