Privacy Policy

1. Who We Are

IoW Defibrillators is a registered charity (Charity No. 1197068) based at Flat 6, Westhill Manor, 9 Westhill Road, Shanklin, Isle of Wight, PO37 6PU. We are committed to protecting your personal data and being transparent about how we use it.

If you have any questions about this policy, please contact us at steve@iowdefibrillators.uk.

2. What Data We Collect

We may collect the following personal data:

• Contact form submissions: your name, email address, and message content.
• Donations: payment details processed securely through PayPal. We do not store card details on our servers.
• Account registration (optional): email address and name if you create an account.
• Usage data: anonymous information about how you use our website (e.g. pages visited), collected via standard web analytics.

3. How We Use Your Data

We use your personal data to:

• Respond to your enquiries submitted via the contact form.
• Process charitable donations and send receipts.
• Provide and improve our website and services.
• Send updates about our work, if you have opted in to receive them.

We will never sell or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your data on the following legal bases under UK GDPR:

• Legitimate interests — to respond to your contact form enquiries.
• Contract — to process donations you have chosen to make.
• Consent — for any marketing communications, where you have opted in.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form data is typically retained for up to 2 years. Donation records may be retained for up to 7 years for accounting and legal compliance purposes.

6. Third-Party Services

We use the following third-party services which may process your data:

• PayPal — for secure donation processing. Please refer to PayPal's Privacy Policy.
• Facebook, Twitter/X, Instagram — social media platforms linked from our site. Each has its own privacy policy.

7. Cookies

Our website may use essential cookies to ensure basic functionality. We do not currently use tracking or advertising cookies. If this changes, we will update this policy and seek your consent where required.

8. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict how we process your data.
• Withdraw consent at any time (where consent is the legal basis).
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at steve@iowdefibrillators.uk.

9. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. All data is transmitted over encrypted HTTPS connections.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.