Privacy Policy
Last updated 1 August 2026
SHTC Foundation ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you use this website, why we collect it, and what rights you have over it.
Information We Collect
- Donation information: name, email address, and donation amount when you donate via this site. Card and bank details are handled directly by our payment processors (Stripe and GoCardless) — we never see or store your full card or bank account numbers.
- Contact form submissions: name, email, phone number and message content when you contact us.
- Volunteer sign-ups: name, email, phone number, country and areas of interest.
- Newsletter sign-ups: email address.
- Gift Aid declarations: if you opt in to Gift Aid, we record this alongside your donation so we can reclaim tax on your behalf as permitted by HMRC.
How We Use Your Information
We use your personal data to:
- Process donations and issue confirmations/receipts
- Reclaim Gift Aid where applicable
- Respond to enquiries and volunteer sign-ups
- Send newsletter updates, only if you've opted in
- Comply with our legal and regulatory obligations as a registered charity
Payment Processing
Donations are processed by Stripe (one-off card payments) and GoCardless (recurring Direct Debit). Both are PCI-DSS compliant payment providers. When you donate, your payment details are submitted directly to them — they are never transmitted to or stored on our servers. Please refer to Stripe's Privacy Policy and GoCardless's Privacy Policy for details of how they handle your data.
Sharing Your Information
We do not sell your personal data. We share it only with service providers who help us operate this website and process donations (payment processors, our hosting provider, and our database provider), and only to the extent necessary for them to provide that service.
Data Retention
We keep donation and Gift Aid records for as long as required by HMRC and charity accounting regulations (currently 6 years). Contact form and volunteer sign-up data is kept only as long as needed to respond to your enquiry, unless you ask us to keep it for future opportunities.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data (subject to our legal retention obligations)
- Withdraw consent to marketing communications at any time
- Lodge a complaint with the UK Information Commissioner's Office (ICO)
To exercise any of these rights, please contact us.
Cookies
See our Cookie Policy for details of the cookies used on this site.
Contact Us
If you have any questions about this policy or how we handle your data, please contact us at info@shtcfoundation.org.
This policy is provided as a general template and should be reviewed by a qualified advisor to ensure it fully reflects SHTC Foundation's data practices and complies with applicable law.