PRIVACY POLICY

Generate is committed to upholding and protecting your rights in respect of your privacy and personal data. This privacy policy will demonstrate how we collect and protect information about you (your “personal data”) when you engage with our website and services.

WHO WE ARE

Generate is a charity that supports transgender, non-binary, gender-diverse and gender-questioning adults across North Yorkshire.

Generate is registered as a charity with the Charity Commission (Number 1197920) at Blake House, 18 Blake Street, York, YO1 8QG.

HOW DO WE COLLECT INFORMATION FROM YOU?

We obtain personal information from beneficiaries and supporters when you enquire about our services, engage with our services, send or receive an email or message, make a donation to us or otherwise provide us with your personal information.

We collect personal information for volunteers and staff through the application and recruitment process. We may sometimes collect additional information from third parties including former employers or other background check agencies. We may collect additional personal information in the course of job-related activities throughout the period of you working for us.

WHAT PERSONAL INFORMATION DO WE COLLECT AND WHY?

We may collect, use and store the following kinds of personal data:

```
your name
```
```
your pronouns
```
```
your date of birth
```
```
your contact details
```
```
your address
```

general information about your circumstances

```
notes from any support sessions
```
```
equalities monitoring information
```
```
any reasonable adjustments necessary
```

information on tax payer status to enable us to claim Gift Aid

information about activities/interaction on our website or social media platforms e.g. the device being used, IP address and location

any other personal information you provide to us

HOW WE USE YOUR PERSONAL DATA

We use your personal data for many reasons, which includes, but may not be limited to, the following:

```
to process your donations
```

to sign you up to support services and activities

keep a record of your relationship with us

respond to or fulfil any requests, complaints or queries you make to us

```
further our charitable objectives
```

to sign you up to receive email communications

to contact you via phone or email or otherwise whilst using our services

HOW DO WE KEEP YOUR INFORMATION SAFE?

We are committed to keeping your information secure. To prevent unauthorised access, misuse or disclosure, we have implemented appropriate physical, electronic and managerial safeguards to protect the information we collect both online and in person.

Access to records is strictly limited to authorised personnel on a need-to-know basis, and all security arrangements are regularly reviewed to ensure their continued effectiveness and suitability. We also maintain ongoing monitoring and updates to our systems to address potential risks and enhance protection.

HOW LONG WE KEEP YOUR PERSONAL DATA

We only keep personal information for as long as it is needed for the purposes for which it was collected, or as required by law. Once information is no longer needed, it is securely deleted or anonymised.

Retention periods may vary depending on the type of information and the legal or regulatory requirements that apply. Access to retained data is strictly limited, and we regularly review our records to ensure personal information is not kept for longer than necessary.

WHAT IF I WANT TO WITHDRAW MY INFORMATION?

If you are using our services and would like to withdraw your personal information, you can ask us to action this, although in some cases we may not be able to support you any more if we need your personal data for that to happen. We will tell you if this is likely to be the case.

If you wish to unsubscribe from our mailing list at any time, you can do so by contacting us at info@generate.org.uk and we will promptly remove you.

Any subject access requests will be handled by Generate promptly and within the required time limit of 30 days.

DISCLOSURES OF YOUR PERSONAL DATA

We will only ever disclose your personal data in a few minimal ways. For example, if there is a safeguarding concern, we would then contact other services that could help - we will always try and get your permission first.

Additionally, we can share some details with HMRC, or if the law necessitates sharing personal data. We may only share information with any venues or organisers that are running events for or with us. We only share the information that we need to share and will not share any information which is not required. We may need to share your information with our various regulators such as the Charity Commission.

MARKETING

We will only send you electronic marketing messages by email where your consent has been obtained and you have indicated that you want to receive these from time to time. You can opt out at any time by contacting us or unsubscribing.

YOUR RIGHTS

You have several rights over your data. If you want to do any of these things, please contact info@generate.org.uk. Please note, that some of these rights are not guaranteed. For example, you can always ask for a copy of your data, but if you ask us to delete something that we have a legal obligation to hold (such as information about a donation) then we may not be able to comply.

The right to be informed about the collection and use of personal data

The right to access personal data and supplementary information

The right to have inaccurate personal data rectified, or completed if it is incomplete

The right to erasure (to be forgotten) in certain circumstances

The right to restrict processing in certain circumstances

The right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services

The right to object to processing in certain circumstances

Rights in relation to automated decision making and profiling

This policy was last updated February 2026.