Our Data Retention Policy and processes comply fully with the requirements of the General Data Protection Regulation (GDPR). 

In practice this means we will not keep personal data longer than is necessary for legal or operational requirements. How long we keep your data will depend on the nature of your relationship with us.

If after your initial contact with us (whether an order, a gift, a contact request, or some other activity) you take no further action with us in a two-year period, we will remove your name from our mailing lists. This is because we do not believe there is a legitimate interest in continuing to use your data. After four years of inactivity, we will remove your details from our supporter database and therefore stop processing your data. 

For everyone else, after four years of inactivity we will review your inclusion on postal mailing lists, and we will cease postal mailings unless we consider there is a legitimate interest to continue mailing you. Where there are no grounds for legitimate interest, after a further year we will remove you from our supporter database.  

We may consider there is a legitimate interest to continue processing your data if you are a potential legator, a Member of Association, a former staff member or trustee, or a significant long-term supporter. 

Before we remove you from our mailing lists, we will offer you the opportunity to choose to receive communications from us.

Any web accounts you create will remain active until we replace our website or you delete them and if you are subscribed to any email lists, you will continue to get emails until you unsubscribe.

Last updated May 2018.