Privacy Policy of Sal’s Shoes (“the Charity”)
Sal’s Shoes is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1. Who We Are
Sal’s Shoes
E-mail: [email protected] Website: www.salsshoes.com
We are a UK-registered charity that collects pre-loved shoes and distributes them to children and communities in need around the world.
For details of how we manage personal data internally, please see our Data Protection Policy.
2. The Personal Information We Collect
We may collect and process the following types of personal data:
- Supporters and Donors: name, email address, postal address, phone number, donation history, Gift Aid status, and payment information (processed securely by third-party payment providers).
- Volunteers: name, contact details, relevant background information for safeguarding, emergency contact details.
- Partner organisations: organisational name, contact person’s name, contact details, and relevant agreements.
- Website visitors: IP address, browser type, device information, and activity on our site (via cookies and analytics).
- Social media followers: information shared via interactions, messages, or
- Images and stories: photographs, videos, or case studies of shoe distributions (with consent).
3. How We Collect Your Personal Information
We collect data in the following ways:
- Directly from you when you:
- Make a donation (online, by post, or in person)
- Sign up for our newsletter
- Volunteer or apply for a role with us
- Contact us by email, phone, or social media
- Automatically through cookies and analytics when you visit our website
- From partner organisations when working together on projects (with appropriate agreements in place)
4. How We Use Your Personal Information
We process your personal data for:
- Processing donations and claiming Gift Aid
- Sending updates about our work (with your consent)
- Managing volunteer applications and safeguarding
- Responding to enquiries and feedback
- Recording and sharing impact stories (with consent)
- Analysing website and social media performance
- Complying with legal and regulatory obligations
5. Lawful Bases For Processing
We rely on the following lawful bases under UK GDPR:
- Consent – for sending marketing emails, using photographs, and storing certain optional personal details.
- Contract – when you volunteer, donate, or partner with us and we need your data to fulfil our agreement.
- Legal obligation – for Gift Aid, safeguarding, and financial record-
- Legitimate interest – for managing relationships with supporters, improving our website, and promoting our work.
6. Cookies and Website Analytics
Our website uses cookies and similar technologies to:
- Remember your preferences
- Analyse how visitors use our site
- Improve your experience
You can control or delete cookies via your browser settings.
7. Sharing Your Information
We will never sell your data. We may share your data with trusted third-party service providers who help us run our charity, such as:
- Payment processors (e.g. PayPal, Stripe)
- Email marketing platforms (e.g. Mailchimp)
- Website hosting and analytics providers (e.g. Google Analytics)
- Cloud storage providers (e.g. Dropbox, Microsoft OneDrive)
These providers are contractually required to keep your data secure and only use it for the purpose we specify.
Some of these providers may store data outside the UK. Where they do, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA).
8. Data Retention
We keep your personal data only for as long as necessary:
- Donation and Gift Aid records: 6 years after the end of the financial year
- Volunteer and partner records: 6 years after relationship ends (unless safeguarding law requires longer)
- Mailing list data: until you unsubscribe
- Photos/videos: until consent is withdrawn or no longer needed for our work We securely delete or anonymise data when it is no longer needed.
9. Security Of Your Information
We use appropriate technical and organisational measures to keep your personal data safe, including encrypted storage, secure password protection, and restricted access to authorised staff and volunteers.
10. Children’s Data
We do not knowingly collect personal information from children under 13 without parental/guardian consent. Where children are featured in our photographs or stories, we obtain consent from a parent, guardian, or responsible organisation.
11. Your Rights
Under data protection law, you have rights to:
- Access your personal information
- Request correction of inaccurate or incomplete data
- Request deletion of your data in certain circumstances
- Restrict or object to how we use your data
- Request your data in a portable format
- Withdraw your consent at any time
To exercise your rights email [email protected]. We aim to respond within 28 days.
12. Complaints
If you have concerns about our use of your data, please contact us at [email protected]. If you are not satisfied, you can complain to the Information Commissioner’s Office:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 | Website: www.ico.org.uk
Last date of review: 14/08/25
Next date of review: 14/08/26