Effective Date: 21 February 2025
Introduction
We are committed to protecting your privacy and handling your personal data responsibly and in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).
This Privacy Policy explains how personal information is collected, used, stored, and protected when you use our website, access our services, or opt in to receive communications including SMS notifications.
Information We Collect
We may collect and process the following types of personal information:
- Name
- Email address
- Phone number
- Postal address (where required for service delivery)
- Information submitted through forms (such as food bank requests, volunteer registrations, voucher applications, or event registrations)
- Communication preferences
- Website usage data (such as IP address, browser type, and pages visited)
We only collect information necessary to deliver our services and operate effectively.
How We Use Personal Information
Personal information may be used to:
- Provide community services and support
- Coordinate food bank collections or deliveries
- Manage volunteer scheduling and communication
- Process voucher applications
- Send service updates and operational announcements
- Respond to enquiries
- Maintain internal administrative records
- Meet reporting requirements to funders (in anonymised or aggregated form where appropriate)
- Comply with legal obligations
We do not sell, rent, or trade personal information.
SMS Communications
If you choose to opt in to receive SMS communications, messages may include:
- Volunteer coordination
- Delivery or collection notifications
- Event reminders
- Service updates
- Operational announcements
Message frequency will vary depending on program activity.
You may opt out at any time by replying STOP to a message.
Standard message and data rates may apply according to your mobile provider.
Lawful Basis for Processing
Personal data is processed under one or more of the following lawful bases:
- Consent
- Legitimate interests in delivering and managing community services
- Legal obligation
- Vital interests where urgent support or safeguarding is involved
Data Sharing
Personal information may be shared with trusted third-party service providers where necessary for operational purposes, such as:
- IT and website hosting providers
- SMS communication providers
- Voucher or service delivery partners
Information may also be shared where required by law.
All third parties are expected to process data securely and in compliance with data protection regulations.
Data Retention
Personal data is retained only for as long as necessary to:
- Deliver services
- Meet reporting obligations
- Comply with legal requirements
When no longer required, personal information is securely deleted.
Data Security
Appropriate technical and organisational measures are implemented to protect personal data, including:
- Secure cloud-based storage
- Access controls and restricted permissions
- Password protection
- Secure data handling procedures
Your Rights
Under UK data protection law, individuals have the right to:
- Access personal data
- Request correction of inaccurate information
- Request deletion of personal data
- Restrict or object to certain processing
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner's Office (ICO)
Updates to This Policy
This Privacy Policy may be updated from time to time. The latest version will always be published on this page.