Draft for review. This policy describes how the website currently works. Please have it checked by a qualified adviser and complete the bracketed details before launch.
Who we are
This website is run by [Husk Company legal name] (“Husk”, “we”, “us”), company number [company number], registered office [registered office address]. We are the controller of the personal information described in this policy. The Seedbank for Oxfordshire project is delivered with Glyme Valley CIC.
Questions about your information? Email info@husk.org.uk.
What we collect and why
| Information | Why we use it | Lawful basis |
|---|---|---|
| Account details: your name, email address and password (stored only in scrambled, hashed form) | To create and secure your Husk account | Contract |
| Member activity: whether you've told us you backed the Seedbank, rewards you've marked as claimed, and waitlists you've joined | To provide the supporter hub and tell you when things launch | Contract |
| Share-link visits: a one-way scrambled code made from a visitor's IP address and browser type. We never store the IP address itself. | To count visits through a member's share link, once per visitor | Legitimate interests |
| Mailing list: your first name (optional) and email address | To send news about Husk and its ventures, no more than once a month | Consent: you can unsubscribe at any time |
| Messages you send us by email | To reply and keep a record of our conversation | Legitimate interests |
We don't use advertising, tracking or analytics tools, and we never sell your information.
Donations
Donations are made on Crowdfunder, not on this website. We never see or store your payment details. Crowdfunder handles your donation under its own privacy policy and terms. When you tell us you've backed the Seedbank, we simply record that you said so.
Who we share it with
- Our website host and database provider, who store data on our behalf [name your hosting provider before launch].
- Mailchimp (Intuit), if you join our mailing list. Mailchimp stores your email address and may process it in the United States under appropriate safeguards.
- YouTube (Google), only if you press play on a video. Videos load in YouTube's privacy-enhanced mode, and nothing is sent to YouTube until you press play.
We may also share information if the law requires it.
How long we keep it
- Account and member information: until you delete your account, or after 3 years of inactivity.
- Share-link visit records: for as long as the related member's account exists.
- Mailing list: until you unsubscribe.
- Emails: up to 2 years after our last conversation.
Your rights
You can ask to see, correct, download or delete your personal information, object to how we use it, or withdraw consent at any time. Email info@husk.org.uk and we'll respond within one month.
If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies and local storage
We use one essential cookie to keep you signed in, plus a few small settings stored in your browser. See our cookie policy for details.
Changes to this policy
If we change how we use your information, we'll update this page and the date at the top.