Skip to content

Privacy Policy

Privacy Policy

Last updated: January 2026

1. Introduction

The Carr Fenton Foundation (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your personal information when you interact with us, including through our website.

Data Controller Details:

  • Organisation: The Carr Fenton Foundation
  • Address: Leger Way, Doncaster, South Yorkshire, DN2 6AY
  • Company Number: 4105045
  • Registered Charity Number: 1088060
  • Email: enquiries@ddt-deaf.org.uk

We are registered with the Information Commissioner’s Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. We may update it from time to time, and any significant changes will be communicated to individuals with whom we are in regular contact.


2. What Personal Data We Collect

We may collect and process the following personal data about you:

Contact and Identity Information:

  • Full name and title
  • Age range or birth year (not full date of birth)
  • Postal address
  • Telephone number(s)
  • Email address

Engagement Information:

  • Records of correspondence with us
  • Details of enquiries you make
  • Information about your participation in our events or activities
  • Volunteer activity records
  • Survey responses

Financial Information:

  • Donation history and amounts
  • Gift Aid declarations and tax information

Visual Information:

  • Photographs and digital images (where you have provided consent)

Technical Information:

  • IP address
  • Browser type and version
  • Device information
  • Website usage data and access times

Important: We do not collect or store payment card information. All card transactions are processed securely by authorised third-party payment processors (such as PayPal) through encrypted connections.


3. How We Collect Your Personal Data

We collect personal data in the following ways:

Directly from you when you:

  • Sign up for our newsletters or communications
  • Request information about Little Learner’s Nursery, Doncaster School for the Deaf, Yorkshire Rose College or Dickson House Children’s Home
  • Make a donation or set up a regular payment
  • Purchase items from our online shop
  • Register for or attend events
  • Volunteer with us
  • Complete surveys or feedback forms
  • Contact us via email, phone, or post
  • Interact with us on social media

Automatically when you:

  • Visit our website (through cookies and similar technologies)
  • Open our emails (through tracking pixels, if you have consented)

From third parties:

  • Gift Aid information from HMRC
  • Payment confirmation from payment processors
  • References for volunteering roles (with your consent)

We process your personal data under the following legal bases:

Consent: When you have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications, photography).

Legitimate Interests: When it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests. Our legitimate interests include:

  • Providing information about our services
  • Administering our relationship with supporters, volunteers, and service users
  • Improving our services and website
  • Ensuring network and information security

Legal Obligation: When we need to comply with legal or regulatory requirements (e.g., Gift Aid claims, safeguarding duties).

Contractual Necessity: When processing is necessary to fulfil a contract with you (e.g., delivering purchased goods).


5. How We Use Your Personal Data

We use your personal data for the following purposes:

Service Delivery:

  • To provide newsletters, information, products, or services you have requested
  • To process donations and manage Gift Aid claims
  • To administer events, activities, and volunteering opportunities
  • To respond to your enquiries

Communications:

  • To send you information about our services, campaigns, and fundraising activities (with your consent)
  • To personalise communications based on your preferences, location, and previous engagement
  • To notify you of changes to our services

Website and Service Improvement:

  • To improve our website functionality and user experience
  • To analyse how visitors use our website
  • To ensure our communications are relevant and effective

Record Keeping:

  • To maintain records of your relationship with us
  • To comply with legal and regulatory obligations
  • To handle complaints and legal claims

Marketing (with consent):

  • To inform you about campaigns, events, and volunteering opportunities

You can withdraw your consent or opt out of marketing communications at any time by contacting us at enquiries@ddt-deaf.org.uk or using the unsubscribe link in our emails.


6. Sharing Your Personal Data

We respect your privacy and will not sell, rent, or trade your personal data.

We may share your personal data with:

Service Providers: Trusted third parties who provide services on our behalf, such as:

  • Payment processors (e.g., PayPal, Stripe)
  • Email and mailing service providers
  • Website hosting providers
  • IT support and cloud storage providers
  • Fundraising platforms

These providers are contractually bound to keep your data secure and use it only for the purposes we specify.

