Your information
Privacy notice
How we look after your personal information, why we hold it, and the rights you have over it.
Who we are
Doncaster Refurnish is a registered charity (No. 1118160) and social enterprise. Our registered office is Unit 15 Hutton Business Park, Hangthwaite Road, Doncaster DN6 7BD.
For the personal information described in this notice, Doncaster Refurnish is the “data controller”, meaning we decide how and why it is used. You can reach us at info@refurnish.co.uk or 01302 337 606, or write to us at the address above.
This notice explains what we collect when you use our website, buy from us, ask us to look out for an item, donate, volunteer or get in touch, and how we look after it.
The information we collect
- Contact details: your name, email address, phone number and, where relevant, a delivery or collection address.
- Account details: if you create an account, your sign-in email and a securely hashed password (we never see or store your password in readable form).
- Order and item-request details: what you bought or asked us to look out for, your preferences, and delivery or collection arrangements.
- Correspondence: messages you send us and our replies, so we can help and keep a record of what was agreed.
- Technical information: basic data your browser sends, and the strictly necessary cookies needed to keep you signed in and the site secure. See our cookie policy for detail.
- Visit counts: we use Cloudflare Web Analytics to see how many people visit each page. It sets no cookies and collects no personal data to track you.
How we use your information, and our lawful bases
Under UK GDPR we must have a lawful basis for using your information. We rely on the following.
- To fulfil an order or item request, arrange collection or delivery, and send you confirmations and updates, because it is necessary to perform our contract with you.
- To answer enquiries, run and improve the charity, and keep our site and records secure, because it is in our legitimate interests to operate as a well-run organisation, balanced against your rights.
- To send you marketing or updates you have asked for, on the basis of your consent, which you can withdraw at any time.
- To meet our legal and regulatory duties, such as keeping accounting and Gift Aid records, because we are under a legal obligation to do so.
Keeping your information secure
We take appropriate technical and organisational measures to protect your information. Traffic to and from the site is encrypted, passwords are stored only as secure hashes, and access to personal information is limited to those who need it.
We never store card details on our systems: card payments are handled entirely by our payment provider through their own secure hosted fields (PCI DSS SAQ-A).
How long we keep it
We keep your information only for as long as we need it. Order and financial records are kept for up to six years to meet accounting and tax requirements. General enquiries are kept for a shorter period. When information is no longer needed, we delete it or make it anonymous.
Your rights
Under UK GDPR you have the right to access your information, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and, where we rely on consent, to withdraw that consent at any time. To exercise any of these rights, please contact us; see our data protection page for how requests are handled.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first.
Changes to this notice
We may update this notice from time to time to reflect changes in how we work or in the law. When we do, we'll revise the date shown on this page, and we'll tell you directly if the change is significant.
Questions about any of this?
We're a local charity, not a call centre. If anything on this page is unclear, ask us and we'll explain it in plain terms.