We are The Percy Bilton Charity registered with the Charity Commission (charity number 1094720 and company number 04529052). We're a grant making trust that provides funding to assist:
We collect personal data relating to local authority or NHS Trust personnel applying for grants and personal data relating to an individual who is the beneficiary of a grant application. The kinds of personal data we collect includes
Our purposes for processing personal data are to:
The legal basis we rely on for processing personal data about beneficiaries is their consent under Article 6(1)(a) and Article 9(2)(a) (for processing special categories of personal data) of the General Data Protection Regulation (GDPR). We also process such personal data under Article 6(1)(c) of the GDPR to help us meet our legal obligation to maintain financial accounting records.
We process personal data about applicants for the purpose of our legitimate interests and those of the applicant in seeking to help individuals in need, as per Article 6(1)(f) of the GDPR.
We share the name, address and contact number of a beneficiary with a third party who supports us in delivering items approved in a grant application (such as a bed or washing machine). The third party is prohibited from using this information for any other purpose.
You have a number of rights that apply depending on our reason for processing your personal data. Please see https://ico.org.uk/your-data-matters/ for full information about your data protection rights
Please email us at firstname.lastname@example.org if you want exercise your rights and will get in touch to help
You also have the right to lodge a complaint with the UK data protection regulator but we hope you will give us the opportunity to address things first. Details of the regulator can be found at https://www.ico.org.uk
We have adopted a range of technical and organisational measures to help safeguard your personal information and keep it secure. We use HTTPS on our website to help protect information submitted via our online contact forms. Paper files are held in locked environments. Those who handle personal information have received awareness training on the importance of good information handling and of the need to protect personal information.
Personal information is held here in the UK and servers are backed up in the Netherlands.
Like many organisations we use third parties to provide our email and website services and to help us deliver items to beneficiaries. Minimum data is held by these organisations on our behalf.
We regularly delete personal data when it is no longer needed to support the charity and we can't justify keeping it. We keep emails for a period of 3 calendar months. We keep approved applications for 15 months (until the completion of the audit) and unsuccessful applications three months after which they are deleted.
If we need to change this Notice because of a change in law or the way we handle personal data we will post updates here and do our best to let you know.