Privacy Policy
Privacy Notice
This Privacy Notice explains how RE Today collects, uses, stores and shares personal data when you use our websites, contact us, subscribe to our communications, place an order, register for an event, make a donation, or otherwise interact with us online.
RE Today is a charity providing Religious Education resources to the education sector. We are committed to handling personal data fairly, lawfully and securely in accordance with UK data protection law, including the UK GDPR and the Data Protection Act 2018.
Who we are
RE Today is the data controller for the personal data described in this notice.
Contact details
RE Today
Suite 5-6
1 Devon Way
Longbridge Technology Park
Birmingham
B31 2TS
dataprotection@retoday.org.uk
Tel: 0121 458 3313
If you have any questions about this notice or how we use your personal data, please contact us using the details above.
What personal data we collect
We may collect the following personal data:
- Name.
- Email address.
- Postal address.
- Telephone number.
- School, organisation or employer details.
- Job title.
- Order history and transaction details.
- Event registration details.
- Newsletter and marketing preferences.
- Enquiry and correspondence details.
- Technical information such as IP address, browser type, device type and operating system.
- Website usage data, including cookie information.
We may also collect any other information you choose to provide when you contact us or submit a form on our websites.
How we use your data
We use personal data to:
- Respond to enquiries and provide customer support.
- Process orders and deliver resources.
- Manage events, webinars and training.
- Send newsletters and other communications you have asked to receive.
- Maintain website accounts where applicable.
- Improve our websites, services and communications.
- Analyse website performance and usage.
- Keep records and meet legal, tax, safeguarding and regulatory obligations.
- Prevent fraud, misuse and unauthorised access.
Lawful basis for processing
We only use personal data where we have a lawful basis to do so. Depending on the activity, we may rely on:
- Consent, for example for email marketing or optional cookies.
- Contract, where we need the data to provide a product or service you have requested.
- Legal obligation, where we must keep records or comply with law.
- Legitimate interests, where we use data to operate and improve our services, provided your rights do not override those interests.
Where we rely on consent, you can withdraw it at any time.
Sharing your data
We may share personal data with trusted third parties where necessary, including:
- Website hosting and maintenance providers.
- Email and newsletter platforms.
- Payment processors.
- Event and booking platforms.
- Analytics and cookie service providers.
- Professional advisers such as lawyers, accountants and insurers.
- Regulators, law enforcement agencies or other authorities where required by law.
We only share the minimum information necessary and only where appropriate safeguards are in place.
International transfers
Some of our suppliers may store or process personal data outside the UK. Where this happens, we will take steps to ensure that appropriate safeguards are in place to protect your information.
How long we keep data
We keep personal data only for as long as necessary for the purpose for which it was collected, including for legal, accounting, tax, administrative and safeguarding purposes.
Retention periods vary depending on the type of data and why we hold it. When data is no longer needed, we will delete or anonymise it securely.
Marketing communications
If you opt in to receive marketing communications from us, we may use your contact details to send information about our resources, services, events, campaigns and fundraising activities.
You can unsubscribe at any time by using the link in our emails or by contacting us directly.
Your rights
Under data protection law, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data in some circumstances.
- Object to or restrict certain processing.
- Withdraw consent where we rely on consent.
- Request data portability in some cases.
To exercise your rights, please contact us using the details above.
Children’s information
Our websites are primarily intended for adults such as teachers, school staff, supporters and other users in the education sector. If we knowingly collect personal data relating to children, we will do so only where appropriate and lawful, and we will take extra care to protect that information.
Security
We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure or alteration.
Complaints
If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. The ICO provides guidance on privacy notices and complaints for organisations.[ico.org]
Changes to this notice
We may update this Privacy Notice from time to time. Any changes will be posted on this page with a revised date.
Last updated: July 2026