The charity making life better by water

Privacy Schedule for suppliers

This Schedule sets out details of our processing of our suppliers’ personal information through the Trust tender, supplier or onboarding process.

It should be read in conjunction with the Trust Privacy Notice

Controller of your information

We are the controller of your personal information. Where we legitimately share your information outside the Trust, the recipient organisation may either be the processor or joint controller, depending on the circumstances and subject to appropriate safeguards and controls.

Where we get your information from

Your information may be collected in a variety of ways.

Information you provide

  • When you submit an online or paper application as part of our tender process and subsequently as part of our onboarding process.
  • When we correspond with you to become a supplier outside of the tender process.

Information we obtain from other sources

  • We do not collect your information from other sources.

Information we create

  • We do not create any information about you.

Information we collect about you

Depending on the circumstances, we may hold and process some, or all, of the information contained in Annex 1 – Schedule of personal information processed.

Special category information

We do not collect your special category information.

Criminal convictions and offences information

We do not collect your criminal convictions and offences information.

Why we process your information

Your personal information will be processed for the purposes set out in Annex 1 – Schedule of personal information processed and will not be processed for any other purpose.

Lawful basis

Your personal information will be processed under the lawful basis set out in Annex 1 – Schedule of personal information processed.

Where your information will be stored

Your information will be stored in a range of different places, including Trust SharePoint files and SAP.

Who we share your information with

Your personal information may be shared internally within the Trust with individuals who are required to receive it for legitimate business purposes according to their role, and in accordance with Annex 1 – Schedule of personal information processed.

Your information may be shared externally according to Annex 2 – Schedule of personal information shared.

International transfers

We do not currently share any of your information internationally.

Other relevant privacy documents

Changes to this Schedule

We may change this Schedule from time to time without notice to you. This is to ensure it reflects current legislation. In that case, the ‘latest version’ date in Annex 3 will also change. Any changes to this Schedule will apply to you and your data immediately.

If these changes significantly affect how your personal data is processed, we will take reasonable steps to let you know.

Latest version

This Privacy Schedule is reviewed periodically when changes are required, and in any event every three years. If the version you are viewing is older than three years, please ensure that you have the up-to-date version by contacting [email protected]

See Annex 3 – Version Control.

Last Edited: 08 December 2023

photo of a location on the canals
newsletter logo

Stay connected

Sign up to our monthly newsletter and be the first to hear about campaigns, upcoming events and fundraising inspiration