Privacy policy - St Petrock's

Last updated July 2026

Here at St Petrock’s we provide support to those experiencing homelessness across Exeter. Much of the work we do wouldn’t be possible without the support of our local community.

We are fully committed to protecting your privacy and personal data that is gathered through your interactions with our charity. We think it is important therefore that we are completely transparent about how and why we need the personal details that we gather.

Protecting and securely storing your personal data is of the utmost importance to us and we will do everything within our control to do everything we can to maintain its safety.

(If you are a St Petrock’s client or service user, please refer to our separate client and service user privacy policy which can be found here.)

This Privacy Policy describes how St. Petrock’s (Exeter) Ltd (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit or use our services via stpetrocks.org.uk (the “Site”) or otherwise communicate with us (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a supporter, website visitor, donor or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services such as our website, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy.

If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons.

We will post the revised Privacy Policy on the Site, update the “Last updated” date and take any other steps required by applicable law.

What information we gather

We gather different information from different people based on the type of interactions they have with the charity. For example, we will gather different information for our employees verses supporters.

This privacy policy will explain your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The types of information that we may gather:

· Your name

· Your address

· Your telephone and/or mobile number

· Email address

· Your contact preferences

· Bank account details

· Your Gift Aid status

· Date of Birth

· Health information if you are taking part in any activities or events with us that may involve an element of risk or physical activity.

· Employer information and National Insurance number if you are part of a payroll giving scheme associated with our charity.

· Relationship information with regards to relationships to either employees or other supporters.

· We operate CCTV at our centre, and all footage is stored for a 30 day period in line with ICO guidance.

We may gather the above information via the following sources:

· Any paper or digital forms that you complete such e.g. a donation form or an online contact form.

· Any telephone conversations you have with our team might gather information such as your name and contact details where appropriate

· Face-to-face meetings and events

· Via third party websites operating on behalf of our charity such as our JustGiving and Give As You Live

· Any communication that you have with us via our social media channels

· Publicly available sources

When visiting our website or social media accounts, the following information may automatically gathered through cookies, pixels or similar technologies (“Cookies”).

Data may include information about how you access and use our site, or:

· Which pages you have visited and time spent on those pages

· Your approximate location e.g. city, county or country

· Whether you are a new visitor

· The type of device you are using (mobile, desktop or tablet) and which browser.

How is you information used?

We may process your information on the following legal bases, depending on the purpose it is required for:

· With your consent

· To protect your interests

· For our legitimate interests as a charity

· If we are entering into a contract with you or acting upon a contract we have in place with you

· For compliance as part of our legal obligations

We may use this personal data and information as part of the following purposes:

· To keep you up to date on our work (St Petrock’s), charity or fundraising appeals; i.e. through newsletters, donation requests, legacies or events.

· To process donations and legacies, including Gift Aid

· When required to by law

· In order to deal with any enquiries that you may direct towards us as a charity i.e. volunteering, donation or general enquiries

· If you volunteer with us or intent to in the immediate future, we may use your data in order to provide you with appropriate training and to comply with legal requirements for example around Health and Safety.

· For staff and recruitment purposes, such as during the application and interview process, for salary, pension and benefits as well as for training and Health and Safety, including the likes of DBS checks. Any data shared with us during the recruitment process will be securely stored as part of your employee records if you are successful. If you are unsuccessful, you data will be held for a period of six months before being securely erased from our records.

If you wish to no longer receive communications and updates from St Petrock’s, you can reach out to us via the following methods:

Emailing us at info@stpetrocks.org.uk

Call us on 01392 422396

Send us a letter at 10 Cathedral Yard, Exeter, EX1 1HJ

At St Petrock’s we promise to never share or sell your data to third-party organisations.

If you wish to request a copy of the personal information which we hold about you under the UK General Data Protection Regulations (GDPR), please either email or write to us at:

Chief Executive

10 Cathedral Yard,

Exeter,

Devon,

EX1 1HJ

Tel: 01392 422396 E-mail: info@stpetrocks.org.uk

Changing your contact details

Making sure that your contact details are up to date is important to us. So, if you change your email address or any of the other information we hold is inaccurate or out of date, please email us at info@stpetrocks.org.uk .

What are your rights around your personal information?

The right to be informed: we (St Petrock’s) must provide fair processing information typically this is through our privacy policy.

The right to access: you are entitled to ask for a copy of all of the information we hold about you.

The right to rectification: where possible, we (St Petrock’s) will make all reasonable effort to ensure the accuracy of your personal information and data. However, it is up to you to ensure that you submit true and accurate at the time of submission. If your details need correcting at a later date, this is also your responsibility to inform us of any changes required.

The right to be forgotten: you can ask us to securely erase all your personal data in certain circumstances, such as the information is no longer needed.

The right to restrict processing: you can object to the processing your data in certain circumstances. For example, if you are disputing the accuracy of your personal details.

The right to data portability: in certain circumstances, you may be able to ask us to transfer your information electronically to another organisation/controller.

The right to object: You can withdraw your consent at any time and object to your data being processed in certain circumstances.

You are free to exercise your rights on any of the above. We will respond within one month unless we need to extend the time frame in order to complete the task and resolve the issue. If an extension is required, we will be sure to let you know.

To make a requests regarding any of the above rights, please contact us via info@stpetrocks.org.uk or write to us at the above address.

Other Information

Third-party sites: On occasion, our website may have links to other websites that we do not operate or manage. Therefore, it is up to you to read the privacy notices of those websites before you submit any of your personal information.

Complaints: If you have a complaint about the way we have processed your information and data, please email us at the above email.

You can also take your complaint directly to the Information Commissioner’s Officer (ICO) www.ico.org.uk/global/contact-us/contact-us-public/