Privacy policy

We are committed to protecting your privacy.


This Privacy Policy applies to the website (the "Site") which is run by the Joseph Rowntree Foundation (“JRF”), a registered charity in England and Wales under company number 210169. For the purposes of the Data Protection Act 1998, JRF is the data controller of any personal information.

Our trading address is: The Homestead, 40 Water End, York, YO30 6WP.

We are committed to protecting your privacy as outlined in this Privacy Policy (the “Policy”) and have developed this Policy so that you understand how your personal data may be processed.

This Policy explains how JRF collects, uses and discloses personal information about you when you visit the Site and when you contact JRF, whether by e-mail, post or telephone using the contact or subscribe options on the Site.

The information you provide to us through the Site will initially be collected by JRF but may then be shared with other trusts established by JRF (“JRF Trusts”). All references to “JRF”, “we” and “our” in this Policy therefore include the JRF Trusts, unless distinguished in this Policy. Depending upon your relationship with JRF, we may separately provide you with further details about our use of your personal information. Where additional data processing information is provided to you in specific cases, that information will take precedence over the notice provided here.

All information collected on this Site will be kept strictly confidential and will not be sold, leased or rented to parties outside of JRF. We will not disclose your personal information to third parties not involved in any transaction process, or use it for other purposes, such as unsolicited direct marketing. A more detailed explanation about how we safeguard your personal information is described below. If you have any questions, please do not hesitate to contact us:

Jamie Greaves, Head of IT
The Joseph Rowntree Foundation
The Homestead
40 Water End
York YO30 6WP

Tel: +44 (0)1904 629241
Email: [email protected]

What type of information does the Company collect and why?

When you visit our Site, we may automatically collect standard internet and website log information and details of patterns about how website visitors behave. The information we may collect, includes, but is not limited to: 

  • information about your Internet service provider;
  • your operating system;
  • browser type;
  • domain name;
  • the Internet protocol (IP) address of your computer (or other electronic Internet-enabled device);
  • your access times;
  • the website that referred you to us; and
  • the Web pages you request and the date and time of those requests. 

This information can help us to find out which parts of the Site are popular or need changing to enhance your website experience.

Our collection of website use information may also involve the use of cookies. Please see our Cookies Policy for more information.

The Site allows you to interact with the Company in many ways, including but not limited to contacting us by phone or email and/or subscribing to our emails to get the latest information about JRF’s publications, any research as well as special events and recent job advertisements.

If you want to use any of the services described above or if you request further information about JRF, you will need to provide us with some additional personal information so that we can liaise with you in order to deal with your request or query. If you do choose to provide us with your personal information, we will collect that personal information for our own use and for the purposes described in this Policy.

What type of personal information does JRF collect?

Where you choose to provide personal information to us, we may collect the following personal information from you:

  • details of your visits to the Site, which may include traffic data and location data;
  • the reason for your contact, which may be an enquiry or a request;
  • information that you provide when you phone and/or subscribe to our emails, which may include your name, email address and your employment details (including but not limited to your job title and the name of your organisation);
  • your contact and marketing preferences;
  • if you take a survey or interact with us in various other ways - demographic information and information about subjects that may interest you;
  • information necessary for legal or regulatory compliance; and/or
  • if you publicly post about us, or communicate directly with us, on a social media website, we may collect and process the data contained in such posts or in your public profile for the purpose of addressing any customer service requests you may have.

This information will be collected primarily from you as information voluntarily provided to us, but we may also collect it where lawful to do so from (and combine it with information from) public sources, third party service providers or individuals who you have indicated have agreed for you to provide their personal information, government, tax or law enforcement agencies and other third parties.

Does the Company share personal information with third parties?

Your personal information may also be shared with the JRF Trusts. It may also be made available to third parties (within or outside JRF) providing relevant services under contract to JRF, such as marketing agencies, customer service companies, card payment processors, advisers, auditors and compliance managers, providers of call centres and IT hosting and IT maintenance providers. These companies may use information about you to perform their services on our behalf.

