CNTW Charity Website Privacy Policy
1. Who we are
CNTW Charity is the official charity of Cumbria, Northumberland, Tyne and Wear NHS Foundation Trust. This privacy policy explains how we collect, use and protect your personal information when you use our website, purchase items from our online shop, or sign up to receive updates from us.
2. What personal data we collect
- Online shop: name, address, email, phone number. No payment card details are stored; PayPal Business processes all payments.
- Newsletter: name (optional), email address.
- Google Analytics: anonymised IP address, device type, pages visited, time on site, referral source. Analytics cookies only run if accepted.
3. How your data is collected
Data is collected when you complete checkout, sign up for newsletters, accept analytics cookies, or contact us.
4. How your data is used
- Online shop: process orders, arrange delivery, contact you about your purchase.
- Newsletter: send updates, manage preferences.
- Analytics: improve website performance and content.
5. Who has access to your data
- Online shop: Frank Design Ltd, CNTW Charity Team, NTW Solutions Cashiers Team.
- Newsletter: Tiger Systems and CNTW Charity Team.
- Analytics: Google (with anonymised IP).
6. Cookies and Google Analytics
- Essential cookies: required for website functionality.
- Analytics cookies: optional; used only with consent. Users can change cookie settings or opt out via Google’s opt-out tool.
7. How your data is stored and protected
Data stored on UK-based servers with AES-256 encryption, access controls, and secure systems.
8. How long we keep your data
- Online shop: 12 months, then deleted.
- Newsletter: until you unsubscribe.
- Analytics: stored per Google retention settings (typically 14 months).
9. Your rights
You may request access, correction, deletion, withdraw consent, or object to processing. Contact CNTW Charity Team.
10. Where your data is processed
All personal data is processed in the UK, except anonymised analytics data processed by Google.
11. Legal basis for processing
Article 6(1)(b) contract (shop purchases); Article 6(1)(a) consent (newsletter, analytics); Article 6(1)(f) legitimate interests (website security).
12. Contact us
CNTW Charity Team, Cumbria, Northumberland, Tyne and Wear NHS Foundation Trust.