Privacy Policy

How we treat the information we gather

Last updated: June 2026

The Jack Brunton Trust is a registered charity and a company limited by guarantee. We are committed to protecting your personal information and being transparent about how we use it.

This policy applies to personal information collected through this website and our associated websites (referred to collectively as “our website”). We are the Data Controller of the personal information described in this policy.

The law that applies

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as updated by the Data (Use and Access) Act 2025. The Information Commissioner’s Office (ICO) is the UK’s data protection regulator.

What information we collect

We may collect the following personal information from visitors to our website:

• Questions, queries and feedback you submit, including your email address if you contact us
• Your name and contact details if you complete an online form
• Your IP address and browser information
• Information about how you use our website, collected via cookies and page-tagging tools

Why we collect it and our lawful basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

Legitimate interests – we process certain data (such as website analytics and technical information) because it is necessary for our legitimate interests in running an effective charity website, and those interests are not overridden by your rights.

Consent – where we send you electronic marketing communications, we will ask for your consent first, unless the charitable purposes soft opt-in applies (see below). You can withdraw your consent at any time.

Legal obligation – we may process your data where we are required to do so by law.

 Electronic marketing (email and SMS)

Where you have expressed an interest in or offered support to The Jack Brunton Trust, we may contact you with updates and information about our work under the “charitable purposes soft opt-in” introduced by the Data (Use and Access) Act 2025. This means we may send you relevant communications without requiring full opt-in consent, provided:

• You have previously engaged with or expressed an interest in our charitable work
• You are given a clear opportunity to opt out in every communication
• We only contact you about our own charitable purposes, not third-party organisations

You can opt out at any time by contacting us using the details at the end of this policy.

How we use your information

We use the information we collect to:

• Improve the content and design of our website
• Respond to your queries and feedback
• Send you information about our charitable work, where permitted
• Carry out legal or regulatory obligations

We will never share your personal information with other organisations for their marketing, market research or commercial purposes.

Cookies

Like most websites, ours uses cookies – small data files stored on your device. Please read our separate Cookies Policy for full details of the types of information we collect through cookies and how you can manage them. You can adjust your cookie preferences at any time using the cookie settings on our website.

How long we keep your data

We do not keep your personal data for longer than is necessary for the purpose it was collected. In practice:

• Website enquiry and feedback data is held for up to two years
• Supporter contact information is reviewed annually and deleted when no longer needed
• Legal and financial records are kept for as long as required by law

 If you would like to know how long we hold a specific type of data, please contact us.

 How we store and protect your data

All personal information you provide is stored on secure servers. Payment transactions are encrypted. While we take all reasonable steps to protect your data, the transmission of information over the internet cannot be completely guaranteed. Any transmission is at your own risk.

Data breaches

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours. Where a breach is likely to result in a high risk to you, we will also notify you directly without undue delay.

Sharing your information

We may disclose your personal information in the following limited circumstances:

• Where we are under a legal duty to do so
• For law enforcement purposes
• To enforce our terms of use or other agreements

We do not sell, rent or trade your personal information to any third party.

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• The right to access the personal data we hold about you
• The right to have inaccurate data corrected
• The right to have your data deleted (‘the right to be forgotten’), in certain circumstances
• The right to restrict how we process your data
• The right to data portability (receiving your data in a structured, commonly used format)
• The right to object to our processing of your data
• The right not to be subject to solely automated decision-making where it produces significant effects

To exercise any of these rights, please write to us at the address below. We will respond within one calendar month. We may ask you to verify your identity before processing your request.

How to complain

If you are unhappy with how we have handled your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

ICO helpline: 0303 123 1113

Website: www.ico.org.uk

Links to other websites

Our website may contain links to other organisations’ websites. This privacy policy applies only to our website. If you visit another website from ours, please read their privacy policy to understand how they handle your information.

Contact us

To exercise your data rights, request a copy of the information we hold about you, or raise a concern, please contact:

Mr D Swallow FCA

The Jack Brunton Trust

10 Bridge Road

Stokesley

North Yorkshire

TS9 5AA

Email: [email protected]

Changes to this policy

We review this privacy policy regularly and will post any updates on this page. This policy was last updated in June 2026.