Privacy Policy

•       About this policy

•       Who we are

•       The information we collect

•       How we use your information, and our lawful basis

•       Fundraising and marketing

•       Cookies

•       Who we share your information with

•       Sending information outside the UK

•       How long we keep your information

•       Keeping your information secure

•       Your rights

•       Automated decision-making

•       Other websites

•       How to complain

•       Changes to this policy

• This policy explains what the Royal Air Force Charitable Trust (RAFCT) does with your personal information: when you contact us, when you sign up for our communications, when you donate or fundraise for us, and when you deal with us on behalf of an organisation applying for or holding one of our grants.

  The Trust makes grants to organisations in line with its Purpose:

  Promote the RAF and Inspire young people, including RAF personnel, to fulfil their potential in air, space and technology.

  Those organisations deliver the activities. We do not run activities directly and we do not hold personal information about the young people who benefit from them.

The Royal Air Force Charitable Trust ("RAFCT", "the Trust", "we", "us") is a registered charity in England and Wales, charity number 1176054. Our registered address is Douglas Bader House, Horcott Hill, Fairford, Gloucestershire, GL7 4RB. We are the controller of the personal information described in this policy.

We are registered with the Information Commissioner's Office under registration number ZA507803. We are a registered Charity (no. 1176054).

The Royal Air Force Charitable Trust Enterprises is our trading subsidiary. It runs the Royal International Air Tattoo (RIAT) and annually Gift Aids the proceeds generated from RIAT to  us. It is a separate organisation and a separate controller, with its own privacy policy on its own website. If you bought a ticket, volunteered, applied for a site pass or applied for a job in connection with RIAT, that is Enterprises and not the Trust, and their policy applies to it, not this one.

Our data protection contact

The Trust has not designated a statutory Data Protection Officer, because we do not meet the criteria in Article 37 of the UK GDPR that would require us to appoint one. Responsibility for data protection within the Trust sits with Dr Kevin P Stenson, Director.

Contact us about anything in this policy at trust-admin@rafct.com, on +44 (0)1285 713 300, or by writing to Data Protection, The Royal Air Force Charitable Trust, Douglas Bader House, Horcott Hill, Fairford, Gloucestershire, GL7 4RB.

• Your details: name, email address, telephone number, postal address and job title where you give it to us.
• Your donation and fundraising history: what you gave, when, how and whether you made a Gift Aid declaration.
• Payment information: collected and processed by our donation platform and payment providers. We do not store full card numbers.
• You communication preferences: what you have asked to receive from us and what you have opted out of.
• Your correspondence: enquiries, feedback and anything else you send us.
• Grant information: where you are the contact at an organisation applying to us for a grant, or administering one we have awarded, we hold your name, role and contact details and the correspondence about the grant
• Website information: how you use our site, collected through cookies and similar technologies.

We do not ask you for special category information, meaning information about your health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, genetic or biometric data, sex life or sexual orientation. If we ever needed to, we would tell you at the time, explain why, and ask for your explicit consent.

We do not hold information about children or young people. Our charitable work is delivered through grants. We fund organisations that provide activities and opportunities for young people, and we deal with those organisations, not with the young people themselves. We do not collect or hold personal information about anyone under 18.

"Legitimate interests" means we have a genuine reason for using your information, we have weighed that reason against your rights and interests, and we are satisfied that what we do is reasonable and would not surprise you. You can ask us for the reasoning behind any entry above, and you have the right to object at any time.

We only send you fundraising and marketing communications where you have told us you want them. Every email has an unsubscribe link, and you can opt out at any time by using it, by emailing us or by calling us.

We are registered with the Fundraising Regulator and we follow the Code of Fundraising Practice. You can also stop charity communications through the Fundraising Preference Service at fundraisingpreference.org.uk.

We do not sell your information, we do not share it with other organisations for their own marketing, and we do not carry out wealth screening or build profiles of donors for fundraising purposes.

Our website uses cookies. Essential cookies are needed to make the site work. Others help us understand how the site is used. We ask for your consent before setting non-essential cookies and you can change your choice at any time. Our cookie policy explains each cookie, what it does and how long it lasts.

•       Service providers acting on our instructions: our donation platform, payment providers, email provider, IT and hosting suppliers and our professional advisers. They may only use your information to provide their service to us, under a written contract.

•       The Royal Air Force Charitable Trust Enterprises, our trading subsidiary, where that is necessary for something you have asked for and where we have told you at the time. We do not pass your details to Enterprises for its own marketing.

•       HM Revenue and Customs, for Gift Aid.

•       The Charity Commission and other regulators, where required.

•       Our auditors, insurers and lawyers, where they need it.

Some of our service providers store information outside the UK. Where your information is transferred outside the UK, we make sure it is protected by a safeguard allowed under UK data protection law, which is normally either a UK adequacy decision or a UK International Data Transfer Agreement or Addendum. 

When a retention period ends we delete the information, or anonymise it so that it can no longer identify you.

We use technical and organisational measures to protect your information against loss, misuse and unauthorised access, and we limit access to those who need it for their role.

You have the following rights over the personal information we hold about you.

• To be told how we use your information. That is what this policy is for.
• To get a copy of the information we hold about you. The first copy is free.
• To have it corrected if it is wrong or incomplete.
• To have it deleted in certain circumstances.
• To restrict what we do with it while a question about it is resolved.
• To object to us using it, including where we rely on legitimate interests, and at any time where we use it for direct marketing.
• To ask us to transfer it to another organisation, where you gave it to us and we process it by automated means on the basis of consent or a contract.
• To withdraw your consent at any time, where we asked for it. That does not affect anything we did before you withdrew it.

To use any of these rights, contact us using the details above. We will respond within one month, and we will tell you if we need to extend that. There is no charge. We may charge a reasonable fee, or refuse, only where a request is manifestly unfounded or excessive, or where you ask for further copies of the same information.

We do not make any decision about you by automated means alone, and we do not carry out profiling that produces legal effects for you or similarly significantly affects you.

Our website links to other websites. We do not control them and we are not responsible for their privacy practices or their content.

If you are unhappy with how we have handled your personal information, please tell us first so that we can try to put it right.

You also have the right to complain to the Information Commissioner's Office at any time. You do not have to raise the matter with us first.

•       Online: ico.org.uk/make-a-complaint

•       By telephone: 0303 123 1113

•       By post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

If your complaint is about our fundraising, you can also complain to the Fundraising Regulator at fundraisingregulator.org.uk.

We review this policy at least once a year, and whenever we make a significant change to how we use personal information.