Introduction

Pomegranates and Figs CIC is committed to protecting the privacy and personal data of our donors, supporters, beneficiaries, and partners. This policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

• Legal status:Community Interest Company (CIC)
• Registered name:Pomegranates and Figs CIC
• Registered address:Pomegranates and Figs, 121-125 Ripple Road, Barking, 1G11 7FN
• Email: info@pomenfigs.co.uk
• Company number:16790359

What Personal Data We Collect

We may collect and process the following personal data:

• Name
• Email address
• Postal address
• Telephone number
• Donation amount and date
• Payment reference information
• Communication preferences

We do not store or process full payment card details. All card payments are handled securely by our third-party payment provider.

How We Collect Personal Data

We collect personal data when you:

• Make a donation to Pomegranates and Figs CIC
• Contact us by email or other means
• Sign up to receive updates or information
• Engage with our activities or community initiatives

How We Use Personal Data

We use personal data to:

• Process donations and payments
• Communicate with donors and supporters
• Acknowledge and administer donations
• Meet legal, regulatory, and accounting obligations
• Support the delivery of our community interest activities

We only process personal data where we have a lawful basis to do so.

Lawful Basis for Processing

Our lawful bases for processing personal data include:

• Consent– where you have actively agreed
• Contract– where processing is required to complete a donation
• Legal obligation– for financial, accounting, or regulatory purposes
• Legitimate interests– where processing is necessary for our operations and does not override your rights

Payment Processing (Worldpay)

All online payments and donations are processed securely by Worldpay, our third-party payment service provider.

Worldpay processes payment data in accordance with PCI-DSS security standards. Pomegranates and Figs CIC does not have access to, nor does it store, full payment card details.

Data Sharing

We do not sell, rent, or trade personal data.

We may share personal data only with:

• Payment service providers (such as Worldpay)
• Professional advisers (e.g. accountants or solicitors)
• Regulatory or legal authorities where required by law

All third parties are required to keep personal data secure and confidential.

Data Storage and Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, or disclosure.

Access to personal data is limited to authorised individuals only, and data is stored securely.

Data Retention

We retain personal data only for as long as necessary:

• Financial and donation records are retained in line with legal and accounting requirements
• Contact details and communication data are retained until consent is withdrawn or deletion is requested

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us using the details below.

Cookies

If we use cookies on our website, a separate Cookies Policy will explain how they are used and how you can manage them.

Changes to This Policy

We may update this policy from time to time. Any changes will be published on our website and, where appropriate, communicated to users.

Contact Details

If you have any questions about this policy or how Pomegranates and Figs CIC handles personal data, please contact:

Pomegranates and Figs CIC
Email: info@pomenfigs.co.uk
Address: Pomegranates and Figs, 121 -125 Ripple Road, Barking, IG11 7FN