Privacy policy

This is a working draft, still to complete and have legally checked before go-live.

WANDSWORTH WORK AND PLAY (“the Scrapstore”, charity number [number]) is the data controller for the personal information we hold. We are registered with the Information Commissioner’s Office [registration number].

What we collect and why. When you join, volunteer, book, check in or donate we collect what we need to run those things: your name, contact details, date of birth (used only to verify you at our check-in desk), membership and volunteering records, visit records, and your communication choices. Card payments are handled by Stripe; we never see or store your card details.

What we do with it. We use your information to manage your membership or volunteering, take payments, send you the communications you have chosen, and understand how the charity is doing through anonymous, aggregated reporting. We do not sell or share your information for marketing.

Who helps us. Trusted service providers process data on our behalf under written agreements: our database and hosting providers, our email service and Stripe. Our website analytics are cookieless and collect no personal information.

How long we keep it. While you are a member or volunteer and for [retention period] after you leave. Guest check-in records are deleted automatically after twelve months unless you opted into marketing. Payment records are kept as accounting law requires.

Your rights. You can ask to see, correct or delete your information, object to processing, or withdraw consent at any time by contacting info@workandplayscrapstore.org.uk. You can complain to the Information Commissioner at ico.org.uk.