Trust centre

DRAFT — placeholder copy, not yet approved. Several statements below are drafted in advance of the policies they describe. Every item marked In progress is not yet true, and nothing here should be relied on by a funder, partner or regulator until this flag is removed.

If you are thinking about giving us money, telling us something personal, bringing your organisation to us, or trusting us with your child or a vulnerable adult, you deserve to know how we run. This is that information, in one place, in plain English. Where we have not finished something, we say so rather than leaving a gap.

1. Governance — who decides what

Ability Beyond Vision Limited was incorporated in June 2026 as a company limited by guarantee, registered in England and Wales, company number 17259748. A company limited by guarantee has no shareholders and pays no dividends: nobody can take profit out of it. Any surplus goes back into the work.

Our directors, registered office and annual filings are public on the Companies House register. We do not repeat them here, because the register is the authoritative copy and this page could go stale.

Charitable status

We are not a registered charity yet. We are working towards it. Until we are, we do not call ourselves a charity, we do not claim Gift Aid, and we do not accept funding that is conditional on charitable status. If and when that changes, it will be announced on the news page and here.

Who blind and partially sighted people are in this

Blind and partially sighted people are involved in running this organisation, not consulted at the end of it. Our commitment is that decisions about what we deliver are made with people who have lived experience of sight loss in the room, with a vote, and that we publish when that has not happened.

Back to contents

2. Money — where it comes from and where it goes

We are new, so the honest answer today is: very little of either. That will change, and this section will change with it.

What we commit to publishing

• Total income and total spending each financial year, broken down by category.
• What proportion goes on delivery, and what goes on running the organisation.
• Any payment to a director or a person connected to one, itemised, with the reason.
• Any single funder providing more than a quarter of our income.
• Our statutory accounts, as filed at Companies House.

Funding we will not take

We will not accept money that requires us to stay silent about a barrier, to endorse a product, to restrict who we support, or to hand over control of what we say. If we turn down significant funding on those grounds, we will say that we did, without necessarily naming the funder.

Back to contents

3. Your information

We collect as little as we can get away with, keep it only as long as we need it, and never sell or swap it. The full detail — what we hold, why, for how long, and your rights over it — is in our privacy notice.

Our data protection contact is privacy@abilitybeyondvision.org.uk. A real person reads that inbox.

Back to contents

4. Safeguarding

We work with disabled adults, and at times with children and young people. That carries responsibilities we take seriously.

• Status: In progress — our safeguarding policy is being written and is not yet adopted. We are not delivering sessions with children until it is.
• Anyone delivering work with children or adults at risk will hold an appropriate DBS check before they start, not afterwards.
• We will name a designated safeguarding lead and publish how to reach them directly, including outside working hours.
• A concern about a person's immediate safety goes to the police on 999, or to Bolton Council's safeguarding team — not to us first. We would rather you go over our heads than wait for us.

To raise a safeguarding concern about anything connected to us, email safeguarding@abilitybeyondvision.org.uk. You can do this anonymously. We will not try to identify you.

Back to contents

5. Security

We are a small organisation and we are not going to pretend to be a bank. Here is exactly what we do.

• This website is static — there is no database and no login on the public site, so there is nothing on it to steal.
• Everything is served over HTTPS. Any plain HTTP request is redirected to HTTPS, and we tell browsers to use HTTPS only (HSTS), so nothing you read here travels in the clear.
• We only accept modern, secure encryption (TLS 1.2 and 1.3). Old, weak protocols are refused.
• Every page sets a strict content security policy: the browser is told to run only our own code and to refuse anything injected from elsewhere, which shuts down the most common way websites get tampered with.
• We send the browser a full set of protective headers — blocking the site from being framed by others, stopping content-type guessing, limiting what information is shared when you follow a link, and switching off device features like camera and microphone that we never use.
• Accounts we hold with suppliers use unique passwords from a password manager, with two-factor authentication turned on wherever the supplier offers it.
• Access to anything containing personal data is limited to the people who need it, and reviewed when someone's role changes.
• We do not take card details ourselves. When donations open, payments will be handled entirely by a regulated payment provider — card numbers will never touch our systems.
• Devices used for our work have full-disk encryption and automatic updates enabled.

None of this is a substitute for good judgement, and none of it makes us un-hackable — but it is the honest, current picture, and we will update it here whenever it changes.

Telling us about a vulnerability

If you find a security problem in this site or anything else of ours, please tell us at security@abilitybeyondvision.org.uk. We will acknowledge within five working days, we will keep you informed, and we will not take legal action against anyone who reports a problem in good faith and does not access or alter other people's data.

Back to contents

6. Accessibility

An organisation about sight loss that publishes an inaccessible website has already failed. So accessibility sits inside our trust centre, next to money and safeguarding, rather than in a link at the bottom of the page.

Report a barrier: access@abilitybeyondvision.org.uk. We aim to reply within five working days and to fix confirmed AA failures within 20 working days.

Back to contents

7. Suppliers and services we use

These are the third parties involved in running our website and operations. If any of them processes personal data on our behalf, that is stated.

We will update this table before adding a new supplier that touches personal data, not after.

Back to contents

8. Our policies, and their status

We would rather show you an honest list with gaps in it than a tidy list that is not true.

Any policy can be requested in large print, braille, plain text or audio by emailing hello@abilitybeyondvision.org.uk. There is no charge and you do not have to explain why.

Back to contents

9. Complaints and concerns

If we have got something wrong, telling us is a favour, not a nuisance.

1. Tell us. Email hello@abilitybeyondvision.org.uk, or ask any of us in person. Put it in whatever format suits you — writing, a voice note, or a phone call. We will acknowledge within five working days and give you a full reply within 20.
2. If our reply does not settle it, ask for it to be reviewed by a director who was not involved. Say the word “review” and that happens automatically. You do not have to argue for it.
3. If you are still not satisfied, go outside us. Nothing we say stops you doing this at any point, including first.

Who to go to instead of us

• Personal data: the Information Commissioner's Office, at ico.org.uk, or 0303 123 1113.
• Fundraising: the Fundraising Regulator, at fundraisingregulator.org.uk, once we begin accepting donations.
• Safeguarding: Bolton Council safeguarding, or the police on 101, or 999 if someone is in immediate danger.
• How the company is run: Companies House.

We will not ask you to sign anything that stops you speaking publicly about your experience of us.

Back to contents

10. When something goes wrong

Small organisations make mistakes. What separates a trustworthy one is what happens next. Our commitment:

• If personal data is lost or exposed, we will tell the people affected directly and in plain language, and notify the Information Commissioner's Office within 72 hours where the law requires it.
• We will say what happened, what it means for you, and what we are doing — before we have all the answers, rather than after.
• We will not use the phrase “we take your privacy seriously” in place of telling you what actually happened.
• Significant incidents will be recorded below, permanently, including ones nobody outside would otherwise have known about.

Incidents to date: none.

Back to contents

11. Changes to this page

This page is versioned. When something material changes, the old wording is not quietly overwritten — the change is listed here with its date.

• 22 July 2026

  Security section expanded to set out the specific protections now in place on this website: HTTPS-only with HSTS, modern TLS only, a strict content security policy, and a full set of protective browser headers.

• 21 July 2026

  Trust centre first published, in draft, covering governance, money, data, safeguarding, security, accessibility, suppliers, policies, complaints and incidents.

Back to contents

Anything else

If something you need to know is not on this page, that is a gap we want to close. Email hello@abilitybeyondvision.org.uk and we will answer you and then add it here so the next person does not have to ask.