- Organisation: The Yellow Wood Project CIC (Reg. No. 16660504)
- Registered address: 82 James Carter Road, Unit A, Mildenhall, Suffolk, IP28 7DE
- Contact email: hello@theyellowwoodproject.com
- Effective date: March 2026
- Last updated: March 2026
- Data controller: The Yellow Wood Project CIC
Our commitment: The Yellow Wood Project CIC is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
The Yellow Wood Project CIC is a Community Interest Company registered in England and Wales (Company No. 16660504). For the purposes of data protection law, we are the ‘data controller’ of the personal data we collect.
Contact: hello@theyellowwoodproject.com
2. What Information We Collect
Contact Information
- Name
- Email address
- Organisation (if provided)
- Phone number (if provided)
Communication Data
- Emails or messages you send to us
- Responses to surveys or forms
- Newsletter subscription preferences
Donation Information
If you donate via a third-party platform (such as GoFundMe), we may receive your name, contact details, and donation amount. Payment details are processed by the payment provider and are not stored by us.
Website Data
- IP address
- Browser type
- Pages visited
- Basic analytics data
3. How We Use Your Information
We use personal data to:
- Respond to enquiries
- Send newsletters and updates (where you have opted in)
- Administer donations
- Improve our website and communications
- Comply with legal and regulatory obligations
Promise: We will never sell your personal data.
4. Lawful Bases for Processing
| Lawful basis | When we use it |
|---|---|
| Consent | Newsletter subscriptions and optional communications. You may withdraw consent at any time. |
| Legitimate interests | To respond to enquiries and operate the CIC effectively. |
| Legal obligation | Where required for accounting, reporting, or regulatory compliance. |
| Contract | Where processing is necessary in relation to a donation or service agreement. |
5. Data Sharing
We may share your data with trusted service providers, including:
- Email newsletter providers (e.g. Mailchimp)
- Website hosting providers
- Payment processors
- Professional advisers (accountants, legal advisers)
We ensure appropriate safeguards are in place where third parties process data on our behalf. We do not sell or rent personal data to third parties.
6. International Transfers
Some service providers (such as email or analytics platforms) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy regulations.
7. Data Retention
| Data type | Retention period |
|---|---|
| Newsletter subscribers | Until you unsubscribe |
| Donation records | As required for accounting and HMRC purposes |
| General enquiries | Up to 24 months unless ongoing correspondence requires longer retention |
8. Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data
- Restrict or object to processing
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk
To exercise your rights, contact: lizzie@theyellowwoodproject.com
9. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure.
10. Cookies
Our website may use cookies or analytics tools to improve functionality and understand visitor behaviour. You can manage cookie preferences via your browser settings.
11. Changes to This Policy
We may update this privacy policy from time to time. The latest version will always be available on our website.