Legal, Privacy Policy, T&Cs
Bath Community Kitchen CIC — Privacy Policy
Last updated: 16 October 2026
1. Who we are
Bath Community Kitchen CIC (“BCK”, “we”, “us” or “our”) is a community interest company in England. We use food and cooking to bring people together, support wellbeing, reduce isolation and help make good food accessible to everyone.This policy explains how we collect, use, store and protect personal information when you visit our website, contact us, sign up for our newsletter, book a workshop, make a catering enquiry or interact with us in other relevant ways.
Organisation: Bath Community Kitchen CIC
Company registration number: 15054589
Email: info@bathcommunitykitchen.org.uk
Postal address: Hazelbury Cottage, Hazelbury Hill, Box, SN13 8LB
BCK is responsible for deciding how and why personal information covered by this policy is used.
2. What information we collect
The information we collect depends on how you interact with us.
Information you provide directly.
When you contact us, make a catering enquiry, book a workshop or sign up for our newsletter, we may collect:
- Your name.
- Your email address.
- Information you include in a message or enquiry.
- Workshop booking details and relevant records of participation.
- Information needed to respond to catering enquiries.
- Newsletter subscription preferences and records of your subscription.
- Records of relevant communications with you.
For workshop participants, we collect names and email addresses. We do not routinely collect sensitive personal information about workshop participants
Information collected through our website
When you visit our website, technical information may be collected automatically. Depending on the technologies enabled, this may include:
- Your IP address.
- Browser type and version.
- Device and operating system information.
- Information about how you navigate and use the website.
- Technical logs used to maintain website security.
We use Google Analytics to understand how visitors use our website. Further information is provided in section 6.
Information from third parties
We may receive information from third parties where it is relevant to an enquiry, booking, donation or other interaction with BCK. For example, GoodHub may provide us with information about donations made to BCK through its platform. The information we receive depends on the service used and the details made available to us.
3. How and why we use your information
We use personal information for the following purposes:
We use the legal basis appropriate to each activity and do not use personal information for unrelated purposes without an appropriate legal basis.
4. Newsletter sign-ups and marketing
People can sign up for BCK's newsletter through forms on our Wix website. We use Mailchimp to manage our mailing list and distribute newsletters.We use the information provided to send updates about our community meals, cookery workshops, fundraising, activities and other BCK news.We will only send marketing emails where we have an appropriate legal basis, including consent where required. We will retain appropriate records of newsletter subscriptions and consent where applicable.You can unsubscribe at any time using the link in our emails or by contacting info@bathcommunitykitchen.org.uk.
After you unsubscribe, we will stop sending you newsletter marketing. We may retain a limited suppression record where necessary to ensure that we respect your request and do not add you back to the mailing list inadvertently.Signing up for a workshop or making an enquiry does not automatically subscribe you to our newsletter.
5. Donations through GoodHub
BCK receives donations through GoodHub, an external fundraising platform.When you make a donation through GoodHub, the platform processes your information in accordance with its own privacy policy and terms. Payment processing is handled through the relevant external payment arrangements rather than directly by BCK through our website.
Depending on the transaction and information made available to us, BCK may receive information such as your name, donation amount, transaction details and information needed to administer or reconcile the donation.We use relevant information to administer donations, maintain financial records, meet applicable accounting and legal obligations, and manage our fundraising activities.We do not automatically add donors to our newsletter mailing list. We will only send marketing communications where we have an appropriate legal basis.You can read GoodHub's privacy policy at:https://www.goodhub.com/privacy-policy/
6. Cookies and Google Analytics
Our website uses Google Analytics to help us understand how visitors use the site and to improve its content and functionality.Google Analytics may use cookies or similar technologies to collect information about website visits, visitor interactions, devices and browsing activity. Google processes information in accordance with its applicable terms and privacy information.Analytics cookies are not strictly necessary for the website to function. We will obtain consent before using them where required by law. Our website should provide a suitable way to accept or reject non-essential cookies and change cookie preferences.We may also use cookies or similar technologies required for the website's basic operation, security and functionality where permitted by law.
The precise cookies, durations and settings depend on the website's current configuration. We will keep these details under review and provide accurate cookie information through our website's cookie notice or consent mechanism.
