Privacy Notice – The Rosary Shop

Last updated: 13 July 2026

This notice explains how personal information is handled through restorebritain.site and the Restore Britain Croydon operation.

Who is responsible

Restore Britain Ltd is currently identified as the data controller. The Croydon operation administers this site on its behalf. Contact our privacy team at [email protected]. Our public correspondence address is Suite 4, Millennium House, Gapton Hall Road, Great Yarmouth, Norfolk, NR31 0NL.

Information we collect

Depending on how you use the site, we may collect your name, contact details, postcode or approximate locality, membership/application status, account and security information, communications, community posts and media, orders, delivery details, payment references, donation records, communication preferences, and Google Analytics information about visits, devices and navigation through the site.

Future optional member profiles may also collect an age band, skills, profession, interests, volunteering availability, driving and vehicle access, passenger capacity, accessibility needs, transport radius and an emergency contact. Each field must explain its purpose and visibility. Exact dates of birth and precise live location are not collected unless a separate necessity is established.

Poll responses or community activity may reveal political opinions. Political opinions are special-category data. Where we ask for them, we will give a specific notice, identify both the ordinary and special-category lawful conditions, minimise links to identity and publish only suitably aggregated results.

Why and on what basis

To assess applications and take steps towards membership.
To administer membership, accounts, orders, donations and requested services under a contract.
To comply with financial, safeguarding and other legal obligations.
For legitimate interests such as site security, fraud prevention, moderation, responding to enquiries and improving operations, after considering your rights.
To understand visits, popular pages and navigation through Google Analytics so that we can measure and improve the website.
With consent for optional profile uses, non-essential communications and other purposes described when you choose them. You may withdraw consent at any time.
In an emergency, where processing is necessary to protect vital interests.

We do not use solely automated decisions producing legal or similarly significant effects.

Who receives information

Access is limited by role. Relevant information may be handled by authorised Restore Britain staff and service providers supporting hosting, email, security, analytics, payments and fulfilment. Google receives analytics information about visits, devices and navigation. For shop orders, the supplier for the purchased product—currently Inkthreadable or Two Fifteen—may receive the minimum delivery and order details needed to fulfil it. Payment providers handle card information; we should receive only transaction references and necessary payer records.

We do not sell personal information. Member profile details are not made searchable to ordinary members by default. Content is shown only according to its selected members-only or public visibility.

International transfers

We prefer UK-hosted and sovereign systems, but some providers or subprocessors may process information outside the UK. Before such use, we must document the destination, contract and a lawful UK transfer safeguard, such as UK adequacy regulations or approved contractual safeguards plus a risk assessment. Ask us for current provider details.

Retention

Application identity fields are removed after approval or rejection; a minimal decision audit is retained for up to 24 months.
Active membership information is reviewed annually. Optional profile, transport and emergency information is removed within 30 days of withdrawal or membership ending unless another disclosed legal need applies.
Routine security logs are normally kept for 90 days; substantiated incident evidence is retained only as justified.
Poll ballots are normally kept for no more than 12 months and abuse signals for 90 days; each poll may state a shorter schedule.
Orders, donations, refunds and necessary financial records may be kept for six years.
Routine enquiries are kept for 12 months and complaints for three years after closure.
Encrypted rolling backups expire within 90 days. Deletions are reapplied if a backup is restored.

Security

We use encrypted connections, restricted role-based access, audit records, updates, monitoring and backups. Privileged users must use individual accounts, strong authentication, confidentiality obligations and periodic access review. No internet service can promise absolute security.

Your rights

You may ask for access, correction, erasure, restriction, objection or portability where the law provides it, and may withdraw consent. Objections to direct marketing are absolute. Contact [email protected]; we normally respond within one month after proportionate identity checks.

You may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Please contact us first if you are comfortable doing so.

Other people’s information

If you provide an emergency contact, tell that person that you have done so and direct them to this notice. Do not submit unnecessary sensitive information about anyone else.

Changes

We will update this page when processing changes and will draw material changes to members’ attention where appropriate.