Privacy notice · BASH TRUST

In short

We collect your name and email when you make a donation, sign up for our short dispatch, register interest in an event, or write to us. We never sell your data. We keep donation records for seven years for accounting purposes; enquiries for two years. You can ask us to delete your data at any time by writing to [email protected]. You have the right to complain to the ICO at any time.

1. Who we are.

The data controller is BASH TRUST, a charity registered in England and Wales under number 220011. Our registered office is at Gray's Inn Tax Chambers, 36 Queen Street, London EC4R 1BN. You can reach us at [email protected] or on +44 (0)20 7242 2642.

2. What personal data we collect.

When you donate: your name, postal address (for the receipt), email address, donation amount, and — where you have provided one — a Gift Aid declaration. We do not store your payment-card number; cards are handled by the relevant payment processor.
When you subscribe to our dispatch: your email address only.
When you write to us: the information you choose to share in your message (typically your name, email, and the content of your enquiry).
When you register for an event: your name, email, the number in your party, and any access requirement you have told us about.
When you visit this website: standard server-log information (your IP address, browser type, pages you viewed) and — only if you have opted in — anonymous analytics data. We do not run advertising trackers.

3. Why we collect it, and our lawful basis.

To process and acknowledge donations · lawful basis: contract (administering the gift) and, for Gift Aid records, legal obligation.
To send our short dispatch · lawful basis: consent. You can withdraw your consent at any time.
To answer enquiries · lawful basis: legitimate interest in responding to people who have written to us.
To run events · lawful basis: legitimate interest in administering the event, including any access arrangements.
To keep the website running · lawful basis: legitimate interest in operating a secure website. Anonymous analytics rely on consent.

4. Who we share data with.

We share data only with the small number of organisations that make this work possible.

Our independent examiners (a firm of chartered accountants in London), for the annual examination of accounts.
HM Revenue & Customs, where you have made a Gift Aid declaration and we have, at any future date, registered for Gift Aid.
The Charity Commission for England and Wales, for statutory reporting (this is, in practice, aggregated financial data only).
A reputable email provider (currently Mailchimp) for our short dispatch.
A payment processor at the moment of a card donation. We do not store card details ourselves.

We do not sell or rent your personal data to anyone, ever. We do not pass your details to other charities.

5. How long we keep it.

Donor records: seven years after the date of the gift (Gift Aid and accounting requirements).
Enquiry correspondence: 24 months from the date of the last reply.
Newsletter subscriptions: as long as you are subscribed, plus 12 months after you unsubscribe (for audit only).
Event registrations: 12 months from the event date.
Website analytics: 14 months in aggregated, anonymised form.

6. Your rights under UK GDPR.

You have the right to:

access the personal data we hold about you (a "subject access request");
have inaccurate data corrected;
ask us to delete your data ("right to erasure"), in most circumstances;
restrict our processing of your data;
receive your data in a portable form;
object to processing carried out under legitimate interest;
withdraw consent at any time, where consent is the lawful basis.

To exercise any of these rights, write to [email protected]. We aim to respond within one calendar month.

7. Cookies.

We use a very small set of cookies. The detail is on our cookie policy page.

8. Children's data.

We do not market the Trust to children under 13 and do not knowingly collect personal data from them. Where children visit the synagogue with a school, we work with the school's safeguarding lead and do not retain individual children's data.

9. Changes to this notice.

We will update this notice when our practice changes, and will date it on the "Last updated" line above. For substantive changes, we will write to subscribers separately.

10. How to complain.

Please write to us first — most complaints can be resolved by a short exchange of letters. If you remain unhappy, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection authority. The ICO can be reached at ico.org.uk or on 0303 123 1113.

A short, plain-English notice about your personal data.