Privacy notice

Who we are

Amber Heart CIC is a Community Interest Company in Northern Ireland. Amber Heart CIC is the controller for the personal information described in this notice.

Company number: NI000000 synthetic preview/build value; replace with verified number before public production
Registered office: [AJ WILL REPLACE WITH VERIFIED REGISTERED OFFICE]

Questions about this notice or about your information: info@ahcic.org.

What we collect and why

Contact form and email

If you use the contact form or email us, we receive the details you choose to give us: your name, your email address and your message. We use them to reply to you and to manage your enquiry.

Lawful basis: our legitimate interest in responding to enquiries sent to us. Please do not include sensitive personal information (for example health details) in a message unless it is necessary for your enquiry.

Contact-form submissions are received through Netlify Forms and a notification is sent to info@ahcic.org. Email to that address is handled by the email service used for the Amber Heart mailbox.

Retention: we keep enquiry messages for as long as needed to respond to the enquiry and complete any follow-up, and then delete them. Retention rule to be confirmed by Amber Heart before launch

Supporting Amber Heart (payments)

Online support payments are planned to be processed by Stripe on Stripe's own hosted checkout pages. Online payments are not yet switched on in this preview

When payments are live: card details are entered on Stripe's pages and are never received or stored by this website. Amber Heart receives from Stripe the information needed to administer your support, such as your name, email address, the amount, the date and, for monthly support, the status of the recurring payment. Lawful basis: the contract you enter into when you choose to support Amber Heart, and our legitimate interest in keeping accurate records of support received.

Stripe processes your information under its own privacy policy, available at stripe.com/gb/privacy. When you return to this site from checkout, the site asks its own server to confirm the status of that checkout so the thank-you page can tell you whether the payment was confirmed.

Retention: records of support received are kept for as long as required for accounting and company record-keeping obligations.

Visiting the website

This website is hosted by Netlify. Like most hosts, Netlify's systems may record technical information about requests, such as IP address, browser type and the pages requested, for security and to operate the service. We do not use this information to identify visitors.

Cookies and browser storage

This website does not set cookies and does not use local storage, session storage or any analytics or tracking technologies. That is why there is no cookie banner.

If online payments are switched on, Stripe's hosted checkout pages (on stripe.com) may use cookies that are necessary to run the checkout and prevent fraud. Those are set on Stripe's domain and are described in Stripe's privacy policy.

This position reflects the ICO's Guidance on the use of storage and access technologies (finalised 29 April 2026), which requires consent for non-essential storage and access technologies under PECR. Because the site uses none, no consent mechanism is needed. If Amber Heart later adds analytics, this notice and the site will be reviewed first.

Who receives your information

• Netlify, Inc. - website hosting and contact-form submissions (processor).
• Stripe Payments Europe / Stripe, Inc. - payment processing, when payments are live.
• The email provider used for the Amber Heart mailbox, for messages sent to info@ahcic.org.

We do not sell personal information and we do not share it for advertising.

International transfers

Netlify is based in the United States and may process information outside the UK. Netlify states that it relies on the EU-US Data Privacy Framework, including the UK Extension, and on standard contractual clauses for such transfers (Netlify privacy policy, last updated 10 April 2026). Stripe describes its own transfer safeguards in its privacy policy. To be re-checked against the providers' current terms at launch

Your rights

Under UK data protection law you have the right to ask for access to your personal information, to have it corrected or erased, to restrict or object to how it is used, and in some cases to receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, email info@ahcic.org. We will respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113. We would appreciate the chance to deal with your concern first.

Changes to this notice

We will update this notice if the way the website handles information changes, for example when online payments are switched on. The version date at the top shows when it last changed.