Scope
CHEM Trust values your right to privacy and we are committed to keeping your data safe and secure. This notice sets out in detail how we treat the personal data that we may collect about you, as well as our reasons for collecting it, your rights in relation to your data and anything else we feel is important for you to know.
Contact details
“We” and “us” means CHEM Trust. We are a charity with registered charity no. 1118182 and a registered company with Company No. 05933897.
If you have any questions about the processing of your personal information, or you would like to exercise any of your rights, you can email us on askchemtrust@chemtrust.org.
What information we collect, use, and why
We may collect your personal data when you:
- Contact us with a query via our Contact Us page
- Apply to any calls for tenders or proposals
- Register for a webinar or event
- Subscribe to our mailing lists or newsletters
- Support a specific campaign or project by signing Call to Action documents
- Make a donation to CHEM Trust
- Apply for a job or work for us
We may also maintain records with details of individuals who contact us for information or for help, but only in case we need to contact them later or provide further information to them in the future.
We may collect or use names and contact details when dealing with queries, complaints, or claims.
The types of personal data we may collect are:
- Names, email addresses, home address and telephone numbers
- Marketing preferences
- Records of consent, where appropriate
- Employee data (National Insurance number, date of birth, employment and education history, right to work status, copies of photo ID, disability information)
- Donation information which may include Gift Aid declarations
- Photographs and videos at our events
When subscribing to our newsletter, this data is then managed through Mailchimp (full privacy policy) or Brevo (full privacy policy).
You can unsubscribe to our blog or newsletter at any time by clicking the unsubscribe link at the bottom of any of our emails or by emailing askchemtrust@chemtrust.org.
For donations, we use Charities Aid Foundation as a data processor to collect your donation information who then share the data with us (full privacy policy here).
We need the above information to be able to:
- Effectively provide services to you
- Facilitate your enquiries
- Process bookings or donations
- Manage recruitment processes
- Administrate your employment contract/trustee agreement
Visitors to our website and traffic data
Our website data is processed by WordPress. When someone visits chemtrust.org the WordPress system collects site stats such as the number of views of a post and number of clicks on a link. This information is only processed in a way which does not identify anyone.
We also gather information automatically about website visitors to help us maintain and improve the design of our website. We use Plausible Analytics to collect anonymous usage data for statistical purposes. The goal is to track overall trends in our website traffic, it is not to track individual visitors. All the data is in aggregate only, and no personal data is collected.
We use reCAPTCHA to protect our website from spam. reCAPTCHA sets a necessary cookie (_GRECAPTCHA) when executed for the purpose of providing its risk analysis. We have configured this cookie to be set from the recaptcha.net domain rather than google.com to avoid the use of any additional cookies which may be set by Google.
We may use social networking buttons and widgets on our website to enable you to easily share the articles, case studies, service offers, and news with your contacts and networks. For example, Bluesky, Facebook, X/Twitter, LinkedIn, Instagram, and YouTube. These social networking sharing buttons and widgets come from web servers that may track your behaviour on our website and may combine this with other information about you originating from other websites. You can install a browser add-on like Disconnect for Chrome and Firefox to disable them. CHEM Trust do not have access to any of your details or personal information from these services.
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the Information Commissioner’s Office (ICO) website.
Your right to be informed
We will be completely clear and transparent about how we plan to use your personal information.
Your right of access
You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
Your right to rectification
You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Please ensure any data you provide is accurate at the time of submission and let us know as soon as possible if you’d like us to update your details.
Your right to erasure
You have the right to ask us to delete your personal information.
Your right to restriction of processing
You have the right to ask us to limit how we can use your personal information.
Your right to object to processing
You have the right to object to the processing of your personal data.
Your right to data portability
You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
Your right to withdraw consent
When we use consent as our lawful basis you have the right to withdraw your consent at any time.
If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details on our website.
Our lawful bases for the collection and use of your data
Our lawful basis for collecting or using personal information for service updates or marketing purposes is:
- Consent – We have permission from you after we gave you all the relevant information. You have the right to withdraw your consent at any time.
Our lawful bases for collecting or using personal information for recruitment purposes are:
- Contract – We have to collect or use the information so we can enter into or carry out a contract with you.
- Legal obligation – We have to collect or use your information so we can comply with the law. Personal Data in relation to your salary is shared with HRMC as part of our legal obligation.
- Legitimate interest – We rely on our legitimate interests to collect and store information about job applicants and trustees, and for some data that we keep about employees during the course of your work with us, e.g. supervision, appraisal and sickness records.
- If we collect health or disability information for the purposes of making reasonable adjustments, we rely on our legitimate interest and are complying with our legal obligations. This processing is supported by condition b, Article 9 Art of the UK GDPR (employment), and further supported by Section 10, Schedule 1, Part 1, Condition 1 of the Data Protection Act 2018 (Employment, social security and social protection).
Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
- Legitimate interest – we rely on our legitimate interest to be able to collect and store your information.
We have a joint controller relationship with Charities Aid Foundation (CAF). We process your personal information with that joint controller regarding individual donations.
Where we get personal information from
We get personal information directly from you when you engage with us to use or enquire about our services, or when you apply for a role with us. We may collect information via application forms, CVs, during interviews or other forms of assessment.
During recruitment, we may receive information from employment agencies or former employers when gathering references.
For individual donations, we use a third-party platform called CAF to collect and store your donation information, and CAF share this with us.
How long we keep information and where it is stored
All of your personal data is kept within the EU/EEA, and we will not transfer your data internationally without applying appropriate safeguards to protect it.
If you subscribe to any of our newsletters, we retain a suppression list in MailChimp and/or Brevo to ensure that if you unsubscribe, you do not receive emails in the future.
For information collected for recruitment purposes, we will delete unsuccessful applicant data after 6 months. If you get in contact with us to request complete removal of your data, we will remove it as soon as possible.
All other personal data is kept in line with our retention schedule, please get in touch using the contact details in this notice if you’d like to know more.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details on our website.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
0303 123 1113
Changes to this Privacy Notice
We aim to keep this privacy notice updated, and it is kept under regular review. If we make any significant changes to the way in which we process your information, we will let you know by either reaching out to you or posting a banner on the website.
This was last updated in July 2025.
