Privacy Notice

Who we are: 

North York Moors Trust (“we”, “us”, “our”) is a registered charity.  

We are the data controller for the personal information we collect through our website and www.northyorkmoorstrust.uk,  through third party tools (such as Eventbrite for events or Microsoft Forms for surveys), and our projects, programmes, and activities. 

We are registered with the Information Commissioner’s Office (ICO). You can search the ICO records here.  

How we collect information: 

We collect personal information when you sign up for our newsletter, events or activities, make a donation or purchase, fill in a form or contact us directly through our organisational email (be they generic addresses or staff addresses), or apply to volunteer, work with us, or partner with us,  

This may include your name, contact details, communication preferences, and other information relevant to your enquiry or participation. 

Through our website we also use analytics tools to understand how our website is used. 

Why we collect and use personal data: 

We collect and use your personal information to deliver our services, events, or process information you request, such as communicate with you about our work, opportunities, or news (where you have opted in), administer donations, evaluate and improve our projects, programmes, and website, and comply with legal obligations or reporting requirements. 

Our lawful bases for processing this information include legitimate interests, consent, contract, and legal obligation, depending on the activity. 

We do not sell or rent your personal information. 

Who we share information with: 

We only share personal data with trusted service providers (such as mailing platforms, event organisers, or IT hosts) who process data on our behalf and under contract, funders or partners, where required to deliver funded projects (only anonymised or minimal personal data will be shared where possible), regulators such as the Charity Commission or HMRC, where legally required. 

All third parties are required to handle your data securely and in line with UK data protection law. 

Data is only shared where it is applicable and lawful to do so, and where you have given your consent to do so. 

How we store and protect your data:  

We take all reasonable steps to keep your information secure. 

Personal data is stored on secure systems within the UK.  

We retain your information only for as long as necessary for the purpose collected and in line with our Data Protection Policy. 

Your rights:  

Under UK data protection law, you have the right to access a copy of your personal data, correct inaccurate or incomplete information, request deletion of your data (the “right to be forgotten”), restrict or object to how we use your data, request data portability (transfer to another organisation), withdraw consent at any time (where consent is the lawful basis). 

To exercise any of these rights, please contact us at: 

enquiries@northyorkmoorstrust.uk   

or

The Old Vicarage, Bondgate, Helmsley, YO62 5BP  

Marketing and communications: 

If you choose to receive updates or newsletters from us, you can unsubscribe at any time by clicking the “unsubscribe” link in our emails or contacting us directly. 

We will never share your details with other organisations for marketing purposes.

Links to other websites:  

Our website may contain links to other sites of interest. Once you leave our site, we cannot be responsible for the privacy practices of those websites. Please check their privacy notices for more information. 

Updates to this notice: 

We may update this Privacy Notice from time to time to reflect changes in law or our operations. 

The latest version will always be available on our website, with the date of the most recent update shown below. 

Last updated: October 2025