Privacy Policy

1. Who We Are

Devanhaar is a registered charity in England and Wales and acts as the data controller responsible for your personal data under UK GDPR.

• Registered Charity Number: 1203393
• Registered address: 3 Waterside Drive, Langley, United Kingdom
• Website: www.devanhaar.com

2. What Information We Collect

We collect personal data including contact details, safeguarding information, volunteer and DBS data, donation records, complaints data, photographs (with consent), and website usage data.

3. How We Use Your Information

We use data to deliver programmes, manage volunteers, process donations, safeguard participants, and meet legal obligations.

4. Lawful Basis for Processing

We rely on consent, contract, legal obligation, legitimate interests, and vital interests. Legitimate interests are balanced against individual rights.

5. Safeguarding and Special Category Data

We process special category data where necessary to safeguard individuals, handled securely and shared only when required.

6. Sharing Your Data

We do not sell data. Data may be shared with service providers, regulators, safeguarding authorities, and law enforcement where required.

7. International Data Transfers

Where data is processed outside the UK, appropriate safeguards such as adequacy decisions or standard contractual clauses are applied.

8. Data Storage and Security

We implement role-based access, multi-factor authentication, secure systems, restricted access, regular reviews, and breach procedures aligned to the 72-hour rule.

9. Data Retention

Data is retained only as long as necessary, including 6 years for financial records, 7 years for incidents, and safeguarding records per statutory guidance.

10. Your Rights

You have rights to access, correct, delete, restrict, and object to processing, and to withdraw consent.

11. Contact Us

Guvinder.sohal@devanhaar.com
Data Protection Lead, Devanhaar

12. Cookies

We use cookies to ensure functionality and improve user experience. Preferences can be managed via the cookie banner.

13. Automated Decision-Making

We do not carry out automated decision-making or profiling.

14. Complaints

You can complain to the ICO: www.ico.org.uk | 0303 123 1113

15. Changes to This Policy

We may update this policy periodically.

Policy Owner: Governance Lead · Review Frequency: Annual