Privacy Policy

The Yellow Wood Project CIC
Effective date: March 2026
Last updated: March 2026

 

The Yellow Wood Project CIC (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

1. Who We Are

The Yellow Wood Project CIC is a Community Interest Company registered in England and Wales.

Registered office: 82 James Carter Road, Unit A, Mildenhall, Suffolk, IP28 7DE, UK
Company number: 16660504
Contact email: hello@theyellowwoodproject.com

For the purposes of data protection law, we are the “data controller” of the personal data we collect.

 

2. What Information We Collect

We may collect and process the following types of personal data:

 

a) Contact Information

  • Name
  • Email address
  • Organisation (if provided)
  • Phone number (if provided)

 

b) Communication Data

  • Emails or messages you send to us
  • Responses to surveys or forms
  • Newsletter subscription preferences

 

c) Donation Information

  • If you donate via a third-party platform (e.g. GoFundMe), we may receive:
  • Your name
  • Contact details
  • Donation amount

 

Payment details are processed by the payment provider and are not stored by us.

 

d) Website Data

  • IP address
  • Browser type
  • Pages visited
  • Basic analytics data

 

3. How We Use Your Information

We use personal data to:

  • Respond to enquiries
  • Send newsletters and updates (where you have opted in)
  • Administer donations
  • Improve our website and communications
  • Comply with legal and regulatory obligations

 

We will never sell your personal data.

 

4. Lawful Bases for Processing

We process personal data under the following lawful bases:

  • Consent – for newsletter subscriptions and optional communications
  • Legitimate interests – to respond to enquiries and operate our CIC effectively
  • Legal obligation – where required for accounting, reporting, or regulatory compliance
  • Contract – where processing is necessary in relation to a donation or service agreement

 

You may withdraw consent at any time.

 

5. Data Sharing

We may share your data with:

  • Email newsletter providers (e.g. Mailchimp)
  • Website hosting providers
  • Payment processors
  • Professional advisers (accountants, legal advisers)

We ensure appropriate safeguards are in place where third parties process data on our behalf.

We do not sell or rent personal data to third parties.

 

6. International Transfers

Some service providers (such as email or analytics platforms) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy regulations.

 

7. Data Retention

We retain personal data only as long as necessary:

Newsletter subscribers: until you unsubscribe

Donation records: as required for accounting and HMRC purposes

General enquiries: up to 24 months unless ongoing correspondence requires longer retention

 

8. Your Rights

Under UK data protection law, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure of your data
  • Restrict or object to processing
  • Withdraw consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

 

ICO website: https://ico.org.uk

 

To exercise your rights, contact: lizzie@theyellowwoodproject.com

 

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure.

 

10. Cookies

Our website may use cookies or analytics tools to improve functionality and understand visitor behaviour. You can manage cookie preferences via your browser settings.

 

11. Changes to This Policy

We may update this privacy policy from time to time. The latest version will always be available on our website.