Legal
Privacy notice
How we collect, use and protect your personal information.
Last reviewed: October 2026
Who we are
The Gaitway Organisation (Company Limited by Guarantee, established 2019) is the “data controller” for the personal information described in this notice. We are registered with the Charity Commission for Northern Ireland (NIC107729). If you have any questions about this notice or how we use your information, contact us at info@gaitway.org.uk.
The information we collect
Apart from the technical data described at the end of this section, we only collect information you choose to give us.
- When you email or phone us, we receive your name, your contact details and what you tell us in your message.
- When our “other ways to give” form on the Donate page is switched on, it collects your first and last name, email address and message. The form doesn't take payment.
- If you give by card through our JustGiving page, JustGiving collects your details, and any Gift Aid declaration you make there, under its own privacy notice.
- If you make a Gift Aid declaration to us directly, for example on paper, we keep your name, home address and postcode, and the declaration.
When you visit the site, our website hosting provider processes limited technical data, such as your IP address, to deliver the pages and keep them secure. The videos on our site are stored by Cloudflare, which processes the same kind of data when one plays. When our forms are switched on, Cloudflare Turnstile checks them for spam. The directions button on our Contact page opens Google Maps, where Google's own privacy policy applies.
How we use your information, and our lawful basis
- To respond to your enquiry and provide the support you ask for. Our lawful basis is our legitimate interests (helping families who contact us) and, where relevant, taking steps at your request.
- To claim Gift Aid on a donation you have declared. Our lawful basis is your consent (for the Gift Aid declaration) and our legal obligation to keep Gift Aid records for HMRC.
Who we share it with
We do not sell your information. We share it only with service providers who help us run the charity: our website hosting provider; Cloudflare, which stores our videos and checks our forms for spam; and Resend, which will deliver the messages from our forms to our inbox once the forms are switched on. We share Gift Aid details with HMRC where you have asked us to claim Gift Aid. These providers act on our instructions and must keep your data secure.
Cloudflare and Resend (run by Plus Five Five, Inc.) process some data in the United States. Both companies' data processing terms cover these transfers with standard contractual clauses and the Information Commissioner's UK Addendum, and Cloudflare is also certified under the UK extension to the EU–US Data Privacy Framework.
How long we keep it
We keep enquiry information only for as long as we need it to help you and for our records, and then delete it. Gift Aid records are kept for at least six years after the end of the accounting period they relate to, as HMRC requires.
Your rights
Under UK data protection law you have the right to ask for a copy of your information, to have it corrected or deleted, to object to or restrict how we use it, and to data portability. To exercise any of these rights, contact us using the details above.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk or 0303 123 1113.
Cookies
We keep cookies to a minimum and don't use analytics, advertising or cross-site tracking cookies. When our forms are switched on, the spam check (Cloudflare Turnstile) may store data it needs to work. If you log in to edit the website, WordPress sets cookies to keep you logged in. If we add analytics in future, we will update this notice and ask for your consent first.
Changes to this notice
We may update this notice from time to time. The “last reviewed” date above shows when we last checked it.