Legal Requirements: We may disclose your data if required by law, to enforce our terms and conditions, or to protect the rights, property, or safety of Doncaster Deaf Trust, our service users, or others.

With Your Consent: We may share your data with third parties when you have given explicit consent (e.g., sharing photographs on our website or social media).


7. International Data Transfers

Some of our service providers may process data outside the United Kingdom. When we transfer your data internationally, we ensure it is protected by:

  • Using providers in countries with adequate data protection laws (as determined by the UK government)
  • Implementing appropriate safeguards such as Standard Contractual Clauses
  • Ensuring the transfer is necessary for the performance of our contract with you

8. Data Retention

We keep your personal data only for as long as necessary for the purposes set out in this policy and to meet our legal obligations.

Typical retention periods:

  • Newsletter subscribers: Until you unsubscribe, then up to 2 years
  • Donation records: 7 years (for tax and accounting purposes)
  • General enquiries: 2 years from last contact
  • Volunteer records: 6 years after end of volunteering
  • Website analytics: Up to 26 months
  • CCTV footage (if applicable): Up to 30 days

After these periods, we will securely delete or anonymise your data unless we are legally required to keep it longer.


9. Your Data Protection Rights

Under UK GDPR, you have the following rights:

Right of Access: You can request a copy of the personal data we hold about you.

Right to Rectification: You can ask us to correct inaccurate or incomplete data.

Right to Erasure: You can request deletion of your data in certain circumstances.

Right to Restrict Processing: You can ask us to limit how we use your data.

Right to Data Portability: You can request your data in a portable format.

Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making: You have rights regarding automated decision-making and profiling (though we do not currently use these processes).

Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at:

  • Email: enquiries@ddt-deaf.org.uk
  • Post: Data Protection, Doncaster Deaf Trust, Leger Way, Doncaster, South Yorkshire, DN2 6AY

We will respond to your request within one month.


10. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:

  • Secure servers and encrypted data transmission (SSL/TLS)
  • Regular security updates and patches
  • Access controls and password protection
  • Staff training on data protection
  • Regular security audits and monitoring

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you and the ICO of any data breaches where legally required.


11. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve your experience and analyse website usage.

What are cookies? Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you use the site.

Types of cookies we use:

Essential Cookies: Required for the website to function properly (e.g., security, network management). These cannot be disabled.

Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous information. We use these to improve our website.

Functional Cookies: Remember your preferences and choices to provide enhanced features.

Marketing Cookies (with consent): Track your browsing activity to measure communications effectiveness.

Managing cookies: You can control and manage cookies through your browser settings. Most browsers allow you to:

  • View and delete cookies
  • Block third-party cookies
  • Block all cookies
  • Delete all cookies when you close your browser

Please note that blocking certain cookies may impact website functionality.

For more information about cookies and how to manage them, visit: www.allaboutcookies.org


Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external sites. We encourage you to read the privacy policies of any websites you visit.


13. Children’s Privacy

We are committed to protecting children’s privacy. If we knowingly collect personal data from children under 13, we obtain verifiable parental consent. Parents and guardians have the right to review, delete, or refuse further collection of their child’s information.


14. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify individuals with whom we are in regular contact via email or through a prominent notice on our website.

The “Last updated” date at the top of this policy indicates when it was last revised.


15. Questions and Complaints

If you have questions about this privacy policy or how we handle your personal data, please contact us:

Email: enquiries@ddt-deaf.org.uk
Post: Data Protection, Doncaster Deaf Trust, Leger Way, Doncaster, South Yorkshire, DN2 6AY
Phone: 01302 386700

Right to Complain: You have the right to lodge a complaint with the UK’s supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

ICO Helpline: 0303 123 1113
Website: www.ico.org.uk