The Riverhorse Trust (“we”, “our”, “us”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, and store personal data when you visit our website, contact us, or apply for funding.
Last updated: 3 September 2025
1. Information we collect
We may collect and process the following information:
- Information you provide directly:
- Contact details (such as name, email address, phone number, postal address) when you contact us or apply for a grant.
- Information contained in funding applications, including details about your organisation, trustees, staff, and finances.
- Information we collect automatically:
- Basic technical information such as IP address, browser type, and pages visited (via cookies or analytics tools, if used — see Section 7).
2. How we use your information
We use personal data to:
- Process and assess grant applications.
- Communicate with applicants and funded organisations.
- Maintain records of grants awarded.
- Respond to enquiries.
- Improve the Website and ensure it functions effectively.
- Comply with legal and regulatory requirements.
We will only use your personal information for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose.
3. Legal basis for processing
We process personal data on one or more of the following legal bases:
- Consent: where you have given consent for us to process your information.
- Contract: where processing is necessary to consider and administer a grant application.
- Legal obligation: where we must comply with legal or regulatory requirements.
- Legitimate interests: where processing is necessary for our charitable purposes, provided this does not override your rights.
4. Sharing your information
We do not sell or rent personal data. We may share your information with:
- Trustees, advisers, or reviewers involved in assessing grant applications.
- Professional service providers (e.g. accountants, auditors, IT providers) who help us operate effectively.
- Regulators, government bodies, or law enforcement if required by law.
All third parties are required to respect your privacy and only process your data in accordance with our instructions.
5. Data retention
We will keep personal data only for as long as is necessary to fulfil the purposes we collected it for, including any legal or reporting requirements. For example:
- Grant application data: normally retained for up to 7 years after the end of a grant, in line with legal obligations.
- Enquiry information: normally retained for up to 2 years after the enquiry is resolved.
After these periods, data will be securely deleted or anonymised.
6. Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal data (in certain circumstances).
- Object to or restrict processing of your data.
- Withdraw consent, where consent is the basis for processing.
- Complain to the Information Commissioner’s Office (ICO) if you believe your rights have been infringed (www.ico.org.uk).
To exercise your rights, please contact us (see Section 9).
7. Cookies and analytics
Our Website may use cookies or similar technologies to improve user experience and analyse website traffic. You can adjust your browser settings to refuse cookies if you prefer.
If we use third-party analytics tools (such as Google Analytics), they may collect anonymised usage information to help us understand how the Website is used.
8. Security
We take reasonable measures to protect your personal information from loss, misuse, or unauthorised access. However, no system is completely secure, and we cannot guarantee the absolute security of your data transmitted via the internet.
9. Contact us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us.