Privacy Policy

Last updated: January 2026

This Privacy Policy explains how The 22:23 Community Interest Company (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website or use our services.

We are committed to handling your information fairly, lawfully, and transparently in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

For the purposes of data protection law, the data controller is:

the data controller

Email: info@the2223.org

References to “we”, “us”, and “our” in this notice mean The 22:23 Community Interest Company acting through the data controller named above.

2. The data we collect

We may collect and process the following personal data:

Name, email address, phone number, and postal address
Information you provide via forms, emails, or calls
Preferences or interests (for example, property type or contact preferences)
IP address, browser type, device details, and site usage
Data from service partners such as installers or support organisations
Donation or payment information (status only – not full card details)

We do not intentionally collect sensitive information (e.g. health, religion, or ethnicity).

3. How we use your data

We use your data to:

Respond to enquiries and provide information you request
Register and coordinate participation in projects or buying groups
Manage services or installations requested by you
Process donations and supporter relationships
Send updates or newsletters (only with your consent)
Improve our website and user experience
Comply with legal or regulatory duties

We only use your data for these purposes unless a compatible lawful reason applies.

4. Cookies and analytics

Our site uses cookies and analytics to function properly and to help us understand visitor activity.

Where required, we will ask for your consent before placing non-essential cookies.

You can change preferences at any time through your browser or our cookie settings.

See our Cookie Policy below for full details.

5. Who we share your data with

We may share data with trusted third parties who help us operate the organisation, deliver services, or communicate effectively. These include:

Website, CRM, and IT providers (for example Salesforce)
Payment and donation processors (for example PayPal or Stripe)
Installers or logistics partners (only where needed to arrange services)
Professional advisers such as accountants or legal representatives
Regulators or public authorities where required by law

All third parties must handle your data securely and comply with UK data protection law.

We do not sell or rent your personal data.

6. International transfers

Some service providers may process data outside the UK.

Where this happens, we ensure appropriate safeguards such as:

A UK adequacy decision, or
UK-approved Standard Contractual Clauses or equivalent protections.

7. How long we keep your data

We keep your data only as long as necessary:

General enquiries – up to 2 years after last contact
Service or project records – up to 6 years after completion
Donation or financial records – up to 7 years (legal requirement)

After this, we securely delete or anonymise your data.

8. Your rights

You have the right to:

Access your personal data
Correct inaccurate information
Request deletion of your data
Restrict or object to certain processing
Request data portability (in some cases)
Withdraw consent at any time

To exercise your rights, email info@the2223.org.

You can also complain to the Information Commissioner’s Office (ICO) at:

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Website: www.ico.org.uk

9. Children

Our website and services are not intended for children under 16. We do not knowingly collect data from children.

10. Security

We take appropriate technical and organisational measures to protect your data from unauthorised access, alteration, or loss.

While no system is completely secure, we treat your information with care and keep it as safe as reasonably possible.

11. Changes to this policy

We may update this policy occasionally. The latest version will always be on our website with the updated date.

12. Contact us

If you have questions about this Privacy Policy or your personal data, please contact:

The data controller

Email: info@the2223.org

COOKIE POLICY

This Cookie Policy explains how The 22:23 Community Interest Company (“we”, “us”, “our”) uses cookies and similar technologies on our website.

1. What are cookies

Cookies are small text files placed on your device when you visit a website. They allow the site to function, remember preferences, and collect anonymous usage data.

2. How we use cookies

We use cookies to:

Keep the website secure and functional
Understand how visitors use our site
Improve performance and user experience
Remember preferences and settings
Measure communication and campaign effectiveness

Some cookies are essential for the site to work; others are optional and only used with your consent.

3. Types of cookies

Essential – required for security and core site features
Analytics – measure site use (e.g. Google Analytics, Salesforce Analytics)
Functional – remember preferences or form entries
Marketing – track engagement with campaigns or social media

4. Managing cookies

When you first visit our site, you will see a cookie banner allowing you to accept, reject, or manage non-essential cookies.

You can also manage cookies through your browser at any time.

5. Third-party cookies

Some cookies are placed by third parties (for example Salesforce , Stripe, Google, or payment providers). These are subject to their own privacy and cookie policies, which we recommend reviewing.

6. Updates

We may update this Cookie Policy from time to time. The most recent version will always appear on our website.

7. Contact us

For any questions about cookies or how we handle your data, contact:

The data controller

Email: info@the2223.org