Privacy Policy | Baggy Trousers UK

Baggy Trousers UK ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. If you have any questions, contact us or email info@baggytrousersuk.org.

1. Who we are

Baggy Trousers UK is a charitable organisation dedicated to testicular cancer awareness, education, and survivor support. We are the data controller for the personal data described in this policy.

Contact address: info@baggytrousersuk.org

2. What personal data we collect

Newsletter sign-up

If you subscribe to our newsletter via the website footer, we collect your email address.

Contact form submissions

If you contact us via our contact form, we collect the name, email address, and message you provide.

Donation data

If you donate through our website, payment processing is handled entirely by Fundraise Up. We do not receive or store your payment card details.

Error and diagnostic data

We use Sentry to automatically capture technical errors that occur while you use the website. This may include the page URL where the error occurred, your browser type and version, operating system, and IP address. This data is used solely to identify and fix bugs.

3. How we use your personal data

We use your personal data for the following purposes:

To send our newsletter — if you have subscribed, we will send you updates about our work and events.
To respond to your enquiries — when you contact us via the contact form or by email.
To process donations — in conjunction with our payment processor, Fundraise Up.
To monitor and fix errors — we use Sentry to capture technical errors so we can identify and resolve bugs and improve the reliability of the website.

4. Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

Legitimate interests — responding to your enquiries and keeping the website secure and working properly (error monitoring).
Consent — newsletter subscription (you can unsubscribe at any time).

5. Third-party data processors

We use the following third-party services which may process your personal data on our behalf. Each is bound by a data processing agreement and appropriate safeguards.

Netlify (Netlify Inc.)

Hosts the Baggy Trousers UK website. Contact form submissions are processed via Netlify Forms.

International transfers: Netlify is a US-based company. Data transfers are covered by Standard Contractual Clauses.

Fundraise Up (Fundraise Up Inc.)

Processes donations made on our website. Payment card data is handled entirely by Fundraise Up and is not shared with us.

International transfers: Fundraise Up is a US-based company. Please refer to their privacy policy for transfer mechanisms.

Sentry (Functional Software Inc.)

Provides error monitoring and performance tracking. When a technical error occurs, Sentry captures diagnostic information including the page URL, browser type, operating system, and IP address. This data is used solely to identify and fix bugs.

International transfers: Sentry is a US-based company. Data is stored on Sentry's EU infrastructure. Transfers are covered by Standard Contractual Clauses.

Google Analytics (Google LLC)

Provides anonymous, aggregated website analytics (such as page views, approximate location, device and browser type, and how visitors navigate the site) so we can understand usage and improve the site. Google Analytics is only loaded if you accept analytics cookies, and IP addresses are anonymised. If you accept analytics cookies and make a donation, we also record that a donation was made. If you also accept advertisement cookies, this helps us measure how well our Google Ads campaigns work. We do not use Google Analytics to show you adverts.

International transfers: Google LLC is a US-based company. Data transfers are covered by Standard Contractual Clauses.

6. How long we keep your data

Newsletter subscriptions — retained until you unsubscribe.
Contact form submissions — retained for up to 12 months.

7. Your rights

Under UK GDPR you have the following rights:

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate data.
Right to erasure — you can ask us to delete your personal data in certain circumstances.
Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
Right to data portability — you can request your data in a structured, commonly used format.
Right to object — you can object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent (e.g. newsletter), you can withdraw at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@baggytrousersuk.org. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data security

We take reasonable technical and organisational measures to protect your personal data. All data in transit is encrypted using TLS. We do not store payment card information.

Despite these measures, no internet transmission is completely secure. If you believe your data has been compromised, please contact us immediately.

9. Children's privacy

We do not knowingly collect personal data from children under 18 through this website. If you believe a child has given us their personal data, please contact us so we can delete it.

10. Cookies

For information about how we use cookies and similar technologies, please see our Cookie Policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please get in touch or email us directly at info@baggytrousersuk.org.