Effective Date: May 9, 2026

1. Introduction

St. Catherine’s PTFA ("we," "us," or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and store your personal data when you visit our website (stcatherinesptfa.org.uk), sign up for our newsletter, volunteer, or interact with us. We are a registered charity in England and Wales (Charity No: 1209270).

2. What Data We Collect

Depending on how you interact with us, we may collect:

• Identity Data: First name and last name.
• Contact Data: Email address and mobile phone number.
• School Connection Data: Your child(ren)’s year group(s).
• Volunteer Data: Availability, skills, and confirmation of DBS check status (we do not collect or store actual DBS certificates or certificate numbers).
• Financial Data: If you make a donation or buy a ticket, the transaction is handled securely by our third-party payment processors (e.g., Ticket Tailor, Donorbox, Stripe, SumUp). We do not collect or store your credit/debit card details. We may store Gift Aid declarations if applicable.

3. How We Use Your Data & Our Lawful Basis

Under UK GDPR, we must have a "lawful basis" for processing your data:

• Consent: We rely on your explicit consent to send you our email newsletter and to add you to volunteer WhatsApp groups. (You can withdraw this consent at any time).
• Legitimate Interests: We process your data to manage our volunteer database, organise events, and run the daily operations of the PTFA.
• Legal Obligation: We may retain records of financial donations and Gift Aid declarations to comply with HMRC requirements.

4. WhatsApp and Third-Party Platforms

• WhatsApp Groups: If you opt-in to join a volunteer WhatsApp group, please be aware that this is a two-way communication channel. By joining, your mobile phone number will be visible to all other parents and volunteers in that specific group.
• Data Processors: We use secure, GDPR-compliant third-party tools to help run the PTFA. These include Notion (our secure volunteer database), Tally (for our sign-up forms), and Cloudflare (for website hosting). We only use platforms that meet strict data protection standards.

5. How Long We Keep Your Data

We only keep your personal data for as long as necessary.