Privacy Policy

Privacy Notice

CRH Charitable Trust

1. Introduction

The CRH Charitable Trust ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store and protect personal data in accordance with applicable data protection laws, including the UK GDPR and Data Protection Act 2018.

This notice applies to visitors to our website, applicants for funding, partner organisations, and any individuals whose data we may process in connection with our charitable activities.

2. Who We Are

CRH Charitable Trust is a grant-giving charitable organisation that supports community, environmental, educational, and social initiatives, as outlined on our website.

If you have any questions about this notice, you can contact us via the website contact details.

3. Personal Data We Collect

We may collect and process the following types of personal data:

  • Contact information (e.g. name, email address, phone number)

  • Organisation details (e.g. organisation name, role, address)

  • Application information (e.g. project details, funding requests, beneficiaries, supporting narratives)

  • Financial information (e.g. income, accounts, funding secured, budgets)

  • Uploaded documents (e.g. accounts, proposals, supporting evidence)

  • Declarations and signatures submitted as part of applications

  • Historical application data (e.g. previous applications and outcomes)

  • Communication records (e.g. emails, enquiries, feedback)

  • Website usage data (e.g. IP address, browser type, pages visited)

4. Special Category Data

Some applications may include information relating to vulnerable groups (e.g. individuals with mental health conditions or disabilities). Where this occurs, we process such data only where necessary for assessing grant applications and in line with applicable legal safeguards.

5. How We Use Your Information

We use personal data to:

  • Assess and process grant applications

  • Evaluate eligibility against our funding criteria

  • Support trustee review and decision-making

  • Carry out due diligence and fraud prevention

  • Communicate with applicants and partner organisations

  • Monitor and evaluate funded projects

  • Maintain records of applications, including unsuccessful applications

  • Improve our website and services

  • Comply with legal and regulatory obligations

6. Lawful Basis for Processing

We process personal data on the following lawful bases:

  • Legitimate interests – to manage and administer our charitable activities

  • Consent – where you have provided consent (e.g. optional communications)

  • Legal obligation – where required for compliance with laws and regulations

  • Contractual necessity – where processing is necessary to fulfil grant agreements

7. Sharing Your Information

We may share your personal data with:

  • Trustees and grant administrators involved in decision-making

  • Service providers supporting our website or administration

  • Regulators or authorities where required by law

We do not sell personal data.

8. Data Retention

We retain personal data only for as long as necessary:

  • Successful applications: for the duration of the grant relationship and a reasonable period thereafter for legal and reporting purposes

  • Unsuccessful applications: for a limited period (typically up to 2–3 years) for record-keeping, audit, and future reference

9. Data Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or disclosure.

Documents submitted via the grant form are stored securely and only accessed by authorised individuals involved in the grant assessment process.

10. Automated Decision-Making

We do not use automated decision-making. All funding decisions are made by trustees.

11. Your Rights

Under UK data protection law, you have rights including:

  • The right to access your personal data

  • The right to correct inaccurate data

  • The right to request deletion ("right to be forgotten")

  • The right to restrict or object to processing

  • The right to data portability

  • The right to withdraw consent at any time (where applicable)

To exercise your rights, please contact us via the website.

12. Cookies and Website Data

Our website may use cookies or similar technologies to enhance user experience and analyse site traffic. You can control cookies through your browser settings.

13. Changes to This Notice

We may update this Privacy Notice from time to time. Updates will be posted on our website with a revised effective date.

14. Contact Us

If you have any questions about this Privacy Notice or how your data is handled, please contact us through the contact information provided on our website.

Effective Date: 27/3/2026