Privacy Policy

Barnwood Trust (“the Trust”) is committed to protecting and respecting your privacy.

This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.  Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting this website, you are accepting and consenting to the practices described in this policy.

For the General Data Protection Regulation (GDPR), the Trust is the data controller of personal data it holds about you. Its registered address is Overton House, Overton Road, Cheltenham, GL50 3BN, United Kingdom.

We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this Policy.

The Trust has assigned a Data Protection Lead.

Where the Trust stores your personal data

The data that the Trust controls may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. By consenting to the Trust using your personal data, you agree to this transfer, storing and/or processing. The Trust will take reasonable, necessary steps to ensure that your data is treated securely and in accordance with this privacy policy.

Once the Trust has received your information, it will use strict procedures and security features to try to prevent unauthorised access.

How long the Trust keeps your personal data

We retain personal data only for as long as necessary and thereafter for a variety of legitimate legal or business purposes. These might include retention periods:

• mandated by law, contract or similar obligations applicable to our business operations;
• for preserving, resolving, defending or enforcing our legal/contractual rights; or
• needed to maintain adequate and accurate business and financial records.

Uses made of the Personal Information

The Trust uses a variety of technologies to process the personal data we collect about you for various reasons. We have set out in the table below the reasons why we process your personal data, the associated legal bases we rely upon to legally permit us to process your personal data, and the categories of personal data used for these purposes:

Business Function	Purpose of Processing	Categories of individuals	Categories of Personal Data	Lawful basis for processing
Finance	Payroll	Employees	Contact details, Bank details, Pension details, Tax details	Article 6(1)(c) – legal obligation
Human Resources	Personnel	Employees	Contact details, Pay details, Annual Leave details, Sick Leave details, Performance details	Article 6(1)(b) – contract
Human Resources	Recruitment	Successful candidates	Contact details, qualifications,	Article 6(1)(b) – contract
Human Resources	Recruitment	Unsuccessful candidates		Article 6(1)(b) – contract
Learning	Workshops…	Contacts	Contact details	Article 6(1)(a) – consent
Comms	Events	Contacts	Contact details	Article 6(1)(a) – consent
Comms	Meeting Minutes	Governors and Trustees	Contact details	Article 6(1)(a) – consent
Engagement- Barnwood Circle	Engagement scheme Experts by Experience projects	Contacts	Contact details Bank details (only for purpose of EBE payments)	Article 6(1)(a) – consent
Grants for Individuals	Grant Application Processing	Individual grant applicants	Contact details, Bank details, Medical and Disability details,	Article 6(1)(b) – contract
Grants for Organisations	Grant Application Processing	Community Leaders / Professionals	Contact details, Bank details,	Article 6(1)(b) – contract
Research	Research	Community members	Contact details (anonymised)	Article 6(1)(f) – legitimate interest
Research	Storyboarding	Community members	Contact details (incl. audio and video files)	Article 6(1)(a) – consent

Controlling your Personal Information

If you would like access to or a copy of the personal information we hold about you, to request a correction, or have any questions about how we may use it or to make a complaint, please contact the Data Protection Lead at the address shown above. Or, email info@barnwoodtrust.org.

You have the right to ask the Trust not to process your personal data for marketing purposes. The Trust will usually inform you (before collecting your data) if it intends to use your data for such purposes or if it intends to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by  contacting the Trust.

The Trust’s website may, from time to time, contain links to and from the websites of our partner networks and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that the Trust does not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Complaints will be dealt with by the Data Protection Lead and will be responded to within 30 days at the latest.

Contact

Questions, comments and requests regarding this privacy statement are welcomed and should be directed to the Data Protection Lead.