Charity Number: 1197493

Privacy Policy

Last updated: April 2024

Keeping your personal information safe is very important to us. We are committed to complying with privacy and data protection laws and being transparent about how we use personal data.

Who are we?

Good Company (Surrey) is a registered charity based at Good Company Hub, Ruxley Lane, Epsom, KT19 0JG. Good Company (Surrey) is a data controller registered with the UK Information Commissioner’s Office (registration number ZB313472).

How do we collect your personal information?

We may collect your personal information from you directly when you:

  • communicate with us for any reason, by post, telephone, text, email or via our website.
  • make a donation.
  • visit or are referred to a foodbank; or to our support work.
  • become a member at Epsom or Banstead Pantry.
  • participate in a survey or research.
  • volunteer for us.
  • agree to help us promote our work.
  • interact with us as a supplier, contractor, consultant or in any other capacity.
  • We may also collect personal information about you from other organisations – for example, from a referral agency like a doctor’s surgery.

What Personal Information do we collect?

We only collect personal information that we genuinely need. This may include:

  • Contact details such as name, address, email address and phone numbers.
  • Date of birth.
  • Gender.
  • Nationality.
  • Any information that you give us relating to your circumstances.
  • Financial information that you provide to us – for example, when donating money.

Why We Collect Personal Information

We collect and use personal information about people who use our services (eg. foodbanks or pantry) supporters, job applicants and volunteers for several reasons outlined below:

Assisting people that use foodbank – We collect personal information from you directly if you use a food bank, or via an organisation that refers you to a food bank. Our lawful basis for using this information is our legitimate interests, as we wish to respond to your need for help and ensure that we are providing help when and where it is most needed. We will share this information with the Trussell Trust, which works with us and other food banks to support our network. Trussell Trust’s privacy policy

Assisting Support Work clients – we collect personal data from you directly to offer additional support to clients referred from the Foodbank, Pantry projects, EERN or Advice Cafes. We will process your personal information to provide the best possible service to you and to record the work that we have done and assess how the work has gone. Our lawful basis for using this information is our legitimate interest/consent. If we think that there are other services that would be of benefit then we may suggest a referral to those service providers. We will discuss this with you and seek your consent before sharing your information with anyone else.

Pantry members – We collect personal information from you directly if you become a member of Epsom or Banstead Pantry. This data is used to generate statistics and reports relating to visits and other personal information. Epsom and Banstead Pantry use these statistics to make decisions about opening hours, stock and other issues. Church Action on Poverty uses statistics from the database to report on the impact of Pantries to our supporters and funders. Your Local Pantry Privacy notice

Developing relationships with supporters – Our work is made possible because of the generosity of our supporters. We need a good understanding of our supporters so that we can communicate with them effectively and appropriately.

Processing donations – If you make a financial donation to us, we will use your personal information to collect your donation and maintain a record of our donors. Our lawful basis for using your personal information for this purpose is to fulfil our legitimate interest and fundraising objective. We are legally required by HMRC to collect some personal information if you choose to gift aid your financial donation.

Dealing with complaints and appeals – If a complaint is raised with us, we will process the personal information that is provided to us to manage and resolve the complaint or appeal. This may include sharing relevant information with the Trussell Trust, Your Local Pantry or person that the complaint has been made about. Our legal basis for using personal information for this purpose is legitimate interest.

Promoting our work – We will use personal information that you share with us if you agree to help us promote our work. This might include photographs and videos. For example, we may use your information in case studies and stories that we publish or share with the media. We will only use your information for this purpose if you have given your consent for us to do so.

Carrying out surveys and research – If you choose to take part in one of our surveys, we will use the personal information that you provide to process the results of the survey and undertake analysis. Survey results are anonymised before being shared or published.

Volunteer administration – Where you volunteer with us, we collect personal information to support the administration of your volunteering activity. Our lawful basis for processing volunteers’ personal information is our legitimate interest or to meet our legal obligations. We share personal information about our employees and volunteers with The Trussell Trust and Your Local Pantry.

