Privacy Notice
1. Who We Are
10GM is a partnership of VCSE sector infrastructure organisations across Greater Manchester. We are the data controller for personal data collected via our website, communications, and services.
Email: [email protected]
2. What Personal Data We Collect
We may collect:
- Name, address, email, phone number
- Organisation and role details
- Date of birth (for recruitment or grant applications)
- Photographs (e.g. event documentation)
- Website usage data (via cookies)
- Grant-related data, including beneficiaries’ details (if provided by applicants)
3. How We Collect and Use Your Data
We collect data through:
- Website forms, emails, phone calls, and events
- Grant applications and project visits
- Communications with staff or advisors
- Information shared by grant holders or evaluators
We use this data to:
- Respond to enquiries and provide services
- Assess and manage grant applications
- Monitor and evaluate funded projects
- Send updates, resources, and funding opportunities
- Improve our services and website
- Fulfil legal and regulatory obligations
If you provide data about beneficiaries, you must inform them and refer them to this notice.
4. Legal Basis for Processing
We process personal data under:
- Consent – for optional communications
- Contract – for agreements and recruitment
- Legal obligation – for employment and financial records
- Legitimate interests – for service improvement and stakeholder engagement
- Public task – where applicable to grant-making or sector support
5. Sharing Your Data
We may share data with:
- Trusted third-party processors (e.g. CRM, email, hosting)
- Evaluators and researchers assessing project impact
- Government departments or funders (if required by funding conditions)
- Fraud prevention agencies (see section 8)
- Local MPs (in relation to grant awards)
All data sharing is subject to appropriate safeguards.
6. International Transfers
If data is transferred outside the UK or EU, we ensure it is protected by standard contractual clauses or equivalent safeguards.
7. Cookies and Website Analytics
Our website uses cookies to enhance user experience and gather analytics. You can manage preferences via your browser. See our Terms of Use Policy for details.
8. Fraud Prevention and Identity Checks
If you apply for or receive a grant, we may:
- Share your data with fraud prevention agencies (e.g. Cifas)
- Verify identity and prevent fraud or money laundering
- Share data with law enforcement, regulators, and other funders
If you’re flagged as a fraud risk, we may refuse or withdraw grants. Fraud records may be retained for up to six years. Learn more via Cifas Fair Processing Notices.
9. Data Retention
We retain data only as long as necessary:
- Enquiries: up to 12 months
- Newsletter subscriptions: until you unsubscribe
- Contracts and recruitment: up to 6 years
- Grant-related data: as required by funders or law
10. Your Rights
You have the right to:
- Access your data
- Correct inaccuracies
- Request deletion
- Object to processing
- Suspend processing
- Withdraw consent
- Request data portability (where applicable)
To exercise your rights, contact [email protected]. You may also complain to the Information Commissioner’s Office.
11. Automated Decision-Making
We do not use your data for automated decision-making or profiling.
12. Security
We use encryption, secure servers, access controls, and other measures to protect your data.
13. Updates to This Policy
We review this policy regularly. Last updated: 19 September 2025. Changes will be posted on our website.

