Introduction

Tyburn Foundation (“we,” “us,” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website [website URL] (the “Site”) or engage with us in any way.

Who We Are

Tyburn Foundation is an art foundation dedicated to [brief description of the foundation’s mission, e.g., supporting emerging artists, running exhibitions, funding creative projects, etc.]. We are based in [Location], and you can find our contact details at the end of this policy.

What Data We Collect

We may collect and process the following types of personal data:

• Identity & Contact Data: Name, email address, phone number, and postal address (e.g., if you sign up for our newsletter, register for an event, or contact us).

• Transaction Data: If you make a donation or purchase, we may collect payment details (processed securely via third-party payment providers).

• Technical Data: IP address, browser type, and details about your visit (via cookies and analytics tools).

• Marketing Preferences: Your preferences for receiving updates, event invitations, and other communications.

How We Collect Your Data

We collect personal data in the following ways:

• When you fill out a form on our Site (e.g., contact forms, event sign-ups, newsletter subscriptions).

• When you make a donation or purchase through our Site.

• When you communicate with us via email, phone, or social media.

• Automatically, through cookies and tracking technologies (see our Cookies Policy below).

How We Use Your Data

We use your personal data to:

• Respond to enquiries and provide services.

• Process donations, purchases, and memberships.

• Send you updates, newsletters, and event invitations (only if you have opted in).

• Improve our website and services through analytics.

• Comply with legal and regulatory requirements.

Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Consent – When you sign up for newsletters or opt into marketing communications.

• Contractual Obligation – When you make a purchase or donation, we process your data to fulfil that transaction.

• Legitimate Interest – When we use analytics to improve our website and services, or when responding to your enquiries.

How We Store and Protect Your Data

We take appropriate security measures to protect your personal data from unauthorised access, alteration, or disclosure. Your data is stored securely, and any third-party service providers we use are required to comply with data protection regulations.

How Long We Keep Your Data

We only keep your personal data for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.

Sharing Your Data

We do not sell or trade your personal data. However, we may share it with:

• Service providers – Third-party companies that help us with payment processing, email communications, and analytics.

• Legal authorities – If required by law, such as for fraud prevention or compliance.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.

• Request correction of inaccurate data.

• Request deletion of your data (“right to be forgotten”).

• Withdraw consent for marketing communications at any time.

• Object to certain types of processing.

To exercise your rights, please contact us at [email protected]