Privacy notice

Template: fill in every highlighted blank before donors use this site. This is a starting point, not legal advice.

Who is responsible

Brookside Orchard Trust, registered charity no. 1187342, Brook Lane, Ottery Hythe QS5 7DX, decides how your information is used (the controller). Page Lemon hosts this site and the members' area, and the sign-in, for us as our processor. Stripe takes monthly and one-off payments under its own terms.

What we collect

• Your email address, to sign you in, to send your receipts and to answer you.
• Your level (Friend, Seed, Grow or Orchard) and when it started or stopped. Payments go through Stripe; we never see your payment details.
• Any note you send the team from the app: the topic you chose and your words, and the team's status and reply.
• Volunteer Saturdays you book (the date, the job, how many guests, tools and your note) and the work days staff stamp when they scan your code at the gate.
• Your first name, so the team knows who you are when they scan your code.
• Sign-in records (when and from which browser), to keep your account safe.

We do not collect your postal address, your tax details or your Gift Aid declaration through this site. Gift Aid declarations are made on our paper form; ask us for one.

Why

To run your monthly gift and send you the impact updates ([legal basis, for example: our contract with you, and our legitimate interest in running the orchard]). Gift Aid records, where you ask for them, are kept because the tax rules require it.

Who sees it

You see only your own notes, bookings, work days and level. [Who reads notes and bookings, for example: the director and the volunteer lead] can read them in the Dashboard. Staff who scan your code at the gate see your first name and your work-day count, never your email. Impact updates are published to every signed-in donor and do not name donors.

How long we keep it

[For example: messages for 24 months after they are read; payment records for 6 years, as UK tax rules require]. When you leave, your messages are deleted, except records we must keep by law.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, or object. Write to [privacy email]. You can also complain to [your data protection authority, for example the ICO in the UK].

Last updated [date].