Privacy Policy

This is the privacy notice for Artichoke Trust; registered office 28 Commercial Street, London E1 6AB, United Kingdom; limited company number 5429030; registered charity number 1112716.

Artichoke Trust is committed to protecting your personal information and being transparent about what information we hold about you.

Using personal data allows us to provide people with information about the work that we do and as a charity to engage with potential donors and supporters.

The purpose of this policy is to give you a clear explanation of how we collect and use your information.

We use your information in accordance with all applicable laws concerning the protection of personal information. We regularly review our privacy policy and will place any updates on this web page. The policy was last updated in December 2022.

Our Data Controller is Artichoke’s Head of Digital, Nia Shaw

Please contact us if you have any questions about our privacy policy or data that we hold about you:

By email to artichoke@artichoke.uk.com
In writing to Artichoke, 28 Commercial Street, London E1 6AB, United Kingdom

Personal Data

Personal data is any information which relates to a living person who can be identified from that data (or from that data plus other data that is held).

We have a commitment to protecting the privacy of personal data submitted to Artichoke Trust and follow the guidance of the General Data Protection Regulation 2018.

Personal data that we hold will be:

Processed lawfully, fairly and transparently
Collected for limited and specific purposes
The minimum required for those purposes
Accurate
Stored for a limited time
Kept updated and secure

We store and process personal data via Patronbase, AccountsIQ, Moneysoft, Mailchimp, Typeform, Microsoft 365, The Big Give, Stripe, SurveyMonkey, Shopify.

All listed companies offer Standard Contractual Clauses as a mechanism to provide appropriate safeguards for the protection of personal data for EU, UK and Swiss data protection purposes.

Third Parties

There are certain circumstances under which we may disclose your personal information to third parties. These are as follows:

To our own service providers who process data on our behalf and on our instructions (for example our ticketing system software provider). In these cases, we require that these third parties comply strictly with our instructions and with data protection laws, for example around security of personal data.
Where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example for Gift Aid purposes).

Security of Your Personal Information

We have in place appropriate safeguards (both in terms of our procedures and the technology we use) to keep your personal information as secure as possible. We will ensure that any third parties we use for processing your personal information do the same.

Your Rights to Your Personal Information

You have the right to request a copy of the personal information that we hold about you and to have any inaccuracies in this data corrected. Please use the contact details given at the top of this policy if you would like to exercise this right.

List of Websites

Artichoke manages a number of websites including:

If you visit any of these websites, including their subdomains, you accept and consent to the practices described in this Privacy Policy.

Third Party Links

There are links out to websites not controlled by Artichoke Trust given on our websites. These links should not be taken as endorsements of these third-party websites. We are not responsible nor do we have control of the content of these sites and we do not have input to their privacy policies.

Website Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information.

This information is used to track visitor use of the website so as to improve our site and content, and also so that we can compile statistical reports on website activity to report to our funders, in particular our main funder: Arts Council England. These cookies cannot identify you personally, but they use your computer’s IP address to locate where geographically you are accessing this site from.

The collection method we use is Google Analytics.

In addition, we use cookies provided by Facebook to personalise advertising to you on social media. These cookies use Personally Identifiable Information (PII) if it is available on your Facebook profile. You can find out more information about how Facebook Pixel cookies work on Facebook’s website.

We also embed content from third-party websites included but not limited to YouTube, Vimeo, and SoundCloud. When you access a page with this embedded content, these third-party websites may place cookies on your computer and Artichoke do not control how they do this. To find out more about each of their privacy policies, please visit their websites.

You can set your browser not to accept cookies and you can remove cookies from your browser. However, in a few cases some of our website features may not function as a result.

If you would like to disable cookies, here is more information on how to do so for the most popular browsers:

There is also a Google Analytics Opt-out Browser Add-on which can be installed on all of these browsers to opt out of Google Analytics cookies across all websites.

Mailing List Subscribers’ Data

The data we collect from our mailing list subscribers are:

Full name
Email address
Post code (this information is optional)

We also ask subscribers which art forms and Artichoke projects they are interested in. We collect this information so that we can let you know about our projects and tailor our emails to make sure they’re relevant to you. We may occasionally contact subscribers to ask if they would like to donate to Artichoke to support our work.

For subscribers who consent to receive surveys the information is used to send them surveys about projects and to enter them into a prize draw if they complete a survey. The surveys ask for ethnicity and disability details but this is not required. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and subscribers are not required to provide it.

The information is also used in aggregate data analysis such as tracking the effectiveness of communications through email opening rates.

The lawful basis for processing these data is Article 6 (1)(f) – legitimate business interests and/or Article 6(1)(a) – consent. We only collect and process your personal data for purposes that are in our legitimate organisational interests (to keep you informed about our work) if there is no overriding prejudice to you by using your personal information in this way. For any situations where it is not appropriate, we will ask for your explicit consent.

