Community Accountancy Self Help (CASH) collects and processes personal information in order to help us provide our services and meet our charitable objectives.

Our privacy policy covers the use of CASH-ONLINE and all other services that CASH provides, along with its role as an employer and a contractor of services from others. The use of this website and all our services is conditional on accepting CASH’s privacy policy. Any changes to our policy will be published on this page, along with details made available through CASH eNEWS, Twitter and Facebook. A hard copy will be supplied on request and this policy can be provided in a variety of formats to enhance accessibility (ie. braille, audio).

CASH has a Data Protection Officer who is responsible for ensuring that our use of personal data meets General Data Protection Regulation (GDPR) requirements. All CASH staff, trustees and volunteers have received training that is relevant to their role.

We believe our privacy policy is compliant with the GDPR. It can be downloaded as a Word document: CASH privacy policy May 2018.

If you have any questions or comments for CASH, please send an email to

Your rights to access personal information CASH holds

You have the right to make a Subject Access Request and see personal data CASH holds on you, have it amended (ie. corrected or updated) or deleted. We will resolve any issues you have within the GDPR required one-month timescale, free of charge.

Please contact us if you wish to make a Subject Access Request: or phone 020 8969 0747.

You have the right to lodge a complaint with the Information Commissioner’s Office if you are not satisfied with our service (further information and contact details are on their website).


CASH eNEWS is a concise monthly email newsletter, mainly focused on new CASHFACTS we’re publishing or adding to/updating existing ones. Its primarily intended for people who prefer email to getting updates on Twitter or Facebook.

We use double opt-in: after you fill out the form to subscribe to CASH eNEWS, you receive an email to confirm you wish to subscribe. You can unsubscribe at any time.

We use a WordPress plugin called Email Subscribers. We believe WordPress and Email Subscribers are GDPR compliant. See their privacy policies on their websites if you have any concerns.

What data do we collect and how do we use it?

CASH collects and processes information in order to:

  • To deliver our services in line with our charitable objectives
  • Meet its obligations as an employer, and to its trustees and volunteers and organisations and individuals from whom it obtains goods and services
  • Satisfy the needs of funders/prospective funders and other partners
  • Market our services to people ie. send information about existing and new services
  • Customise peoples experience, for example, provide information that we think is relevant to them ie. to specific London Boroughs
  • Monitor and evaluate our services
  • Satisfy our equal opportunities and diversity policies
  • Identify people each time you visit our website (see Cookie & other website data)
  • Take payments for services

You may be asked, either when you register with us, or at other times, for information about yourself, such as your name, email address, postal address and telephone number.

Our Payroll Service will require additional information.

When you order certain services, we will need to know your payment details ie. credit/payment card number and expiration date. You are under no obligation to provide this information, but if you don’t then we may not be able to provide you with certain services.

Personal data will be obtained only for one or more specified and lawful purpose and will not be further processed in any manner incompatible with that purpose. It will be adequate, relevant and not excessive in relation to the purpose or purposes for which it is being processed. It is accurate and kept up to date.

No personal information is kept unnecessarily and it is destroyed once no longer being actively used.

CASH organises personal data so that it can be accessed quickly by the relevant people.

With whom is the information shared?

CASH will not share, sell or rent your personal information to third parties. However, we may disclose your personal information to third party suppliers who provide services on our behalf. CASH may disclose aggregate statistics about our website visitors and people receiving our services to our funders/prospective funders, prospective partners, advertisers and other reputable third parties and for other lawful purposes, but these statistics will not include personally identifying information.

CASH may disclose personal information if required to do so by law or if it believes that such action is necessary to protect and defend the rights, property or personal safety of CASH’s people, visitors to the website and users of our other services.

CASH-ONLINE contains external links. When you visit these sites, we suggest that you read their privacy policies if you have any concerns. CASH is not responsible for the privacy policies or the content of external websites.

We believe all third-party suppliers who assist us to provide our services are GDPR compliant. For CASH-ONLINE they are WordPress (website host), Email Subscribers (CASH eNEWS), Heart Internet (CASH’s email host), PayPal (to make donations to CASH) and Eventbrite (course bookings and payment). See their privacy policies on their websites if you have any concerns. We use a number of plugins available through to run our website. We believe they are all GDPR compliant. If you have any concerns send us an email:

If you have any concerns about personal information being passed to the third-parties who help CASH supply any of its services, please send an email:

Cookies and other website data tracking

CASH-ONLINE uses cookies. They are pieces of information that a website transfers to your hard drive to store and sometimes track information about you. Most web browsers automatically accept cookies, but if you prefer, you can change your browser to prevent that. However, you may not be able to fully use a website if you do so.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit

When you visit CASH’s website it automatically logs your IP address (the unique address which identifies your computer on the internet) which is automatically recognised by our web server. We use IP addresses to help us administer our site and to collect broad demographic information for aggregate use. We do not link IP addresses to personally identifiable information.

CASH-ONLINE may automatically collect non-personal information about you such as the type of internet browsers you use. You cannot be identified from this information and it is only used to assist us in providing an effective service on our site.

WordPress collects some information like what websites link to CASH-ONLINE, the numbers of people visiting the site and what countries they are from. CASH doesn’t currently use Google Analytics.

CASH has accounts on TwitterFacebook. Youtube and Linkedin. Please see their privacy policies if you have any concerns.


CASH places a great importance on the security of all information associated with our service users. We have security measures in place to attempt to protect against the loss, misuse and alteration of customer data under our control. This includes robust anti-virus and anti-hacking software. Our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to user information.

With regard to our website, we use secure server software (SSL) to encrypt information you input. While we cannot ensure or guarantee that loss, misuse or alteration of data will not occur, we use our best efforts to prevent this. We believe all the third parties we use to run CASH-ONLINE are GDPR compliant.

Where is the information stored?

Paper-based materials – ie. monitoring forms you may fill out on one of CASH’s courses – are kept securely at our registered office: 1 Thorpe Close London W10 5XL.

Electronic data is also stored securely at our registered office. The charity’s data backed-up to outside the office is secure and fully GDRP compliant.

Information submitted by you may be transferred by us to reputable third party suppliers situated outside the European Economic Area (EEA) ie. WordPress used for CASH-ONLINE. We believe all our third party suppliers outside the EEA have GDPR compliant policies.

Data breaches

If we believe your personal data may have been breached, we will contact you at the earliest possible time with details of actions we intend to take and any actions you should take ie. changing passwords.

Business transfer

If CASH were to cease operating or to merge with another organisation, personal data will only be passed to other parties only on the basis that the data would be used in accordance with this privacy policy. For instance, if CASH ceases operating, CASH-ONLINE may continue to be run by another organisation. They will only be able to use any personal data for the original purpose for which it was supplied, based on the consent given.


We believe our privacy policy is fully compliant with GDPR. It can be downloaded as a Word document: CASH privacy policy May 2018.

If you have any questions or comments for CASH, please send an email to

Support our work

Make a donation

If you found using this site helpful please make a donation. Click the PayPal button and pay with your debit/credit card or by joining PayPal. You won’t be charged a transaction fee. We’re asking for a £2.50 donation on our CASHFACTS pages.