Privacy Policy

Privacy Policy

Tina’s Trust | Scottish charity SC054353 | 12 October 2026 | Review: 12 October 2027

TRUSTEE REVIEW REQUIRED BEFORE PUBLICATION: Not publication-ready: confirm Article 9 health-data

condition, actual provider/transfer information and a documented retention schedule. These cannot safely be

inferred from the website.

Who we are

Tina’s Trust (Scottish charity SC054353) is the controller of personal information used to run its grant-giving

charity. Contact tinastrust2025@gmail.com; correspondence address: Tina’s Trust, Taigh Brae, Lamlash, Isle of

Arran, KA27 8JT.

Information we receive

We receive emails about grant enquiries and applications, names and contact details, relevant family

circumstances, support requested, approximate FTD diagnosis dates, payment details, donation and Gift Aid

records, correspondence and complaints. We do not ask for medical records or detailed clinical evidence. An

approximate diagnosis date associated with an identifiable person is special category health data.

How we use information

We use information to respond to enquiries, assess eligibility, decide and administer grants, make payments,

process donations and Gift Aid, maintain required records, investigate complaints and prevent misuse. Grant

decisions are made by trustees rather than solely automated means. Identifiable stories and photographs are

used only with an appropriate separate permission.

Legal grounds

Depending on the activity, our Article 6 UK GDPR grounds include legitimate interests in administering the charity

and responding to enquiries, compliance with legal obligations for accounting and regulatory records, and

consent where required for optional publicity or communications. Any legitimate interests must be balanced

against individuals’ rights. Health data also requires a separate Article 9 condition and any applicable safeguards;

the charity must document the condition before processing diagnosis information.

Sharing and security

Relevant trustees may access application information. Providers of email, website hosting, banking and

donations may process data under their own roles and terms. Information may be disclosed to professional

advisers, regulators or authorities where appropriate or required. We do not sell personal information. Do not

email full card numbers or detailed medical documents.

Retention

We keep personal information no longer than necessary for its purpose, subject to applicable accounting, Gift Aid

and other legal obligations. We distinguish financial transaction records from unnecessary application details.

The trustees must adopt and publish specific retention periods for enquiries, unsuccessful and successful

applications, diagnosis dates and complaints. Records are securely deleted or anonymised when no longer

required.

Your rights

You may have rights to access, correction, erasure, restriction, objection and portability, depending on the

circumstances. Email tinastrust2025@gmail.com to make a request. We normally respond within one month. You

may complain to the ICO at ico.org.uk/make-a-complaint or 0303 123 1113.Updates

We will review this notice when our practices or providers change.