Who We Are
Disability Resource Centre (DRC) is a registered charity in England and Wales (Charity Registration Number: TBD). We are committed to protecting your privacy and ensuring you have a positive experience on our website and when you interact with us.
Data Controller: Disability Resource Centre, Poynters House, Poynters Road, Dunstable, LU5 4GD, United Kingdom. Email: [email protected]
What Data We Collect
We collect personal information only when you voluntarily provide it to us, such as when you:
- Submit enquiry forms on our website
- Request information about our services
- Make a donation or register for an event
- Subscribe to our newsletter
- Contact us by email or phone
- Use our services or access our facilities
The information we collect may include:
- Your name, email address, phone number, and postal address
- Information about your disability or support needs (where relevant to our services)
- Financial information (for donations or service payments)
- Information about your interactions with us (such as event attendance or service use)
- Technical data (IP address, browser type, pages visited) collected automatically via cookies and analytics
How We Use Your Data
We use your personal data for legitimate purposes including:
- Service Delivery: To provide you with the support and services you have requested
- Communications: To respond to your enquiries and keep you informed about our services
- Newsletter: To send you updates about our work (only with your consent)
- Fundraising: To process donations and manage donor relationships (with your consent)
- Event Management: To organize events and communicate with participants
- Website Improvement: To analyze how you use our website and improve our services
- Legal Compliance: To comply with charity law and other legal obligations
- Safeguarding: To protect the safety and wellbeing of our service users and staff
Legal Basis for Processing
We only process your personal data where we have a valid legal basis under the UK General Data Protection Regulation (UK GDPR):
- Consent: When you have given explicit consent (such as for newsletter subscriptions or marketing communications)
- Contract: Where necessary to provide you with services you have requested
- Legal Obligation: To comply with charity law, safeguarding requirements, and other legal duties
- Legitimate Interest: Where we have legitimate interests in processing your data and these are not overridden by your rights (such as analyzing website usage to improve our services)
- Vital Interests: In exceptional circumstances, where processing is necessary to protect your vital interests or those of another person
Data Sharing
We do not sell or rent your personal data. We may share your information with:
- Service Partners: Third-party organizations that help us deliver our services (with appropriate data protection agreements)
- Funding Bodies: Government agencies or other funders as required for reporting and accountability
- Professional Advisors: Our accountants, auditors, and legal advisors
- Emergency Services: Law enforcement or emergency services where required by law or to protect safety
- Other Charities: With other disability organizations where you consent, to improve support coordination
All third parties are contractually obligated to protect your data to the same standard as we do.
Data Retention
We retain your personal data only for as long as necessary for the purposes it was collected:
- Service Users: Data is retained for the duration of your use of our services plus 7 years for accounting and charity law requirements
- Donors: Donation records are retained for a minimum of 6 years (tax requirements) plus 3 additional years
- Newsletter Subscribers: Data is retained until you unsubscribe
- Website Visitors: Analytics data is retained for up to 26 months
- Enquiries: Information from general enquiries is retained for 1 year unless you request deletion
Where possible, we delete or anonymize your data once it is no longer needed. If you request deletion, we will comply unless we have a legal obligation to retain it.
Your Rights
Under UK GDPR, you have the following rights:
- Right of Access: You can request a copy of the personal data we hold about you
- Right to Rectification: You can ask us to correct inaccurate or incomplete information
- Right to Erasure: You can request deletion of your data in certain circumstances ("right to be forgotten")
- Right to Restrict Processing: You can ask us to limit how we use your data
- Right to Data Portability: You can request your data in a structured, portable format
- Right to Object: You can object to certain uses of your data, including marketing
- Rights Related to Automated Decision-Making: You can request human review of decisions made by automated systems
To exercise any of these rights, please contact us using the details below.
Cookies
Our website uses cookies to improve your experience. Please see our separate Cookies Policy for detailed information about how we use cookies, including your cookie choices and how to manage them.
Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:
- Secure HTTPS encryption for all website communications
- Restricted access to personal data (staff only see data they need)
- Regular security assessments and staff training
- Secure data storage with password protection and backup systems
While we strive to protect your data, no system is completely secure. If a data breach occurs, we will notify you as required by law.
Contact the Data Controller
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we use your data, please contact us:
Disability Resource Centre
Poynters House
Poynters Road
Dunstable, LU5 4GD
United Kingdom
Email: [email protected]
Data Protection Officer: If you have a concern about how we handle your data, you can also contact the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes via email or by posting a prominent notice on our website. Your continued use of our services following any changes constitutes your acceptance of the updated policy.
Last Updated: 2026