Privacy Policy

Who we are

Our website address is:

SHAPE may change this policy from time to time by updating this page. You should check this page to ensure that you are happy with the current policy.

Our Policy

  1. SHAPE does believe GDPR is relevant to it as a charity i.e If SHAPE is sending individuals an email promoting a fundraising event for example, then SHAPE is deemed to be processing personal data to send these communications – therefore undertaking direct marketing and so will need a lawful basis under GDPR to do so.
  2. The lawful basis under which we do communicate is, quoting ICO standards, two fold i.e. A) Consent: the individual has given clear consent and F) Legitimate Interest: the processing is necessary for SHAPE’s  legitimate interests or the legitimate interest of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
  3. SHAPE does not seek, collect or hold any sensitive data such data consisting of racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation.
  4. We do not hold a central data base of people’s contacts and data.
  5. All SHAPE Trustees and Committee Members have access to personal email addresses and phone numbers used solely for the purposes of promoting fundraising events or providing news of SHAPE’s activities.
  6. SHAPE is not in the business of selling goods or services and therefore no marketing material related to this provision is ever distributed by SHAPE.
  7. SHAPE does not share individual data with any other charity, person or organisation.
  8. If any individual asks for their names to be removed, or for SHAPE to stop communicating with them, this will be actioned immediately and their names removed from email address books.
  9. Storage of information. Any email address and or phone numbers that committee members possess are stored on home PC’s secured by a password.


From the 25th May SHAPE Trustees and Committee Members will ensure that in all communications sent to individuals by email regarding the promotion of fundraising events the following text will appear:-

GDPR compliance:  You are receiving this email because in the past you have either supported SHAPE events or expressed an interest in being kept aware of the charity’s work.  If you wish to continue to receive this kind of information then you do no have to do anything and SHAPE will retain your contact details.  The only information we do hold about you is limited to your full contact details, and, if you have completed one, a record of your Gift Aid declaration.  If you wish to stop receiving communications from SHAPE then please email the sender of this email and your details will be deleted.


Cookies are small text files placed on a user’s computer hard drive by a website. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. The most common type of cookie is a session cookie. This website uses session cookies to store information whilst a visitor is using our website and stores information about which pages are visited and whether the user is logged in and what products are in the users cart. Typically they will expire within a few minutes of the user leaving the website.

Third-party cookies can be used to track and individuals internet activity and usually have a longer lifetime. The information the store can be accessed by the website and also refreshed when ever a user visits a page were the same or similar cookie is being used.

We use Google Analytics, Google Search Console to help us understand how visitors arrive at our website, how they use our website and to help us maintain the websites health. These Third-party cookies follow your progress through our website, collecting anonymous data on where you have come from, which pages you visit, and how long you spend on the site. This data is then stored by Google in order to create reports. These cookies do not store your personal data.

The information generated by the cookie about your use of the website, including your IP address, may be transmitted to and stored in the United States. Google may use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on their behalf. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Google’s privacy policy pages

Internet browsers normally accept cookies by default. You can set a browser to reject cookies. If you set your browser to reject cookies be aware that this may effect the functioning of your website. To ensure user experience is unaffected we suggest as a minimum that you choose an option that rejects all third party and long lived cookies.

How to access what personal information we hold

You have the right to request a copy of the information that we hold about you. If you would like a copy of particular personal information we hold about you then please get in touch. We will of course need to verify that you are the owner of any information we hold. If you believe that any information we are holding on you is incorrect or incomplete, please get in touch with us as soon as possible. We may make a small charge for information retrieval services.

Links to third-party websites

This Privacy Policy applies only to the personal data collected by SHAPE and does not apply to third party websites. SHAPE is not responsible for the privacy policies of other websites. We advise users to read the privacy policies of other websites before registering any personal data.