Privacy notice
How we collect, use and look after your personal information. Last updated 29 October 2026.
Who we are
New Luce Community Trust (“the Trust”, “we”) is the data controller for the personal information described here. We are a company limited by guarantee registered in Scotland, No. SC497287. Registered office: Montpelier Chartered Accountants, 1 Dashwood Square, Newton Stewart, DG8 6EQ.
Questions about your information: email sharon@newlucect.org or call 07442 576 220.
What we collect, and why
Membership
Your name, address, and if you give them, your email and phone number. We use them to keep the register of members that company law requires, to check you're eligible, and to send you notices and papers for general meetings. Lawful basis: legal obligation (the Companies Act 2006 register of members) and our agreement with you as a member.
Funding and schemes
The details on an expression of interest or application: contact details, information about your group or course, costs and, on paper forms, bank details for payment. We use them to assess and pay grants, and to monitor how grants are used. Successful projects may be announced, as the forms explain. Lawful basis: taking steps at your request before an agreement, and our legitimate interest in running the funds properly.
Messages
When you contact us, we use your details to reply. Lawful basis: our legitimate interest in answering you.
The website forms ask you to tick a box agreeing to this. We only ask for what we need: for example, the membership form asks you to confirm you're 18 or over, rather than asking for your date of birth.
Who sees it
Your information is seen by the Trust's Development Officer and directors who need it. We never sell it, and we don't share it with anyone else unless the law requires it or you've agreed (for example, to a taxi firm for the Taxi Card Scheme).
We use these services to run the website, and they process data for us under contract:
- Vercel (website hosting) and Neon (the database, in London), where form submissions are stored;
- Cloudflare, for file storage and spam protection (Turnstile, which checks a form is sent by a person);
- Formspree, which forwards form submissions to our email. Formspree is in the USA; transfers are covered by the UK's data bridge or standard contractual clauses.
Files attached to a funding enquiry are kept privately for the Trust, never published. If visitor statistics are switched on, Google Analytics runs only if you agree to it: see cookies.
How long we keep it
- Register of members: while you're a member, and then for 10 years, as company law requires for former members' entries.
- Grant and scheme applications: 6 years after the end of the financial year the grant was paid in (for accounting and audit).
- Unsuccessful applications and enquiries: 12 months.
- Messages: 12 months after we've dealt with them.
Your rights
You can ask to see the information we hold about you, have it corrected, deleted or restricted, object to how we use it, or take back your consent. Contact us using the details above. We'll reply within one month.
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.