We may disclose specific information upon lawful request by government authorities, law enforcement and regulatory authorities where required or permitted by law and for tax or other purposes. Personal information may also be released to external parties in response to legal processes, and when required to comply with laws, or to enforce our agreements, corporate policies, and Terms of Use, or to protect the rights, property or safety of JRF, our employees, agents, customers, and others, as well as to parties to whom you authorise JRF to release your personal information.

The Site includes links to third party websites and some of your personal information from your browsing session may be transferred to such third party websites (please see our Cookies Policy for more information).

We will not sell your personal information to any third party other than as part of any restructuring or sale of JRF.

What choices does JRF offer you with regard to keeping you up to date?

JRF may wish to provide you with information about new publications, research or special events, which may be of interest to you and may invite you to take part in market research or request feedback on this. This communication will occur by e-mail [and may also occur by], telephone, post or SMS, depending on any preferences you indicate. We will obtain your consent and/or provide notice of our proposed communications and advise you of how you can opt-out of receiving such communications in the future if you subsequently change your mind.

We will provide a simple means for you to refuse further marketing from us in each of the marketing communications. You can also opt-out of direct marketing activities by emailing [email protected], or writing to Customer Services, The Joseph Rowntree Foundation, The Homestead, 40 Water End, York YO30 6WP, or calling us on 01904 629 241. We will process that request as soon as possible.

What safeguards are in place to protect your personal information?

We use a variety of security measures to maintain the safety of your personal information. Nevertheless, whilst we take efforts to safeguard your personal information which are consistent with relevant laws, the nature of the internet is such that we cannot guarantee absolutely the security of any personal information you disclose online.

Access to your personal information

You have the right to request a copy of the personal information held by or on behalf of JRF about you and to have any inaccuracies corrected. Under UK law, a request for access to your personal information needs to be in writing and accompanied by the statutory fee (£10) (see more on this below).

Please address requests to the Data Protection Officer:

Jamie Greaves, Head of IT
The Joseph Rowntree Foundation
The Homestead
40 Water End
York YO30 6WP

Tel: +44 (0)1904 629241
Email: [email protected]

Data protection: subject access policy

  1. It is JRF policy to ensure that all subject access requests for personal data are acknowledged in 5 working days. At the time of acknowledgement, to help us deal with the request, individuals will be asked to complete a subject access request form which can be used by the requester to clarify the information sought if they wish, although requesters do not have to do this or use this form to exercise their rights.
  2. As JRF have a commitment to providing value for money, the organisation will charge the maximum permitted by law to process a request – currently £10 per request.
  3. Individuals will be required to provide proof of identity before information may be disclosed. This is to prevent a breach of the legislation by unauthorised disclosure to third parties.
  4. Where a request is made by an agent on behalf of an individual, a request will only be fulfilled where the agent can provide proof of authority to act on the individual requester's behalf.
  5. All requests will be dealt with as promptly as possible and within the timeframe set by the data protection legislation (40 calendar days) from receipt of £10 and proof of identity.


We will keep your details on record until we have completely dealt with your request, enquiry or application and then for a reasonable period afterwards, in accordance with data protection and other applicable legislation.

JRF may keep your details on record for as long as is necessary for the purposes set out above and will then endeavour to securely delete your details in accordance with data protection and other applicable legislation. However, please note that we may turn your personal information into anonymous data so that you cannot be identified from it.

Changes to this Policy

We keep this Policy under regular review. We may change this Policy from time to time by updating this page in order to reflect changes in the law and/or our privacy practices. The date at the top of this Policy will be updated accordingly. 

We encourage you to check the date of this Policy when you visit the Site for any updates or changes. We will notify you of any modified versions of this Policy that might materially affect the way we use or disclose your personal information.

By using our Site, submitting your personal information to us and/or registering an account, you consent to the use of your personal information as described in this Policy (as amended from time to time). 

This Policy only extends to the Site and does not, therefore, extend to your use of, provision of data to and collection of data on any website not connected to us to which you may link by using the hypertext links within this website.