Recruitment – If you provide us with information about yourself, such as a CV or cover letter, in connection with a job or volunteer application or enquiry, we may use this information to process your enquiry. We will not store this information for any purpose other than relating to your application. Our legal basis for using your information in this way is for our legitimate interest.

Undertaking safeguarding activities, including DBS checks – When necessary, we process relevant personal information about employees and volunteers for safeguarding purposes. This might include undertaking DBS and other checks to identify any criminal and other activity we need to be aware of. It may be necessary to share some personal information with relevant authorities, such as the police. Our lawful basis for this processing is to meet our legal obligations. 

Processing expenses –We will use your personal information, including your bank account details, to process expense claims. Our lawful basis for using your information for this is for the performance of a contract.

Governance – We process relevant personal information about existing and potential trustee members for governance purposes. This might include undertaking DBS and other checks to identify any criminal and other activity we need to be aware of to ensure that we select appropriate trustees. Our lawful basis for this processing is to meet our legal obligations with the Charity Commission and Companies House.


Sharing Personal Information

We will only share your personal information where we need to, where someone’s life is at risk or we are required to do so by law.
We may share your information with third parties (in the case of liasing with external organisations such as The Trussell Trust and Your Local Pantry) and data processors who may need to access your information for performing the purposes specified above.
We take reasonable organisational and technical measures to protect your information against access, modification or misuse. We work to ensure your information is accessed by trustees, volunteers and third party partners on a needs-only basis.
We may also share your information with our bank to process a payment, with our professional advisers (such as our legal advisers) where it is necessary to obtain their advice, and with our IT support and data storage providers.
Where required, we will process personal information to comply with our legal obligations. In this respect, we may share your personal data to comply with subject access requests, tax legislation, for the prevention and detection of crime, and to assist the police and other competent authorities with investigations including criminal and safeguarding investigations.

Transferring personal data outside of the EEA

At present, we don’t send personal information outside of the EEA. In the future, we may use a supplier that hosts servers in another country – for example, in the United States. Where we need to transfer personal information to countries or jurisdictions outside the EEA, we ensure they have a similar standard of data protection law in place to that of the UK. We put in place appropriate contracts and agreements with third parties to ensure an appropriate level of data protection and security

Cookies and aggregate information collected from our website

We use cookies on our website to store information about how you use our website. A cookie is a small file of letters and numbers that is downloaded on to your computer when you visit a website. This information is not linked to personal profiles or to personally identifiable information provided by users. We use it to analyse visitor trends and use of our website, administer the website and to gather broad demographic information of our website users.

See our Cookies Policy

Your Rights

If you no longer wish to receive communications about products and services from us, please contact
You can also unsubscribe at any time from emails that we may send to you about the products and services that we think will be of interest to you. A link to unsubscribe from all direct marketing will be included in any communications.
You also have the right to:

  • Ask us for copies of your personal information.
  • Tell us to change or correct your personal information if it is incomplete or inaccurate.
  • Ask us to restrict our processing of your personal data or to delete your personal data if there is no compelling reason for us to continue using or holding this information.
  • Receive from us the personal information we hold about you which you have provided to us, in a reasonable format specified by you, so that you can send it to another organisation.
  • Object, on grounds relating to your specific situation, to any of our processing activities where you feel this has a disproportionate impact on you.

For all requests, please contact us at We will respond to any request within 28 days.
Please note that we may be entitled to refuse requests where exceptions apply – for example, if we have reason to believe that the personal data we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this Privacy Policy.

How Long We Keep Your Personal Information

We will hold your personal information only for as long as is necessary. We will not retain your personal information if it is no longer required. In some circumstances, we may legally be required to retain your personal information – for example, for finance, employment or audit purposes. We have in place a personal data retention schedule which sets out how long we keep your personal information for. Please contact if you wish to see our personal data retention schedule

Changes to This Policy

This Privacy Policy may change from time to time. We recommend that you please visit this webpage periodically to keep up to date with the changes in our Privacy Policy.

Making a Complaint to the Information Commissioner’s Office

If you are not satisfied with our response to any query you raise with us, or you believe we are processing your personal data in a way which is inconsistent with the law, you can make a complaint to the Information Commissioner’s Office.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane

Helpline number: 0303 123 1113

ICO website: