Privacy and Data Protection
Statement
2025
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is The D’Oyly Carte Charitable Trust, Registered Address: 6 Trull Farm Buildings, Tetbury, Gloucestershire, GL8 8SQ. The Data Processor is The Trust Partnership, registered at the same address.
This privacy and data protection statement sets out how The D’Oyly Carte Charitable Trust uses and protects any personal information provided to us by applicants and grantees. Where information is provided during the application process by which individuals can be identified, The Trust will only use that information in accordance with this privacy statement.
What We Collect and Why
We only collect the minimum amount of personal data necessary to carry out the aims of The Trust or to comply with our legal responsibilities. This includes the name, email address, and phone number of the main contact for the applicant organisation, and bank account details for payment verification purposes.
We do not collect or retain special category (sensitive) personal data.
Lawful Basis for Processing
Our lawful basis for processing personal data is our legitimate interest in delivering our charitable purpose, including assessing applications, managing and monitoring grants, and preventing fraud. Where legally required, we may also process data for compliance purposes.
Use of Personal Information
Personal information will only be used for the purposes for which it was provided, including the assessment of applications, grant administration and monitoring, reporting, and internal analysis. It may also be shared with other funders if requested, to support due diligence or monitoring.
Bank Details
Grantees are asked to provide official bank details (e.g. on headed bank stationery or statements) to verify the organisation’s identity and prevent fraud. This information is stored securely and retained for no longer than 7 years after completion of the grant, in accordance with our GDPR, Document Retention and Destruction Policy.
Retention of Data
Personal data collected through grant applications will be retained for up to 7 years after the completion of the grant period, after which it will be securely destroyed. This period is consistent with financial audit and regulatory best practice.
Your Rights
Under UK GDPR, individuals have the right to request access to their personal data, request corrections, or request erasure where appropriate. Requests should be made in writing to the email or postal address below and addressed to Johanna Tompsett, Clerk to Trustees.
Cookies and Analytics
Our website does not use cookies or analytics tools, nor do we share data with third parties for marketing purposes.
External Links
Where our website contains links to other websites, we do not have control over the protection and privacy practices of those sites. This privacy statement does not govern external websites.
Review
We keep our privacy statement under regular review. This version was last updated in July 2025.
Contact
Telephone: 0203 637 3003Email: [email protected]