Privacy policy

This draft describes what the website does as built. It may change before approval.

In short

This website stores personal details only when you send them to us through a form, and only what the form asks for. We do not sell them and we do not use them for advertising.

What each form stores

When you send a form, we store the following, together with the language you were using, the time, and the fact that you agreed.

• Contact: your name, email address, subject and message.
• Volunteering: your name, email address, phone number, the area you chose and your message.
• Course registration: the course, your name, phone number, email address and notes.
• Event registration: the event, your name, email address, phone number, the number attending, how you will attend, and notes.
• Feedback: your name, email address, the category, your rating and your message.
• Basket (pledges): your name, phone number, email address, subject, notes, and for each line the cause, the amount and whether it is one-off or monthly. This is a pledge. The website takes no payment and stores no card or bank details.
• Newsletter: your email address and, on the newsletter page, the topics you ticked. Nothing else. You are subscribed only after you open the confirmation link we email you.

Why we store it

To answer your request, to contact you about what you asked for, and, for the newsletter, to send it to you. Staff of the foundation can see what you sent.

What we do not store

We do not store your IP address. To limit abuse, the website keeps for a short time a counter that is tied to a scrambled form of your address which cannot be turned back into the address. The website does not set advertising cookies. It keeps your language choice in your own browser.

Where it is kept

Form data is kept in a database run by Cloudflare (Cloudflare D1). Emails to you and to our staff are sent through Brevo, an email service, which therefore handles your email address and the content of those emails.

Other services your browser contacts

Some parts of the site are loaded from other companies. When they load, that company receives your IP address and browser details, as with any website visit.

• Cloudflare Turnstile: an anti-spam check, loaded when you start using a form.
• Cloudflare Web Analytics: visit counts without cookies. Used only if the foundation switches it on.
• OpenStreetMap: the map on the contact page, loaded only when you press "Show the map".

How long we keep it

Proposed, pending approval:

• Messages: deleted 12 months after staff have dealt with them.
• Newsletter: an unsubscribed email address is deleted 30 days after you unsubscribe.
• Pledges: kept as a record; no automatic deletion.

Automatic deletion is not switched on yet.

Seeing or deleting your details

You can ask to see, correct or delete what we hold about you by writing to: [email protected]

Every newsletter email will carry a link to unsubscribe.