This privacy notice tells you what to expect us to do with your personal information.
Personal data we collect
We collect or use the following information:
- applicant name and contact details
- organisation/school information
- project description
- funding requested and justification
- supporting documents relevant to the assessment
- payment or banking details
How we protect your data
We are committed to keeping your data secure. We store any data provided in secure computer systems that only trustees have access to. Where paper copies of personal data exist (e.g. completed application forms) they are stored in a secure location that can only be accessed by trustees.
How we use your data
We use information in grant applications for the follow purposes:
- assess grant eligibility and suitability
- make funding decisions
- contact applicants about their submission and decision
- make payments
- maintain records for audit and reporting
- meet legal and regulatory obligations
- respond to enquiries
How long we keep information
Application data are retained securely for up to 7 years for audit and regulatory purposes, then deleted or destroyed securely.
Information is shared only with trustees, professional advisers (as required), and regulators when legally necessary. We do not sell personal data.
Our lawful bases for the collection and use of your data
Under UK data protection law, we must have a lawful basis for collecting and using your personal information:
- consent – we have permission from you after we gave you all the relevant information, and when you voluntarily provide information (e.g. submitting a grant application)
- legal obligation – we must collect or use your information so we can comply with the law
- legitimate interests – we are collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone
Your data protection rights
Applicants can request access, correction, deletion (where appropriate), restriction, or objection to processing. You can find out more about your data protection rights and the exemptions that may apply on the Information Commissioner’s Office website.
If you make a request, we must respond to you without undue delay and in any event within 1 month. To make a data protection rights request, please contact us using the contact details provided below.
Reviewing and changing how we use data
This Public Privacy Notice was last updated on 28 March 2026. We regularly review our use of personal data to ensure that what we do continues to be fair, transparent, safe, and legal. The Joseph Alexander Trust may sometimes change software or technologies, or how we work, and this may result in us changing which data we collect or how we use these data.
We will only use your data for the purposes set out above. If we want to use your data for any other purpose, we will contact you and seek your express permission before we conduct any such processing.
We will always seek to minimise the volume of data that we collect and use, and to only keep data for as long as we need to. Whenever any change is made to how we collect or use personal data we will update this Public Privacy Policy and any other relevant policies.
How to find out more or to make a complaint
We have endeavoured to make this Public Privacy Policy clear, informative, and understandable, but if it is not then please contact us and we will provide further information, as required. We will also look to improve the wording of this Public Privacy Policy, based on feedback. To provide feedback, ask for more details, or to make a complaint about our collection or use of your personal data then please contact us using the contact details provided below.
You can also complain to the Information Commissioner’s Office in the UK. For details, please visit their website (www.ico.org.uk/make-a-complaint) or contact them by telephone (0303 123 1113).
How to contact us about your personal data
The Joseph Alexander Trust takes your privacy seriously and is committed to handling personal data responsibly and transparently.
We have reviewed our obligations under UK data protection law and are not required to appoint a formal Data Protection Officer, as the trust does not carry out large‑scale or high‑risk processing of personal data. Instead, responsibility for data protection is overseen by a nominated trustee acting as the trust’s Data Protection Lead.
If you have any questions about how we use your personal data, would like to exercise your data protection rights, or have a concern about how your information is handled, you can contact us using the details below:
Email: joseph.alexander.trust@gmail.com Further information about how we collect, use, and protect personal data is set out in our Data Protection Policy.
