Website Privacy Notice

GENESIS TRUST BATH 

About this privacy notice 

Genesis Trust Bath is committed to protecting and respecting your privacy. This privacy notice aims to provide you with information on how we collect and process your personal data through your use of this website and in your interactions with us as a customer/supporter. It also outlines your rights and explains what to do if you have any questions or concerns about your personal data. 

This website is not aimed at children and we do not knowingly collect personal data relating to children. 

Who we are 

For the purposes of data protection law, the controller of your personal data is Genesis Trust Bath a registered charity in England and Wales (registered charity number: 1154253) and a registered company in England and Wales (company number: 08609938). Our contact details are as follows: 

  • Registered Address: Gateway Centre, Snow Hill, London Road, Bath, BA1 6DH 
  • Communications Address: 10a Church Farm Business Park, Corston, Bath, BA2 9AP 
  • Email: office@genesistrust.org.uk 

The Data Protection Lead for Genesis Trust Bath is the Operations Manager. They can be contacted via the email address above. 

What personal data do we collect? 

When we refer to personal data, we mean any information that relates to you that may (either on its own or in combination with other information) identify you. We may collect the following types of personal data about you when you, for example, visit our website, make a donation or subscribe to our newsletter: 

  • Identity information: This may include your title, name, date of birth and gender. 
  • Contact information: Including your postal address, email address and telephone number. 
  • Profile data: If you create an account on our website, we will process information about your account, including your username and password, your preferences and other information you share with us. 
  • Transaction data: If you donate money or make a purchase we will store details of your payment information, details of the products you have purchased from us and information relating to delivery. 
  • Technical data: Some information is automatically collected by our website and includes your internet protocol (IP) address, login information (if you have an account with us), information about your internet browser and other technical information about the devices you use to access this website. Collecting this information allows us to ensure that content is presented in the most effective manner for you and for your computer and that our site is safe and secure.  
  • Website usage data: We may collect information about the way that you use our website through cookies (for further information, please see our cookie policy <hyperlink>). 
  • Marketing data: We will also collect information about your preferences to receive marketing emails from us and your communication preferences. 

Certain types of personal data are considered by data protection law to be more sensitive than others. This includes “special category personal data” (information relating to your health, racial or ethnic origin, details of sexual life, sexual orientation, religious beliefs, political opinions or any genetic or biometric data that is used to identify you) and “criminal offences and conviction data”.  

Unless you share this information with us or (for example, if you contact us by email and tell us about yourself or use our online volunteer management system) we do not collect any special category personal data or information about criminal convictions or offences. 

Failure to provide personal data 

Where we need to collect personal data by law or in order to perform a contract we have with you and you fail to provide that data when requested, we may not be able to meet our legal obligations or perform the contract we have entered or are trying to enter into with you. For example, failure to provide the requested personal data when placing an order on our website may mean that we are unable to fulfil your order. 

How is your personal data collected? 

We collect personal data about you from the following sources: 

  • Direct interactions: We collect personal data that you provide to us including, for example, information you provide when you communicate with us (e.g. to contact us or give us feedback), sign up for our email mailing list, place an order through one of our shops, use one of our online forms, make a donation, or when you register an account with us.  
  • Automated interactions: As you interact with our website, our website provider will automatically collect technical data (see above for further information). 
  • Third parties or publicly available sources: We may also receive personal data from third parties and public sources. This may include: 
  • Analytics: We may receive technical data from analytics providers such as Google and eBay. 
  • Transactions: If you place an order or make a donation directly or via one of our third party providers, we will receive data from payment and delivery providers (e.g. to confirm you have paid so we can arrange delivery).  
  • Contact: If you sign up to our mailing list or fill in one of our online forms we may also receive information from service providers.    

Why we process your personal data and our legal bases for doing so 

When we collect, use and store your personal data, we will only do so where the law allows us to. Data protection law requires us to have a legal basis for processing your personal data.  

In the table below, we set out further information about why we process your personal data and the legal reasons we rely on to do so.  

 

Purpose / Activity  Type of personal data concerned  Lawful basis for processing 
To set up an account on our website to register you as a customer or donor 
  1. Identity information 
  1. Contact information 
  1. Profile data 

 

 Necessary for performance of a contract with you 
To process your online orders or donations, including managing delivery and collecting and recovering money owed to us 

 
  1. Identity information 
  1. Contact information 
  1. Transaction data 
 Necessary for performance of a contract with you 

Necessary for our legitimate interests (to recover debts due to us) 

 
To manage our relationship with you, including responding to your queries / requests, notifying you about changes to our terms  

 
  1. Identity information 
  1. Contact information  
  1. Profile data 
 Compliance with our legal obligations (in connection with our obligations under tax law) 

Necessary for our legitimate interests (in maintaining customer relations) 
To enable you to sign up to our mailing list and receive marketing emails from us 

 
  1. Identity information 
  1. Contact information  
  1. Profile data 
  1. Marketing data 
 Consent 
To administer and manage our business and this website 
  1. Identity information 
  1. Contact information 
  1. Technical data 
 Necessary for our legitimate interests (to ensuring our website functions properly, managing IT services and ensuring network security, preventing fraud, running our business effectively, and in the context of reorganisation or restructuring of our business) 

Necessary to comply with our legal obligations 

 
To use data analytics and other automated technology to improve our website, products, marketing, customer relationships and experiences 
  1. Technical data 
  1. Usage data 
 Necessary for our legitimate interests (to help understand our customer base in order to enhance our product offering, to keep our website updated and working well, to personalise your experience on our website, and to help inform our marketing strategy) 

 
To enable you to sign up for events such as challenge events or to Gift Aid your donations 
  1. Identity information 
  1. Contact information 
  1. Profile data 
  1. Marketing data 
 Necessary for performance of a contract with you (ie. participation in an event or donating furniture, for example) 

Marketing 

If you sign up to our mailing list, you will receive marketing emails from us. You can opt out of receiving marketing at any time by clicking the ‘unsubscribe’ link at the end of any email or by contacting us directly via email above. Please note, if you unsubscribe from marketing emails, we may still contact you by email if you have placed an order with us (e.g. to tell you that your order is on its way).  

