Privacy Policy

Last updated: 20 August 2026

This website is operated by the organisation whose name and logo appear above (the organisation). The organisation is the data controller for personal information submitted through this site. Tengo Software supplies and hosts the tengoConnect service as a data processor acting on the organisation’s instructions.

Information we collect

Depending on how you use the site, the organisation may collect your name, contact details, delivery or collection address, items purchased or requested, donation details, membership or ticket information, transaction references, communications, and technical information needed to operate and secure the service. Payment card details are entered into the selected payment provider’s secure service and are not stored by tengoConnect.

Why information is used

The organisation uses information to process donations and payments, supply purchases, administer tickets and memberships, arrange collections, respond to enquiries, prevent fraud, keep accounting and regulatory records, and operate and improve its services. The lawful basis will normally be performance of a contract or steps requested before a contract, compliance with legal obligations, the organisation’s legitimate interests, or consent where the law requires it.

Who information is shared with

Information may be shared with Tengo Software, the payment provider selected at checkout, delivery or collection providers, professional advisers, and public authorities where required by law. Each receives only the information needed for its role. The organisation does not sell personal information.

International transfers

Some payment or technology providers may process information outside the United Kingdom. Where this happens, the organisation and its providers must use an appropriate legal safeguard for the transfer.

How long information is kept

Information is kept only for as long as needed for the purposes described above, including contractual, accounting, tax, Gift Aid, fraud-prevention and other legal requirements. Retention periods vary by record type. You can ask the organisation for details of the period that applies to your information.

Your rights

Subject to the circumstances and applicable law, you may ask for access to your information, correction, erasure, restriction, portability, or object to certain uses. Where processing relies on consent, you may withdraw that consent without affecting earlier processing. Contact the organisation using its usual published contact details to exercise a right.

Complaints

Please contact the organisation first so it can investigate. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Security and changes

Reasonable technical and organisational measures are used to protect personal information. No internet service can guarantee absolute security. This policy may be updated when the service or legal requirements change; the current version and its date will remain available on this page.