Privacy notice
DRAFT — placeholder copy, not yet approved. This notice has not been checked by anyone legally qualified and must not be relied on until it has.
This explains what we do with information about you. We have written it to be read, not to be legally survivable. If any of it is unclear, that is our failure — tell us and we will rewrite it.
The short version
- We collect as little as we can, and only when there is a reason.
- We never sell, rent or swap your details. There is no amount of money.
- There are no advertising trackers or analytics profiling on this site.
- You can ask what we hold, get a copy, correct it, or have it deleted.
- You can complain to the Information Commissioner's Office at any time, without coming to us first.
1. Who we are
Ability Beyond Vision Limited, a company registered in England and Wales, company number 17259748, based in Bolton. We are the data controller for the information described here.
Contact us about anything on this page at privacy@abilitybeyondvision.org.uk. You can also ask for this notice in large print, braille, plain text or audio, free of charge.
2. What we collect and why
| If you… | We collect | Why, and our lawful basis |
|---|---|---|
| Email us | Your email address, your name if you give it, and whatever is in your message. | To reply to you. Legitimate interests — you have contacted us and expect an answer. |
| Book or attend an event | Name, contact details, and any access requirements you choose to tell us. | To run the event and meet your access needs. Contract, and consent for access requirements. |
| Book an awareness session for your organisation | Your name, work contact details, and organisation. | To deliver and invoice the work. Contract. |
| Share your story | Whatever you choose to tell us, and how you want to be credited. | To publish it with your approval. Consent, which you can withdraw at any time. |
| Donate Not open yet | Name, email, amount, and Gift Aid declaration if you make one. Never your card number. | To process the gift, thank you, keep required financial records, and claim Gift Aid. Contract and legal obligation. |
| Volunteer with us | Contact details, references, and a DBS check where the role requires one. | To place you safely and lawfully. Legal obligation and legitimate interests. |
| Report an accessibility problem | Your email address and what you tell us about the problem. | To fix it and tell you it is fixed. Legitimate interests. |
We do not build profiles, we do not score or rank supporters, and we do not make any decision about you by automated means.
3. What this website itself collects
- No analytics. We do not run Google Analytics or any equivalent. We do not know who you are or which pages you read.
- No advertising or tracking cookies. None, from us or anyone else. That is why there is no cookie banner — we have nothing to ask you to consent to.
- Your accessibility settings — colour scheme, text size and zoom — are stored in your own browser, on your own device, using local storage. They never reach us. Clearing your browser data removes them.
- Server logs. Our host, Cloudflare, keeps standard technical logs including IP addresses, for security and to keep the site running. We do not use these to identify individuals.
- Sign-in for pages that are not public. While the site is being built, some pages require a one-time code sent by email. Cloudflare records which approved address signed in and when. This ends when the pages go public.
4. Information about your health or sight
Information about your sight or health is special category data and the law protects it more strictly. So do we.
- We never ask for a diagnosis. You do not owe us your medical history to get help from us.
- Tell us your access requirements, not your condition. “I need large print and a guide to the room” is all we need.
- If you do tell us something about your health, we rely on your explicit consent, we record only what is needed to support you, and we delete it when it is no longer needed.
- We never use it to decide whether you deserve support.
5. Who we share information with
We share as little as possible, with as few people as possible.
- Our suppliers, listed in the trust centre supplier table — the host, email provider, and eventually a payment provider. They act on our instructions and cannot use your data for their own purposes.
- A venue, only where you have asked us to arrange access for you, and only the detail needed to arrange it.
- HMRC, if you make a Gift Aid declaration.
- The authorities, if someone is at risk of serious harm, or where the law requires it. Wherever we can, we will tell you we have done this.
We do not share information with other charities, with fundraising agencies, or with data brokers. We never will.
Some suppliers operate outside the UK. Where they do, transfers are covered by UK adequacy regulations or standard contractual clauses.
6. How long we keep things
| Information | Kept for |
|---|---|
| General emails and enquiries | Two years after our last contact, then deleted. |
| Event bookings and access requirements | Deleted within three months of the event, unless you ask us to keep your requirements on file so you never have to repeat them. |
| Stories you have shared | Until you ask us to remove it. We will check with you every two years that you are still happy for it to be published. |
| Donation and financial records | Seven years, because tax and company law require it. |
| Volunteer and DBS records | DBS certificate numbers only, kept for the duration of the role plus six months. |
| Accessibility problem reports | Your contact details deleted once the issue is closed. The technical description is kept, with nothing identifying you in it. |
7. Your rights
Under UK data protection law you have the right to:
- Know what we hold about you, and get a copy — free, within one month.
- Correct anything that is wrong.
- Have it deleted, unless the law requires us to keep it.
- Restrict or object to how we use it.
- Take it elsewhere in a portable format, where that applies.
- Withdraw consent at any time, where consent is what we relied on.
To use any of these, email privacy@abilitybeyondvision.org.uk. You do not need to use special wording, quote any law, or explain why. Ask in whatever way suits you, including by phone or voice note, and tell us the format you want the answer in.
8. How to complain
Tell us first if you want to — we would rather fix it. But you do not have to. You can go straight to the Information Commissioner's Office, the UK regulator, at ico.org.uk or 0303 123 1113. Complaining to them is free, and we will not treat you any differently for doing it.
9. Changes to this notice
When we change this notice materially we will note it in the change log in our trust centre, with the date. We will not quietly rewrite it.
Last updated: .