You can also manage cookies through your browser settings, although blocking some cookies may affect website functionality.
7. Who we share information with
We do not sell personal information.Where necessary, we may share relevant information with:
- Wix, which provides our website platform and associated website functionality.
- Mailchimp, which manages and distributes our newsletters.
- Google, in connection with Google Analytics.
- GoodHub and relevant payment service providers, in connection with donations.
- Other service providers where they are needed to support our activities.
- Professional advisers, regulators, law-enforcement bodies or public authorities where required or permitted by law.
We share only information reasonably necessary for the relevant purpose. Where a provider processes personal information on our behalf, appropriate arrangements should be in place to protect it.
8. International transfers
Some of our service providers may process or store information outside the United Kingdom.Where personal information is transferred internationally, we will ensure that the transfer complies with applicable UK data protection law, using an appropriate transfer mechanism where required.The relevant arrangements may depend on the provider and the services enabled. Further information about applicable safeguards can be requested using the contact details in this policy.## 9. How we protect your informationWe take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, misuse or disclosure.
Access should be limited to people who need the information for their role, and anyone handling information on BCK's behalf should do so appropriately and securely.No method of transmitting or storing information electronically can be guaranteed to be completely secure.If a personal data breach occurs, we will assess it and take the steps required by law, including notifying the Information Commissioner's Office and affected individuals where legally required.
10. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, taking account of applicable legal, accounting and reporting requirements.
Our retention approach includes the following:
- Workshop participants: Names and email addresses are retained for the administration of workshops and any necessary follow-up. Our proposed standard retention period is 24 months after the workshop or last relevant contact, after which the information will be deleted unless a specific, documented reason justifies longer retention.
- General and catering enquiries: Information is retained for as long as needed to respond to the enquiry and maintain appropriate records. Our proposed standard period is up to 24 months after the enquiry closes, unless an ongoing relationship, contract, dispute or other justified need requires longer.
- Newsletter subscribers: Information is retained while you remain subscribed. We may retain limited suppression information after you unsubscribe to ensure that your preferences are respected.
- Donation and financial records: Relevant records are retained for the periods required by applicable accounting, tax and other legal obligations. Company tax and accounting records commonly need to be kept for at least six years, with longer periods where specifically required.
- Website analytics: Information is retained according to the configured Google Analytics retention settings and our justified operational requirements.
- Anonymous statistics: Information that has been genuinely anonymised so that individuals cannot be identified may be retained for long-term impact reporting, research and statistical purposes.
These periods are intended to provide a practical framework and will be reviewed against our actual operational and legal requirements. We will not keep identifiable personal information indefinitely merely in case it might be useful.
11. Your data protection rights
Under applicable data protection law, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of personal information in certain circumstances.
- Restrict processing in certain circumstances.
- Object to certain types of processing, including processing based on legitimate interests.
- Request data portability where the legal conditions are met.
- Withdraw consent where we rely on consent.
These rights are subject to legal conditions and exceptions and do not apply in every situation.You can unsubscribe from marketing emails at any time. If we rely on legitimate interests to process your information, you may also have a right to object.
To exercise your rights, contact info@bathcommunitykitchen.org.uk. We may need to verify your identity before responding.We will respond within the time limit required by law, normally one month. Where the law permits an extension, we will explain this to you.
12. How to complain
If you are concerned about how BCK uses your personal information, please contact us first so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office (ICO):
Website: https://ico.org.uk/make-a-complaint/
Telephone:** 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
13. Links to other websites
Our website may contain links to websites operated by other organisations. Those organisations are responsible for their own privacy and data-handling practices.We encourage you to read the privacy notice of any external website or service before providing personal information.
14. Children's information
BCK does not collect children's personal data directly through its website forms as part of the activities covered by this policy.
If our practices change and we begin collecting personal information directly from children, we will review our arrangements and update our privacy information accordingly.
15. Changes to this policy
We may update this policy when our activities, website, service providers or legal obligations change.The latest version will be published on our website, with the date of the latest update shown at the top.
16. Contact us
If you have questions about this policy or how Bath Community Kitchen CIC handles personal information, please contact:
Bath Community Kitchen CIC, Hazelbury Cottage, Hazelbury Hill, Box, SN13 8LB
