Privacy Policy

Last updated 1 August 2026

SHTC Foundation ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you use this website, why we collect it, and what rights you have over it.

Information We Collect

Donation information: name, email address, and donation amount when you donate via this site. Card and bank details are handled directly by our payment processors (Stripe and GoCardless) — we never see or store your full card or bank account numbers.
Contact form submissions: name, email, phone number and message content when you contact us.
Volunteer sign-ups: name, email, phone number, country and areas of interest.
Newsletter sign-ups: email address.
Gift Aid declarations: if you opt in to Gift Aid, we record this alongside your donation so we can reclaim tax on your behalf as permitted by HMRC.

How We Use Your Information

We use your personal data to:

Process donations and issue confirmations/receipts
Reclaim Gift Aid where applicable
Respond to enquiries and volunteer sign-ups
Send newsletter updates, only if you've opted in
Comply with our legal and regulatory obligations as a registered charity

Payment Processing

Donations are processed by Stripe (one-off card payments) and GoCardless (recurring Direct Debit). Both are PCI-DSS compliant payment providers. When you donate, your payment details are submitted directly to them — they are never transmitted to or stored on our servers. Please refer to Stripe's Privacy Policy and GoCardless's Privacy Policy for details of how they handle your data.

Sharing Your Information

We do not sell your personal data. We share it only with service providers who help us operate this website and process donations (payment processors, our hosting provider, and our database provider), and only to the extent necessary for them to provide that service.

Data Retention

We keep donation and Gift Aid records for as long as required by HMRC and charity accounting regulations (currently 6 years). Contact form and volunteer sign-up data is kept only as long as needed to respond to your enquiry, unless you ask us to keep it for future opportunities.

Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your data (subject to our legal retention obligations)
Withdraw consent to marketing communications at any time
Lodge a complaint with the UK Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us.

Cookies

See our Cookie Policy for details of the cookies used on this site.

Contact Us

If you have any questions about this policy or how we handle your data, please contact us at info@shtcfoundation.org.

This policy is provided as a general template and should be reviewed by a qualified advisor to ensure it fully reflects SHTC Foundation's data practices and complies with applicable law.

Information We Collect

Donation information: name, email address, and donation amount when you donate via this site. Card and bank details are handled directly by our payment processors (Stripe and GoCardless) — we never see or store your full card or bank account numbers.

Contact form submissions: name, email, phone number and message content when you contact us.

Volunteer sign-ups: name, email, phone number, country and areas of interest.

Newsletter sign-ups: email address.

Gift Aid declarations: if you opt in to Gift Aid, we record this alongside your donation so we can reclaim tax on your behalf as permitted by HMRC.

Payment Processing

Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you

Ask us to correct inaccurate data

Ask us to delete your data (subject to our legal retention obligations)

Withdraw consent to marketing communications at any time

Lodge a complaint with the UK Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us.