Privacy Policy

Who we are

Our website address is: https://www.saddleresearchtrust.com.

We have reviewed the purposes of our processing activities and selected the most appropriate lawful bases for our activities.

We have checked that the processing is necessary for the relevant purpose and are satisfied that there is no other reasonable way to achieve that purpose.

We use this privacy policy to document our decision on which lawful bases applies to help us demonstrate compliance.

We have included information about both the purposes of the process and the lawful basis for the processing in our privacy notice.

We process personal information on these lawful bases:

(a) Consent: the individual has given clear consent for us to process their personal data for a specific purpose.

(b) Contract: the processing is necessary for a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract.

(d) Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data that overrides those legitimate interests.

We have checked that consent is the most appropriate lawful basis for processing.

We have made the request for consent prominent and separate from any terms and conditions.

We ask people to positively opt in.

We do not use pre-ticked boxes or any type of default consent.

We use clear, plain language that is easy to explain.

We specify why we want the data and what we are going to do with it.

We name our organisation and any third-party controllers who will be relying on the consent.

We tell individuals that they can withdraw their consent.

We avoid making consent a precondition of a service.

We regularly review consents to check that the relationship, the processes and the purposes have not changed.

We have processes in place to refresh consent at appropriate intervals.

We consider the use of privacy dashboards or other preference-management tools to be a matter of good practice.

We make it easy for individuals to withdraw their consent at any time and publicise how to do so.

We act on withdrawals of consent as soon as we can.

We have checked that consent is the most lawful basis for processing.

We have made the request separate from our terms and conditions.

Where we have found legitimate interests to be the most appropriate basis, we understand our responsibility to protect the individual’s interest.

We have conducted a legitimate interests assessment and kept a record of it, to ensure that we can justify our decision.

We have identified the relevant legitimate interests.

We have checked that the processing is necessary and there is no less intrusive way to achieve the same result.

We only use individuals’ data in a way they would reasonably expect, unless we have a very good reason.

We do not use data in ways that individuals would find intrusive or which could cause them harm, unless we have a very good reason.

We do not process children’s data and we take extra care to make sure we protect their interests.

We have considered safeguards to reduce the impact where possible.

We keep our LIA under review and repeat it if circumstances change.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.