Privacy Policy

Last updated: 13 October 2026

This privacy notice explains how Spinney Hill Drugs, Alcohol & Addiction Support (“Spinney Hill”, “we”, “us”) collects and uses personal information when you use spinneyhill.org.uk (the “Website”), contact us, use our services, volunteer or make a donation. Spinney Hill is run by The Recovery Network, which is the data controller for the information described here.

Contact: 451 St Saviours Road, Leicester, LE5 4HJ · info@spinneyhill.org.uk · 0300 1240945

1. Information we collect

Information you give us

• Enquiries and contact forms – your name, email address, phone number and the content of your message.
• Volunteer applications – your name, email, phone, postcode, age range, availability, the areas you would like to help with, languages spoken, and anything you tell us about yourself and your experience.
• Donations – your title, name, email address, optional phone number, the amount and frequency of your gift and whether you are happy to hear from us. If you choose Gift Aid we also collect your home address, postcode and your Gift Aid declaration.
• Support and treatment – if you ask for help or start a recovery programme with us, we may collect information about your health, substance use and personal circumstances. This is “special category” information and we treat it with extra care (see section 3).

Information collected automatically

When you visit the Website we may collect technical information such as your IP address, browser and device type, and the pages you visit. See our Cookie Policy for details.

Information from others

If you are in treatment, limited information may be shared with us by partner services involved in your care, and we report anonymised treatment data to the National Drug Treatment Monitoring System (NDTMS).

2. How we use your information

• to reply to your enquiries and provide the support you ask for;
• to process your volunteer application and, if you join us, to manage your volunteering;
• to process donations, send you a receipt, administer monthly gifts and claim Gift Aid from HMRC where you have made a declaration;
• to keep accounting and legal records;
• to send you news about our work and appeals, only if you have told us you are happy to hear from us;
• to keep the Website secure and working properly.

3. Our legal basis

• Contract / taking steps at your request – processing your donation or volunteer application.
• Legal obligation – keeping financial records and Gift Aid declarations for HMRC.
• Legitimate interests – responding to enquiries, running our services, preventing fraud and keeping the Website secure.
• Consent – marketing emails and non-essential cookies. You can withdraw consent at any time.
• Special category (health) information – processed with your explicit consent, or where necessary to provide health or social care, or to protect someone’s vital interests.

4. Online donations and payments

Online donations are processed by Stripe (Stripe Payments Europe Ltd / Stripe Payments UK Ltd). When you click “Continue to secure payment” you are taken to a Stripe-hosted page to enter your card details. Your card details are never stored on our website or seen by us. We receive your name, email, the amount, and a payment reference from Stripe. Monthly donations are set up as a recurring payment with Stripe and continue until you cancel; you can cancel at any time by emailing info@spinneyhill.org.uk. Stripe’s privacy policy is at stripe.com/gb/privacy.

If you donate by bank transfer, we receive the information your bank includes with the payment.

5. Gift Aid

If you make a Gift Aid declaration we keep your name, home address, postcode, the date of your declaration and your donations so we can claim Gift Aid from HMRC and show HMRC our records if asked. We share the minimum required information with HMRC when we make a claim. Please tell us if you want to cancel your declaration, change your name or address, or no longer pay enough Income Tax and/or Capital Gains Tax.

6. Who we share information with

We never sell your personal information. We share it only where necessary with:

• Stripe – to process online payments;
• HMRC – for Gift Aid claims;
• our website host and IT/email providers, who store data on our behalf under contract;
• partner treatment services and public health bodies, where needed for your care (treatment monitoring data is anonymised);
• the police, courts or regulators where we are legally required to, or to protect someone from serious harm.

7. How long we keep information

• Donation and Gift Aid records – 6 years after the end of the financial year of your last donation, as required by HMRC.
• Enquiries – up to 2 years after our last contact with you.
• Volunteer applications – up to 12 months if you do not go on to volunteer; for the length of your volunteering and 2 years afterwards if you do.
• Support and treatment records – for the period required by health and care record-keeping guidance. If you share information but do not start treatment, we keep it for a limited period only.

8. International transfers

Some of our providers (for example Stripe and Google) may process data outside the UK. Where they do, they use legal safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum.

9. Your rights

Under UK data protection law you have the right to access your information, have it corrected, ask us to delete it, restrict or object to our use of it, ask for it to be transferred, and withdraw consent at any time. Some rights are limited – for example we must keep Gift Aid records for HMRC. To use any of these rights email info@spinneyhill.org.uk. We will respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113. We would appreciate the chance to put things right first.

10. Security

We use appropriate technical and organisational measures to protect your information, including encrypted (HTTPS) connections, restricted access to our systems and secure third-party payment processing. No internet transmission is completely secure, but we work hard to protect your data.

11. Cookies

We use a small number of essential cookies. Analytics cookies (Google Analytics) are only used if you accept them through our cookie banner. Full details, and how to change your choice, are in our Cookie Policy.

12. Links to other websites

Our Website links to other sites, including social media. We are not responsible for their privacy practices, so please read their privacy notices.

13. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed.