Privacy policy

Privacy and data protection

Charity Tax Group (CTG) is committed to protecting your personal data and handling it responsibly.

This page explains how we collect, use and protect personal data when you engage with us or use our website.

For full details, please refer to the sections below. You can also view our full Privacy Notice here and Cookies here.

Contact details

If you have any questions about this policy, what information we hold about you, how it is used, or if you wish to exercise any of your rights under data protection law, please contact us at [email protected].

How we use your data

We collect and use personal data to support our work and provide services to members and users of our website.

The personal data we hold typically includes your name, contact details (such as email address), job title, organisation, membership information and communication preferences. If you have a website account, we also hold your login details, which must be kept secure.

We use your personal data to:

manage membership and maintain accurate records
respond to enquiries and requests
communicate with you about meetings, events, working groups and consultations
send newsletters and updates where you have chosen to receive them
manage your or your organisation’s membership, including subscriptions

We may contact you by email or, where appropriate, by telephone in connection with these activities.

We only share personal data where necessary and with appropriate safeguards in place. This may include trusted service providers who support our operations, or where we are required to do so by law.

In some cases, your email address may be visible to other participants if you are part of a working group where group communication is required.

We process personal data in accordance with data protection law, relying on a combination of contract, legitimate interests, consent (for newsletters), and legal obligations, depending on the activity.

Links from our site and security

Our website may contain links to third-party websites.

These links are provided for information only, and we have no control over websites outside the www.charitytaxgroup.org.uk domain. If you access or provide information to a third-party website, we are not responsible for its data protection and privacy practices. You should review the privacy policies of any external websites you visit to understand how your personal data is handled.

We take appropriate technical and organisational measures to protect personal data from unauthorised or unlawful access. However, there are inherent risks in transmitting information over public networks, and we cannot guarantee the absolute security of any data transmitted to us.

Data retention

We retain personal data only for as long as necessary for operational, legal or regulatory purposes.

The length of time we keep personal data depends on the type of information and the purpose for which it is used. For example:

Membership data: active membership plus up to 4 years
Mailing lists: until consent is withdrawn, plus up to 2 years
Event records: up to 2 years
Financial and payment records: up to 6 years to meet legal obligations
Governance and trustee records: duration of tenure plus up to 6 years

Where personal data is no longer required, it is securely deleted or anonymised in line with our data protection policies.

In some cases, we may retain data for longer where required to comply with legal obligations or to establish, exercise or defend legal claims.

Your data protection rights

You have rights in relation to your personal data under data protection law.

These include the right to:

request access to the personal data we hold about you
request correction of inaccurate or incomplete data
request deletion of your personal data where it is no longer needed
restrict or object to how your personal data is used in certain circumstances
withdraw your consent at any time, where processing is based on consent (for example, newsletters)

To exercise any of these rights, please contact us using the details above. We may need to verify your identity before responding.

Please note that in some cases we may be required to retain or continue processing your data where this is necessary to comply with legal obligations or to establish, exercise or defend legal claims.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).