Privacy Statement

Lily of the Valleys Charity is committed to protecting and respecting your privacy. This Privacy Statement explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Lily of the Valleys Charity is a charitable organisation dedicated to supporting individuals, families, and communities in need.

For the purposes of data protection law, Lily of the Valleys Charity is the “Data Controller” of the personal information we hold.

2. What Information We Collect

We may collect and process the following types of personal data:

• Name, address, email address and telephone number
• Date of birth
• Emergency contact details
• Donation records and Gift Aid declarations
• Information provided through application, referral or enquiry forms
• Volunteer and employment-related information
• Any other information you choose to provide to us

3. How We Use Your Information

We use your personal data to:

• Provide and manage our charitable services
• Communicate with you about our activities, services and events
• Process donations and Gift Aid claims
• Manage volunteers and staff
• Comply with our legal and regulatory obligations
• Maintain accurate records

4. Lawful Basis for Processing

We process your data under one or more of the following lawful bases:

• Your consent
• The performance of a contract or agreement
• Compliance with legal obligations
• Our legitimate interests in operating and improving our charitable services

5. How We Store and Protect Your Information

We store your personal data securely in electronic and/or paper-based systems with appropriate technical and organisational measures in place to prevent unauthorised access, loss, or misuse.

Access to your information is limited to authorised personnel only.

6. Sharing Your Information

We will not sell or share your personal information with third parties for marketing purposes. We may share information with trusted partners or service providers where necessary to deliver our services or where required by law.

7. How Long We Keep Your Information

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

8. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data (where applicable)
• Object to or restrict how your data is processed
• Withdraw your consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

9. How to Contact Us

If you have any questions about this Privacy Statement or how we handle your personal information, please contact:

10. Changes to This Privacy Statement

We may update this Privacy Statement from time to time. The most recent version will always be available upon request or on our website.

Last updated: 19/01/26