Privacy notice
Placeholder – TBTC to supply. The text below is illustrative only, written for this prototype, and is not official guidance from any real charity.
This prototype runs on 100% synthetic data — no real donor, supporter or staff information is stored or processed. A real deployment would need a privacy notice written and approved by the charity, covering what personal data is collected (for Supporter Group leads and members only — see §11 of the build spec), why, how long it is kept, and how to exercise data-subject rights.
See docs/DPIA-starter.md and docs/TBTC_REVIEW_CHECKLIST.md in the project repository for the compliance groundwork this prototype has prepared ahead of a real privacy notice being drafted.