Shelter

https://www.shelter.org.uk · 40/92 checks passed · not_for_profit

Compliance report (framework 0.8)

Gate passed (every Core check must pass) · not counted towards the gate: paused 35, draft 48, ready for review 54.

Site level: 0 (no scored checks yet).

By level

LevelResult
Level 1 — Basic 23/37 (10 failed)
Level 2 — Enhanced 7/27 (6 failed)
Level 3 — Advanced 0/10 (2 failed)

By category

CategoryResult
Accessibility 7/13
Accountability 0/5
AI & Automation 3/8
Interoperability 0/3
Privacy 13/16
Provenance 0/2
Security 6/11
Transparency 1/13
Responsibility to the Future 0/3

Level 1 — Basic

Accessibility

AI & Automation

Privacy

Security

Transparency

Level 2 — Enhanced

Accessibility

Accountability

AI & Automation

Interoperability

Privacy

  • retention_stated: The visible content references a 'Retention of your data' section heading but the actual retention content/text is not shown or explained on the page.
    Fix: Include explicit retention period information in the Retention section, clearly describing how long each category of data is kept.
  • specific: No specific time periods (e.g., '7 years', 'for the duration of the relationship plus X years') are provided in the visible content.
    Fix: State concrete retention durations for each data category (e.g., donor records kept for 7 years for Gift Aid compliance, case files retained for X years after case closure).
  • equal_choices: The page does not display a visible consent mechanism with accept/reject options, so equal prominence cannot be confirmed from the privacy policy text alone.
    Fix: Ensure the cookie/consent banner presents a 'Reject All' button with equal visual prominence (same size, color, and placement) to the 'Accept All' button, and reference this in the privacy policy.
  • partner_sharing_mentioned: The banner only mentions improving user experience via remembered settings and does not disclose any data sharing with third-party partners.
    Fix: Update the cookie banner copy to explicitly disclose whether and how user data is shared with third-party partners, with a link to full details.
  • partner_count_specific: No partner sharing is disclosed and no specific numeric count of partners is stated anywhere in the consent copy.
    Fix: If partner sharing occurs, state the exact number of third-party partners (e.g., 'We share data with X partners') directly in the banner or consent settings.

Provenance

Security

Transparency

Level 3 — Advanced

Accessibility

Accountability

Interoperability

Security

Transparency

Responsibility to the Future

  • specific_metrics: The page cites general industry figures (e.g., 164,000 tonnes discarded, 44% emissions reduction) but discloses no specific figures for Shelter's own carbon footprint, energy use, or emissions.
    Fix: Publish Shelter's own measured environmental metrics, such as annual carbon footprint, energy consumption, and emissions reductions against a baseline.
  • hosting_disclosure: The page makes no mention of the carbon or energy profile of the website's hosting infrastructure.
    Fix: Add a statement disclosing the hosting provider's energy profile, such as whether servers are powered by renewable energy, and any associated web carbon metrics.