Who We Are
The Brooking is a Charitable Incorporated Organisation (CIO) and the data controller for the information we collect. When we use ‘we’ or ‘our’ or ‘us’ we mean The Brooking CIO (Registered CIO No.1155363). We are serious about data protection. We set ourselves the highest standards of information collection and use and fully comply with the General Data Protection Regulations (GDPR).
It is important you read this privacy notice, as well as any other specific privacy policies we send you, so that you are fully aware of how and why we are using your data. This privacy notice is an add on to other notices and privacy policies and doesn’t override them.
The Data We Collect About You
We collect, use and store personal data, which can include name, address, date of birth, email address, bank account and other financial information, postal address and telephone numbers. And non-personal data, which can include areas of interest and the web pages you have viewed.
We collect, use and store information about people we have contact with such as supporters, donors, suppliers, clients, community users, volunteers, staff and other stakeholders. We will never sell your data or share it with another company or charity for marketing purposes. We will only disclose your data if we have to by law.
We do not collect details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data. Nor do we collect information about criminal convictions and offences.
This website is not aimed at children and we do not collect data about them.
How We Collect Your Personal Data
We use different methods of collecting data from and about you. These include:
How We Will Use Your Personal Data
We will use the data for admin, health and safety, and any other purposes we let you know about when you gave us the information. For the most part, we will use your personal data:
If you have agreed, the data you give us will be used to keep you informed of our activities, progress, and news.
All the emails we send give you the option to unsubscribe at any time.
We use third-party providers for managing our mailing list (Intuit MailChimp) and online donations (Donorbox). You can access their privacy policies via the links below:
Inuit Global Privacy Statement
Data Retention
The Brooking keeps personal data for as long as needed for the purpose you gave it to us, and for as long afterwards as we have to by law. We will review personal data every year to confirm whether we are still allowed to use it. We will make sure your information is accurate, up to date and stored securely. We will do our best to use the minimum amount of personal data possible.
Data Security
We have security measures in place to stop your personal data from being accidentally lost, used or illegally accessed, altered or disclosed. We also limit access to your personal data to employees, agents, contractors and other third parties who need to know. They will only process your personal data on our say so and have a duty of confidentiality.
We have procedures in place to deal with suspected personal data breaches and will notify you and any relevant regulator of a breach where we have to by law.
Third Party Websites
Our website includes links to third-party websites, which we do our best to make clear. However, this privacy notice does not cover those third-party websites.
We use social media to share information about our activities and we may respond to your comments and questions made via social media platforms (for example, Facebook, Instagram, LinkedIn, X)
This privacy notice does not cover what the social media sites we use do with your information. We recommend reading the social media site’s privacy policy before sharing any data.
Our website does not use cookies.
Payment Processing
When you make a donation or purchase membership online, your payment is processed using Stripe, through our fundraising platform, Donorbox.
We may also offer UltraSwift Pay, Donorbox’s express payment service, which enables you to make a payment using digital wallets such as Apple Pay or Google Pay. If you choose to use UltraSwift Pay, information held in your digital wallet, such as your name, email address and billing or delivery address where available, may be shared with Donorbox and Stripe to process your payment and complete your transaction.
Stripe processes payment and transaction information on our behalf, which may include your name, email address, billing address, payment method information, transaction amount and date, and information relating to the status of your payment. Stripe may also process information for fraud prevention, security, regulatory compliance and other purposes set out in its own Privacy Notice. Stripe may act as a data processor on our behalf and, in certain circumstances, as a data controller in its own right.
Donorbox is our fundraising platform and is not a payment processor. Donorbox may receive information relating to your transaction, including payment status and transaction identifiers, in order to provide its services.
We do not receive or store your full payment card details. We use the information provided through the payment process to process your donation or membership payment, administer your membership where applicable, maintain our financial and Gift Aid records, and deal with queries, refunds or payment issues.
For further information about how these providers process personal data, please see the Inuit Global Privacy Statement and how Stripe keeps payments secure.
Fundraising Research
The Brooking may use information that is publicly available to support our fundraising activities and to help us identify and understand potential supporters. This may include information about people who have expressed an interest in The Brooking, for example by subscribing to our newsletter, attending an event or following us on social media.
In some circumstances, we may carry out research into potential major or higher-level donors before approaching them. We may do this on the basis of our legitimate interests in securing philanthropic support for The Brooking and developing relationships with potential supporters.
Research may include information available through press and media sources, archives, official company websites, Companies House, information about charitable or philanthropic interests, and other publicly available sources. We may use this information to understand a potential supporter’s interests and connection to our work, and to help us determine how and whether it would be appropriate to approach them about supporting The Brooking.
We will seek to ensure that any such research is proportionate, fair and relevant to our fundraising purposes. We will not use publicly available information simply because it is available, and we will consider whether individuals would reasonably expect their information to be used in this way.
If you would prefer us not to undertake fundraising research about you, or if you would like to object to our use of your personal information for this purpose, please contact us at enquire@thebrooking.org.uk. We will respect your objection unless we have compelling legitimate grounds to continue processing your information.
Sharing Information Outside the UK
Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.
For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided in this policy.
Organisation name: Dr Abbey L.R. Ellis
Category of recipient: Social media consultant
Country the personal information is sent to: USA
How the transfer complies with UK data protection law: The International Data Transfer Agreement (IDTA)
CCTV
We use CCTV for the security and safety of our staff, visitors, collections, property and for the prevention and detection of crime. CCTV footage is retained for no longer than a period of two months.
Your Legal Rights
Under data protection law, you have rights including:
You will not be charged for exercising your rights. If you make a request, we have one month to respond.
Contact Details
If you want to make a request or have concerns about your personal information, please contact us by email at enquire@thebrooking.org.uk, by phone on 01256 229128, or by post at The Brooking, Andover Road, Whitchurch, RG28 7RL.
You can also complain to the ICO if you are unhappy with how we have used your data by phone on 0303 123 1113, via the website https://www.ico.org.uk, or by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
We regularly review our privacy policy and may make changes from time to time. Any changes made will be posted to this page and will apply from the time we post them.
Last updated September 2026.