The data and consent are stored and recorded via Patronbase. The data is securely stored with access controls in place to prevent unauthorised access to the data. It will not be shared.

Subscribers may submit a Subject Access Request to access their personal data and are entitled to have it rectified if it is incorrect or incomplete. They may request the deletion of their personal data at any time or to block further processing. They may object to their personal data being used for direct marketing and every communication provides a link to unsubscribe online. Minimal personal data will then be held in a “suppression list” and will no longer be processed but will be used to ensure subscribers’ preferences are followed.

Survey and evaluation respondents’ data

We work with independent market research organisations to evaluate our events, such as Bluegrass to collect evaluation data from our projects.

The data we collect is not identifiable personal data.

Questions we typically ask in surveys:

Main reason for visiting *location* today?
Who did you come with?
General amount spent on the day?
Postcode
Age bracket
Gender
Ethnic group

Invitation/Cultivation List Data

The data we collect from Invitations list subscribers are:

Full name
Email address
Job title and Organisation
Postal address

We collect this information to let you know about our projects and invite you to private events. For subscribers who will consent to receive fundraising messages the information is used to send communications about donating to Artichoke.

The lawful basis for processing these data is Article 6 (1)(f) – legitimate business interests and/or Article 6(1)(a) – consent. We only collect and process your personal data for purposes that are in our legitimate organisational interests (to invite you to our projects and events) if there is no overriding prejudice to you by using your personal information in this way. For any situations where it is not appropriate we will ask for your explicit consent. The data and consent are stored and recorded on Patronbase.

The data is securely stored with access controls in place to prevent unauthorised access to the data. Occasionally, data items 1 and 3 may be shared with a mailing processor in order to send invitations to subscribers by post.

Current Donors’ Data

The data we collect from our donors are:

Full name
Email address
Postal address
Telephone number
Details of donation
Bank details
History of previous event attendance
History of previous correspondence

We collect this information so that we can provide the benefits of Hearts membership including regular updates about our work and sending a welcome pack to your home address, for our own financial record-keeping and to comply with our legal obligations when claiming Gift Aid.

The lawful basis for processing these data is Article 6(1)(b) – contract and Article 6(1)(c) – legal obligation.

The data is securely stored with access controls in place to prevent unauthorised access to the data.

Donor details are stored on Patronbase, on our VPN server and on Outlook. Email addresses for those who have opted into communications are also stored on MailChimp. Payments are processed through Stripe or Bottomline. We processed donations for our Christmas Challenge fundraising campaign via The Big Give website.

Data items 1, 3, and 4 are shared with HM Revenue and Customs (HMRC) for Gift Aid purposes where the donor is registered for Gift Aid. Data item 4 is shared with the donor’s bank where the donor requests us to set up a standing order for the donation.

Donors may submit a Subject Access Request to access their personal data and are entitled to have it rectified if it is incorrect or incomplete.

Potential Donors’ Data

The data we collect from our potential donors are:

Full name
Email address
Postal address
Telephone number

We collect this information so that we can invite you to our projects and events and send you fundraising messages.

The lawful basis for processing these data is Legitimate Interest. The data and consent are stored and recorded via Patronbase.

The data is securely stored with access controls in place to prevent unauthorised access to the data. Data items 1 and 3 may be shared with a mailing processor in order to send invitations to subscribers by post. The data is not otherwise shared.

Potential donors may submit a Subject Access Request to access their personal data and are entitled to have it rectified if it is incorrect or incomplete. They may request the deletion of their personal data at any time or to block further processing. They may object to their personal data being used for direct marketing and every communication provides a link to unsubscribe online. Minimal personal data will then be held in a “suppression list” and will no longer be processed but will be used to ensure potential donors’ preferences are followed.

Project Participants’ Data

The data we collect from project participants are:

Personal and contact details (including passport details if project requires)
Ethnicity, gender, sexual orientation, age and disability details

We collect this information so that we can produce artistic projects and to provide aggregated monitoring data to our main funder, Arts Council England.

The lawful basis for processing item 1 is Article 6(1)(b) – contract. This data will be shared with suppliers such as airlines if the project requires.

The lawful basis for processing item 2 is Article 6(1)(a) – consent. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and project participants are not required to provide it. This data will not be shared.

The data is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted three months after the completion of the project.

Customer Purchase

Orders are processed via Shopify and Klein Editions. The data we collect from customers is:

Full name
Email address
Billing address
Shipping address
Bank details
Previous order details

This information needed to allow us to complete a transaction, fulfil orders and for Shopify to screen orders for fraud and risk. These details are not used for marketing purposes unless you have signed up to our mailing list.

How to unsubscribe

You can unsubscribe from any or all of Artichoke communications at any time. To unsubscribe click on the relevant links on our website or in the emails we send you.

If you have any questions about the way in which we handle your personal information, please email artichoke@artichoke.uk.com.