About us: The Teapot Trust is a Data Controller for the purposes of the General Data Protection Regulation (GDPR). It is a Scottish Charity with the registered number SC041885 with the Office of the Scottish Charity Regulator.

If in the process of using our site you choose to submit personal data you should be aware that we will always store your personal details securely. We’ll use them to communicate with you in the way(s) that you have agreed to. Your data may also be used for analysis purposes, to help us provide the best service possible. We’ll only share your data if required to do so by law.

Personal data: personal data is anything which enables us to identify you, such as your name or an email address. We must use such information only for the purpose you agreed to on submitting it. We must also ensure that the data is held safely.

You give us your personal data when:

     *You make a donation on line

     * Order an item from our online shop

     * Email a request for information

     * Ask to be added to our mailing list for our newsletter and events

The marketing information is sent via an email to Mailchimp who provide our mailing service. Mailchimp will then add your details to a distribution list which we then use to send out the requested information. Mailchimp are a US based organisation which uses data security within the US Privacy Shield Standard. This provides an equivalent security standard to that required under GDPR.

Teapot Trust community: Protecting your data and using it fairly: In order to advance the work of Teapot Trust, the charity holds data on its community of supporters. This data is: 1) used only for the purposes for which it is gathered (please see below), 2) held securely, in accordance with GDPR, within the UK, 3) disposed of safely when it is no longer needed. We do not share personal data with any third party, other than for the processing of donations through reputable organisations compliant with GDPR.  

To develop our work, we ask you to opt in to being contacted. Typically, we will contact you around 3-5 times each year e.g. with our newsletter, perhaps a copy of our annual review, an invitation to an event, and a request to support our annual appeal. You can update your mailing preferences or unsubscribe at any time by emailing Becky Capewell at [email protected]

If you are a supporter of the Teapot Trust we use your personal data to:

          *Inform you of our work and of the different ways you can help

          *assess and develop future events and activities

Your personal data is stored on our database.

Once you have subscribed to our mailing list you may choose to stop the contact at any time either by using the unsubscribe function or by contacting us at [email protected]. 

Aggregate or summary information:- this information is collected when you accept our cookie policy. Cookies do not allow for individual recognition of a user. However, the personal information that we store about you may be linked to the information stored in and obtained from cookies.

We use cookies to authenticate a visit – for example that you are not a robot or a means to manipulate our system.

We use them to help us analyse the use and performance of our website – for example how many visitors to the site we receive – has a campaign resulted in an increase in numbers?

Managing cookies – A banner will appear on our website allowing you to refuse and/or delete cookies. You can also do this from your browser. You can obtain information  through the following links:

(a)    https://support.google.com/chrome/answer/95647?hl=en (Chrome);

(b)    https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);

(c)    http://www.opera.com/help/tutorials/security/cookies/ (Opera);

(d)    https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);

(e)    https://support.apple.com/kb/PH21411 (Safari); and

(f)    https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).

We will not sell or give your personal data to someone else.

Art Therapy beneficiaries and their families: Personal data shared with Teapot Trust by the NHS, for the purposes of providing our art therapy service, is encrypted. Our art therapists' medical reports use code to prevent the identification of individuals for maximum protection. We always seek the express consent of beneficiary families to include contact details on our supporter database. 

Further details of our data protection policy are available on the Policies page. Our Data Protection Officer is CEO, Sarah Randell.

Security: whilst we strive to keep the information you supply secure please be aware that the internet is not a fully secure medium. The Teapot Trust uses Box to store data. Box uses TLS when data is in transit and AES encryption when data is at rest in storage.

Payments: The Teapot Trust uses the Stripe and GoCardless, secure third party sites, to process your credit/debit card information if you donate or order anything from our online shop. Financial transactions relating to donations or shop purchases are handled by our payment services providers, Stripe and GoCardless. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers' privacy policies and practices at Stripe (URL https://stripe.com/gb/privacy) and GoCardless  (URL https://gocardless.com/legal/privacy/). The Teapot Trust does not have access to or retain records of your payment details.

Changes: By using our site you are accepting these terms and agreeing to abide by them. If you do not agree to these terms of use please leave our site and do not use it.

We update our site regularly and may change the content at any time.    

Your data may also be available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behavior of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:

1. Your data will be made available to our website provider
2. The data that may be available to them include any of the data we collect as described in this privacy policy.
3. Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.
4. They will store your data for a maximum of 7 years.
5. This processing does not affect your rights as detailed in this privacy policy.