Data controller
Who is responsible
The Merchant’s House Trust (Marlborough), registered charity 1010902 and company 02704749, is the data controller where it decides how and why personal information is used.
Information and purposes
What we may process
Name, contact details, organisation, visit details and message, used to respond and administer the request.
Contact details, interests and availability, used to discuss current opportunities.
Information handled by Beyonk and shared where needed to administer attendance.
Information handled by Beacon, Stripe or Beyonk and shared where needed for stewardship, accounting, Gift Aid, benefits and renewals.
Technical logs provided by Cloudflare, used to deliver the site, maintain security and investigate faults or abuse.
Do not submit health records, complete card details, passwords or other highly sensitive information through a general website form unless the Trust has specifically requested it through an appropriate route.
Lawful bases and sharing
How information is handled
Depending on the activity, the Trust may rely on steps before or performance of a contract, legal obligations, legitimate interests, consent or another lawful basis appropriate to the circumstances.
Information is not sold. It may be shared with authorised staff and volunteers, Cloudflare and other hosting or form providers, Beyonk, Beacon, Stripe, professional advisers, regulators or authorities where necessary and lawful.
Some providers may process information outside the United Kingdom. Where required, the Trust will rely on suitable contractual or legal safeguards.
Retention, security and rights
Your information and your choices
Information is kept only as long as needed for the purpose, legal requirements and legitimate operational records. The Trust uses proportionate technical and organisational measures, but no internet service can be guaranteed completely secure.
- Ask for access to personal information held about you.
- Ask for inaccurate information to be corrected.
- In some circumstances, ask for erasure or restricted processing.
- Object to some uses or withdraw consent where consent is the basis.
- Complain to the Information Commissioner’s Office.
Contact the Trust first so it can investigate. Guidance is also available from the Information Commissioner’s Office (opens in a new tab).
Provider notices
When you leave this website
Bookings and Friends membership use Beyonk, donations use Beacon, and the chimney appeal uses Stripe. Their own privacy, payment, cancellation and account terms apply to activity completed on their platforms.
This policy will be reviewed whenever a provider, form, analytics service or material retention practice changes.