Privacy policy

Bevan Foundation Privacy Policy

 The Bevan Foundation is committed to protecting and respecting your privacy.

This policy explains when and why we collect personal information about you, how we use your personal data, the conditions under which we may disclose it to others and how we keep it secure. It also tells you about how to exercise your rights.

Who are we?

The Bevan Foundation is Wales’ most innovative and influential think tank. We develop lasting solutions to Wales’ most challenging problems. The Bevan Foundation is a registered charity (no. 1104191) and company limited by guarantee (no. 4175018). The registered address is 145a High Street, Merthyr Tydfil CF47 8DP.

Personal data that we process

The table on the next page explains the types of data we collect and the legal basis, under current data protection legislation, on which this data is processed.

How is your information used?

We may use your information to:

  • to make sure our website is working well and meets people’s needs;
  • to send emails you’ve agreed to receive and to ensure that emails are relevant to you. Emails may include: information about reports, articles, events, campaigns and appeals.
  • to process a donation that you have made;
  • to administer benefits to supporters and subscribers;
  • to process an order for an event or service that you have submitted;
  • to respond to enquiries by you.

We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may also use your personal information to detect and reduce fraud and credit risk.

How long is my information stored?

We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us. Sometimes our legal obligations specify how long information must be kept e.g. Gift Aid Claims.

Who has access to your information?

Your information is used only by the Bevan Foundation.  We will not sell or rent or give your information to third parties for marketing purposes.

We do pass your information to third parties who provide services to you on our behalf e.g. to process donations and send you emails. Our main third party providers are MailChimp, Eventbrite, Donorfy, GoCardless and Stripe although from time to time we may use other providers. We only disclose the minimum personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.

We will not release your data to anyone else unless you have requested us to do so or we are required to do so by law, or to prevent crime.

Transmission of data

Data transferred between ourselves and third party service providers is encrypted and sent by a secure connection. Some non-sensitive details (your email address etc.) may be transmitted over the internet, and this can never be guaranteed to be 100% secure.

Some of our third party service providers are based outside the European Union. We will only pass data to them where appropriate safeguards are in place as defined by Article 46 of the General Data Protection Regulation.

When we hold your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Your rights

Where data processing is based on consent, you may revoke this consent at any time and we will make it as easy as possible for you to do this (for example by putting ‘unsubscribe’ links at the bottom of all our marketing emails). Where data processing is based on legitimate interest, you can opt-out of receiving direct marketing emails and post.

In addition you have the right to:

  • ask for rectification and/or deletion of your information.
  • access to your information.
  • lodge a complaint with the Information Commissioner if you feel your rights have been infringed.

A full summary of your legal rights over your data can be found on the Information Commissioner’s website here:

If you would like to access the rights listed above, or any other legal rights you have over your data under current legislation, please get in touch with us by emailing [email protected] or writing to us at 145a High Street, Merthyr Tydfil CF47 8DP.

Please note that relying on some of these rights, such as the right to deleting your data, will make it impossible for us to continue to deliver some services to you.

Links to other websites

Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site.

16 or Under

If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.

Review of this Policy

We keep this policy under regular review. This policy was last updated on 13th February 2019.

PurposeData (key elements)Basis
Subscribing to email updates about our workYour name, email address and how you heard about us, your IP address, the country where you are based, whether the email bounced, if you open our emails or click on any links, and the browser you use. The email service may transfer your details to our supporter software.Consent – you have given your active consent to receive emails from us.
Registering to attend an eventName, email address, your employer and job title, plus information to enable you to participate in the event e.g. workshop choices. We will also collect basic payment details if relevant.Legitimate interests: this information is necessary to organise this event and enable your participation. We will also use the data to send you information about future, similar events unless you ask us not to.
Being an organisational subscriberName, email, postal address, job title, payment information.Contract: by paying your subscription you have entered into a contractual relationship with us. As a subscriber, we will also use your data to send you information about services and products that may be of interest unless you ask us not to.
Being an individual  supporterName, email, postal address, basic payment information.Legitimate interest: this information is necessary for us to fulfill your intention of donating money and your expectation of receiving  our supporter package.  As we rely on donations to achieve our purposes, we also have a legitimate interest in requesting further donations unless you ask us not to.
Making a one-off donationName, email, address, basic payment informationLegitimate interests – this information is necessary for us to fulfill your intention of donating money. As we rely on donations to achieve our purposes, we also have a legitimate interest in updating you about our activities and requesting further donations unless you ask us not to.
Website functionalityWebsite activityLegitimate interests – to deliver functionality that you would expect we gather information about how you use our website. This includes use of a Facebook Pixel which enables us to collect information to measure the effectiveness of advertising on Facebook. No personal information is contained in or collected – you can opt out of this tracking here.
Enquiring about our organisation and its workName, email, messageLegitimate interests – it is necessary for us to read and store your message so that we can respond in the way that you would expect.


Search and filter the archive using any of the following fields:

  • Choose Type:

  • Choose Focus:

  • Choose Tag: