Privacy notice
Who we are
Community First Yorkshire is a charity that supports communities, voluntary organisations and local groups across North Yorkshire. We are the data controller for the personal information described in this notice.
If you have any questions about this notice or how we use personal data, you can contact us using the details at the end of this page.
How we collect personal information
We collect personal information when you:
- Visit our website
- Contact us by email, phone or post
- Fill in a form on our website
- Register for an event or activity
- Take part in one of our projects or programmes
- Sign up to receive newsletters or updates
We may also collect limited technical information when you visit our website, such as IP address and usage data. This information does not normally identify you directly.
What information we collect
Depending on your interaction with us, we may collect:
- Name and organisation
- Contact details (such as email address and telephone number)
- Role or relationship to a community group or organisation
- Information you provide in forms or correspondence
- Information relating to participation in projects or events
We aim to collect only the information we need for the purpose it is being used.
How we use your information
We use personal information to:
- Deliver our services and projects
- Respond to enquiries and requests
- Manage events, training and activities
- Maintain records for monitoring, reporting and evaluation
- Improve our services and understand how we are used
- Communicate with you about activities you are involved in
We do not sell or rent personal data.
Lawful bases for processing
Under UK GDPR, we must have a lawful basis for using personal data. The main bases we rely on are:
Legitimate interest
We use this where it is necessary to deliver our services, projects and activities, and where this use is reasonable and expected. For example:
- Contacting you about a project or event you are involved in
- Responding to enquiries
- Managing relationships with community groups and partners
Consent
We use consent where required, particularly for:
- Email newsletters and marketing communications
Where we rely on consent:
- It will be clear what you are agreeing to
- Consent is optional
- You can withdraw consent at any time
Marketing and newsletters
We will only send you marketing or newsletter emails if:
- You have explicitly opted in, or
- We are contacting you about something closely related to an activity or service you requested, and you were given a clear opportunity to opt out
You can unsubscribe at any time by using the link in our emails or by contacting us.
Use of third-party systems
We use secure third-party systems to store and manage personal data, including:
- Website and form platforms
- Customer relationship management (CRM) systems such as Plinth
- Email communication platforms such as Brevo
These systems are used only to support our work and are subject to appropriate data protection agreements.
Data retention
We keep personal data only for as long as necessary for the purpose it was collected.
Retention periods vary depending on the type of data and our legal or funding obligations. Data is reviewed periodically and securely deleted when no longer needed.
Printed records are handled with the same care as digital records and are securely disposed of when no longer required.
Your rights
You have rights under UK GDPR, including the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to how your data is used
- Withdraw consent where consent is the lawful basis
- Complain to the Information Commissioner’s Office (ICO)
To exercise your rights, please contact us using the details below.
Cookies and website usage
Our website uses cookies to help it function properly and to understand how visitors use the site.
Non-essential cookies are only used where appropriate consent has been given. You can manage your cookie preferences through your browser settings or our cookie banner.
External links
Our website may include links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy notices.
Contacting us
If you have questions about this privacy notice, how we use your data, or wish to make a Data Subject Access Request, please contact:
Email: info@communityfirstyorkshire.org.uk
For the attention of: Jane Colthup
Telephone: 01904 704177
Postal address:
Community First Yorkshire
Unit A, Tower House
Askham Fields Lane
Askham Bryan
York YO23 3FS
You also have the right to complain to the Information Commissioner’s Office at www.ico.org.uk.
Changes to this notice
We may update this privacy notice from time to time. Any changes will be published on our website.
Last updated:
October 30, 2025