GDPR Privacy Policy for Individual Giving

Lung Productions CIO is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect the personal information of individuals who support us through donations or express an interest in our individual giving scheme.

We are a registered Charitable Incorporated Organisation (CIO) and act as the Data Controller for all personal data collected in relation to donations.

What Personal Data We Collect

When you donate to Lung Productions CIO or sign up to our individual giving scheme, we may collect the following information:

  • Full name

  • Postal address

  • Email address

  • Phone number

  • Donation amount(s)

  • Banking or card details (processed securely by our payment provider – we do not store full card details ourselves)

  • Gift Aid declarations

  • Communication preferences

  • Any messages or information you choose to share with us

How We Collect Your Data

We may collect your information when:

  • You donate online through our website or a third-party platform (donorbox)

  • You complete a donation form at an event or in person

  • You sign up for our newsletter or individual giving scheme

  • You contact us by email, phone, or post 

Legal Basis For Processing Your Data

Under GDPR, we process your personal data on the following lawful bases:

  • Consent – when you opt in to receiving updates, newsletters, or fundraising information.

  • Contractual necessity – when processing your donation or fulfilling your participation in a donor scheme.

  • Legal obligation – when required to keep financial records (e.g., Gift Aid).

  • Legitimate interest – to manage our relationship with donors, maintain accurate records, and support our charitable activities in a way that does not infringe your rights.

HOW WE USE YOUR PERSONAL DATA

We Use Your Data To:

  • Process your donation and send confirmation or receipts

  • Claim Gift Aid where applicable

  • Keep records required by charity or tax law

  • Communicate with you about our work, events, and fundraising (if you consent)

  • Administer donor benefits or acknowledgements

  • Maintain accurate internal records for auditing and reporting

    We will never sell your personal information or share it with third parties for marketing purposes.

How We Store And Protect Your Data

We take data security extremely seriously. Your personal information is stored securely using:

  • Password-protected digital systems

  • Encrypted payment processing providers

  • Restricted access only for staff or trustees who need the information

  • Secure cloud-based storage compliant with GDPR standards where applicable

We regularly review our procedures to ensure your data remains protected.

Data Sharing

We only share data with trusted third parties when necessary for:

  • Processing donations (e.g., secure payment providers)

  • Managing mailing lists (e.g., email newsletter services)

  • Financial or legal compliance

All third parties must comply with GDPR and handle your data securely.

We do not share data outside the UK/EEA unless adequate safeguards are in place.

How Long We Keep Your Data

We keep donor records:

  • For 6 years after the end of the financial year in which your last donation was made (for accounting and Gift Aid purposes)

  • For as long as you remain opted in to receiving communications from us

We will delete or anonymise your data once it is no longer required.

Your Rights Under GDPR

You have the right to:

  • Access the personal data we hold about you

  • Request corrections to inaccurate information

  • Request deletion of your data (where legally possible)

  • Withdraw consent to communications at any time

  • Object to processing based on legitimate interests

  • Request transfer of your data (data portability)

To exercise any of these rights, please contact us using the details below.

Communication Preferences

You can change your communication preferences or unsubscribe from emails at any time by:

  • Clicking “unsubscribe” in our emails

  • Contacting us directly at info@lungtheatre.co.uk

  • We will update your preferences promptly.

Contact Us

If you have any questions about this policy or would like to exercise your data rights, please contact:

Email: info@lungtheatre.co.uk 

Address: 4 Old Cubley, Penistone, S36 9AW

Changes To This Policy 

We may update this Privacy Policy from time to time.
Any significant changes will be communicated on our website or through direct communication when appropriate.