Privacy Policy 

1. Introduction

Nine Lives Cat Rescue is committed to protecting the privacy and security of all personal data it processes. This policy outlines how we collect, use, store, and protect personal data in compliance with the UK General Data Protection Regulation (UK-GDPR) and the Data Protection Act 2018.

2. Scope

This policy applies to all personal data processed by Nine Lives Cat Rescue relating to donors, volunteers, adopters, fosterers, employees, and other individuals interacting with the organisation.

3. Data Protection Principles

We adhere to the following principles:

• Lawfulness, fairness, and transparency: Data is processed lawfully, fairly, and transparently.
• Purpose limitation: Data is collected for specified, explicit, and legitimate purposes.
• Data minimisation: Only data that is necessary for the stated purpose is collected.
• Accuracy: Data is kept accurate and up to date.
• Storage limitation: Data is not kept longer than necessary.
• Integrity and confidentiality: Data is processed securely to protect against unauthorised access, loss, or damage.

4. Responsibilities

• The board of founding members “The Board” acts as the Data Controller and is responsible for ensuring compliance with data protection laws.
• Designated Data Processors (The Board) manage day-to-day data processing.
• All staff and volunteers are required to understand and follow this policy.

5. What Personal Data We Collect

We may collect the following personal data:

• Name, address, email, and phone number
• Donation/payment details (for processing donations)
• Volunteer/adoption/fostering application details
• Correspondence records

Other information relevant to our charitable activities.

6. Lawful Basis for Processing

We process personal data based on:

• Consent (e.g., for mailing lists)
• Legitimate interest (e.g., running our non-profit, fundraising, or volunteer management)
• Legal obligations (e.g., employment or tax requirements)
• Contractual necessity (e.g., adoption or fostering agreements).

7. How We Use Personal Data

Personal data is used to:

• Process donations and maintain donor records
• Administer adoptions, fostering, and volunteering
• Respond to enquiries and correspondence
• Send updates, newsletters, and fundraising appeals (with consent)
• Comply with legal obligations.

8. Data Security

We implement appropriate technical and organisational measures to safeguard personal data, including:

• Restricted access to personal data
• Secure storage (password protection, encryption)
• Regular review of security practices.

9. Data Sharing and Third Parties

We do not sell or share personal data with third parties except:

• Where required by law
• With service providers who support our operations (e.g., payment processors), under strict confidentiality agreements
• With consent from the data subject.

10. Data Subject Rights

Individuals have the right to:

• Access their personal data
• Request correction or deletion of their data
• Object to or restrict processing
• Withdraw consent at any time (where consent is the lawful basis)
• Lodge a complaint with the Information Commissioner’s Office (ICO).

11. Data Breaches

Any data breach will be assessed and, where necessary, reported to the ICO within 72 hours. Affected individuals will be notified if there is a high risk to their rights and freedoms.

12. Review and Updates

This policy will be reviewed annually and updated as necessary to ensure ongoing compliance with data protection laws.

13. Contact

For data protection queries or to exercise your rights, contact:
Nine Lives Cat Rescue
 helloninelivescats@gmail.com