Privacy
This explains what personal information Benzone collects through this website, why, how long we keep it, and what you can ask us to do with it.
Last updated 5 September 2026.
Who we are
Benzone Development Foundation CIC is the data controller for the information described here. We are a community interest company limited by guarantee registered in England and Wales, company number 15874908, at University of South Wales, F.A.O Startup Stiwdio, Trbio15, Treforest, Pontypridd, CF37 1DL.
For anything about your personal information, email info@benzone.org.uk. We are a small organisation and are not required to appoint a Data Protection Officer, so your message goes to the people who run Benzone.
What we collect, and why
We collect personal information in three situations: when you contact us through a form, when you donate, and automatically as you use the site.
When you contact us
The site has 6 forms. Each asks only what it needs to, so what we hold depends on which one you used.
| Form | What we ask for | Why |
|---|---|---|
| Programme registration | Your name, your email address, your phone number, the programme you are interested in, the child's first name, the child's age range, your message | To reply about a place on a programme, and to run the programme if a place is taken up. |
| School / organisation | Your name, your email address, your phone number, your organisation, your role, the size of the group, the delivery format you are after, your message | To respond to your enquiry and discuss delivery for your setting. |
| Partnership | Your name, your email address, your phone number, your organisation, your message | To respond and explore working together. |
| Facilitator expression of interest | Your name, your email address, your phone number, the skill you would like to share, your availability, your message | To respond about facilitating sessions, and to begin recruitment checks if it goes further. |
| Volunteer expression of interest | Your name, your email address, your phone number, your availability, your message | To respond about volunteering, and to begin recruitment checks if it goes further. |
| General contact | Your name, your email address, your phone number, your message | To answer your question. |
Our lawful basis for all of these is legitimate interests. You contacted us, and replying is the reason you did. Where an enquiry becomes a place on a programme or a volunteering role, we then rely on contract to deliver it. We do not use any of this to send marketing, because we do not send marketing.
When you donate
Payments are handled by Stripe. Your card details are entered on Stripe's own pages and never reach our servers, so we neither see nor store them. Stripe tells us the amount, the date, and the name and email address you gave, and we keep that as our record of the donation.
Our lawful basis is contract for taking the payment, and legal obligation for keeping financial records afterwards.
Automatically, as you use the site
Our web server records the address of each request, including your IP address, so we can keep the site working and spot abuse. Forms are rate-limited using the same information. Our lawful basis is legitimate interests in keeping the site secure and available.
We do not use analytics, advertising or tracking cookies. See our cookies page for what is actually stored in your browser.
Children and young people
No form on this website is completed by a child. Programme registrations are made by a parent or carer, who is the contact we hold and reply to.
On that form we ask for the child's first name and age range, and nothing else about them. We do not ask for a surname, date of birth, address, school, photograph, or any health or additional-needs information through this website. Where that information is genuinely needed to deliver a programme safely, it is collected separately, in person, under our safeguarding procedures. See Keeping children and young people safe.
Who else sees your information
We do not sell personal information, and we do not share it for advertising. We use a small number of suppliers who process it on our behalf and only on our instructions:
- Stripe takes card payments and holds the payment record.
- Our hosting provider stores the website and its database.
- Our email provider delivers the notification we get when you submit a form, and the acknowledgement you get back.
We would also disclose information where the law requires it, or where there is a safeguarding concern about a child or vulnerable adult. Safeguarding is the one situation where we may share information without asking you first.
Information is held in the UK or the European Economic Area wherever we can arrange it. Stripe and Google both operate internationally, and transfers outside the UK are covered by the safeguards UK data protection law requires.
How long we keep it
- Enquiries are kept for 2 years from your last contact with us, then deleted. If your enquiry becomes a programme, a partnership or a role, the records that follow are kept under the policy covering that work.
- Donation records are kept for 6 years, which is the period we are expected to keep financial records for.
- Server logs are kept for 12 months.
Your rights
Under UK data protection law you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it, where we have no good reason to keep it;
- stop or limit how we use it;
- send it to you or another organisation in a portable format;
- stop relying on legitimate interests, by objecting to what we are doing.
Email info@benzone.org.uk and we will respond within one month. There is no charge. We make no decisions about anyone by automated means, and we do not profile people.
If you are unhappy
Please tell us first, at info@benzone.org.uk. Most things are quicker to put right directly.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at any time.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
Helpline 0303 123 1113 ·
ico.org.uk/make-a-complaint
Changes to this policy
If we change how we use personal information we will update this page and the date at the top of it. Where a change is significant, we will say so rather than rely on you noticing.