Who will your personal data be shared with? 

In certain circumstances we may pass your personal data to third parties. We will never pass your personal data unless you have allowed us to do so or we are allowed or required to do so by law. For example, we may share your personal data with: 

  • Third party service providers, for example: 
  • Business partners, suppliers and sub-contractors connected with a contract with you (e.g. payment and delivery providers such as eBay if you place an order with). 
  • Analytics and search engine providers that help us with improving and optimising this website. 
  • If we sell or transfer all or part of our business/charity to another company or charity your personal data may be disclosed to the prospective seller or buyer. 
  • Law enforcement agencies, regulatory organisations, courts or other public authorities where we have a legal obligation to do so.  
  • Our legal advisors and insurers, for example if we are involved in a dispute with you. 
  • Email management (e.g., Mailchimp). 
  • Online form supplier (e.g., for challenge event sign-up, New Subscriber Survey, Gift Aid declarations and Furniture Shop donations).  
  • Software application providers that may supply services (e.g., eBay, Inuit, Assemble, Salesforce). 

 International transfers 

On occasion we may need to transfer your personal data outside the UK. For example, where we use third party service providers involved with the fulfilment of your order, processing of payment details, or provision of support services, that operates outside the UK. If we do transfer your personal data outside of the UK, we will put in place appropriate legal mechanisms and safeguards to ensure that your personal data is transferred and processed in compliance with data protection law. 

Any transfers of personal data outside the UK are subject to special rules under the UK GDPR. If we do transfer your personal data outside of the UK therefore, we will put in place appropriate legal mechanisms and safeguards to protect your personal data.  

If you would like more information about how we protect your personal data if it is transferred outside the UK please contact using the email above. 

How long we hold your information 

We will only store your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements and, where required for us to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled.  

When determining how long to store personal data, we consider the amount and nature of the data, the purposes for which it is kept, the sensitivity of the data and the potential risk of harm from unauthorised use or disclosure. We continually review what information we hold and will securely delete or anonymise personal data which is no longer required. For further information about how long we store your personal data, please contact us. 

Your rights 

Data protection law provides individuals with various legal rights, which may be exercised in certain circumstances. You have the following legal rights over your personal data: 

  • The right of access: You have the right to obtain a copy of the personal data we hold about you as well as other information about how we are processing your personal data. 
  • The right to rectification: You have the right to have your personal data corrected if it is inaccurate or incomplete. 
  • The right to erasure: In certain circumstances, you have the right to request we delete your personal data (such as where we no longer need your personal data for the purpose it was originally collected for). 
  • The right to restrict processing of your personal data: You may ask us to restrict the use of your personal data in certain circumstances (such as where you believe your personal data is incorrect and we need to verify the accuracy of the personal data we hold) 
  • The right to object: You may object to our processing of your personal data in certain circumstances, such as where we are processing your personal data based on “legitimate interests”. Please note, you always have the right to object to processing of your personal data for direct marketing purposes.  
  • The right to data portability: This right allows you to request that we transfer your personal data to you or another third party in a commonly used, machine-readable format. Please note, this right only applies to automated information that you initially provided consent for us to use or where we used the information to perform a contract with you. 
  • The right to withdraw consent: Where we are relying on your consent to process your personal data, you have the right to withdraw your consent at any time and may do so by contacting us via the email above. If you decide to withdraw your consent, that does not mean that our use of your personal data before you withdrew your consent is against the law. 

Some of these rights do not apply in all circumstances and we may be able to refuse or partially refuse requests in certain circumstances such as where a legal exemption applies. In most cases we have one month to respond to you. Occasionally, we may need to verify your identity before we are able to process a request. 

Automated decision-making and profiling 

Automated decision-making is when a computer or similar electronic system uses personal information to make decisions about people without human involvement. Profiling takes place when different aspects about a person (such as their behaviour, interests or personality) are analysed in order to make predictions or decisions about them. 

We do not carry out automated decision making (including profiling). If that changes, we will update this Privacy Notice and notify you in writing (where appropriate). 

Complaints 

You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are not happy with the way we are processing your personal data or have processed your request. Details of how to do this can be found at https://ico.org.uk/make-a-complaint/. In the first instance, please contact us to discuss your concerns and we will make every effort to resolve any issues. 

Changes to this Privacy Notice 

This Privacy Notice was published on 2nd February 2024. We will update and change this Privacy Notice from time to time to keep it up to date and accurate. We will always publish the most up to date version on our website. If we make a substantial change that affects your rights, we will notify you of the change, usually by email. 

 Accessibility 

If you would like this website Privacy Notice in another format (for example: audio, large print, braille) please contact us.