1. Who We Are

Website: www.thesussexrrc.org.uk
Organisation name: The Sussex Reptile Rescue Centre CIO
Email: info@thesussexrrc.org.uk
Address (optional but recommended): 23 A’Beckets Avenue, Aldwick Bognor Regis PO214LX

We are the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the EU GDPR.

2. What Personal Data We Collect

We may collect and process the following personal data:

a) Information you provide to us

• Name

• Email address

• Phone number (if provided)

• Postal address (if relevant)

• Donation details 

• Messages sent via contact forms or email

b) Information collected automatically

• IP address

• Browser type and version

• Device information

• Pages visited and time spent on the site

• Cookies and similar technologies

c) Payment information

Payments are processed securely by third-party payment providers (e.g. Stripe, PayPal).
We do not store or have access to your full card details.

3. How We Use Your Personal Data

We use your data to:

• Respond to enquiries

• Process donations or purchases

• Send updates related to your donation or enquiry

• Improve our website and services

• Comply with legal and regulatory obligations

• Prevent fraud and misuse

4. Lawful Bases for Processing

Under GDPR, we rely on the following lawful bases:

• Consent – when you opt in to communications or cookies

• Contract – to process donations or provide requested services

• Legal obligation – for accounting, tax, or regulatory purposes

• Legitimate interests – to operate and improve our website (balanced against your rights)

5. Cookies

We use cookies to:

• Ensure the website functions correctly

• Analyse website traffic and performance

• Remember user preferences

You can control or disable cookies through your browser settings.
Where required, we display a cookie consent banner.

6. How We Share Your Data

We do not sell your personal data.

We may share data with trusted third parties such as:

• Website hosting providers

• Payment processors

• Email communication services

• Analytics providers (e.g. Google Analytics)

All third parties are required to comply with GDPR and protect your data.

7. International Data Transfers

Some service providers may process data outside the UK or EU.
When this happens, we ensure appropriate safeguards are in place, such as:

• UK International Data Transfer Agreements

• EU Standard Contractual Clauses

8. How Long We Keep Your Data

We retain personal data only for as long as necessary:

• Contact enquiries: up to 6 days

• Donation records: 6 years for accounting]

• Marketing data: until consent is withdrawn

9. Your Data Protection Rights

Under GDPR, you have the right to:

• Access your personal data

• Correct inaccurate data

• Request erasure (“right to be forgotten”)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

To exercise your rights, contact us at: info@thesussexrrc.org.uk

10. Complaints

If you believe your data has been mishandled, you have the right to complain to:

UK Information Commissioner’s Office (ICO)
Website: https://ico.org.uk

If you are in the EU, you may also contact your local supervisory authority.

11. Children’s Data

Our website is not intended for children under 13, and we do not knowingly collect personal data from children.

12. Changes to This Privacy Policy

We may update this policy from time to time.
Any changes will be posted on this page with an updated revision date.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact:

Email: info@thesussexrrc.org.uk
Organisation: The Sussex Reptile Rescue Centre