Privacy Policy.

Friends of Maiwut — Registered Charity No. 1208860
Last reviewed: [INSERT DATE]

1. Who we are

Friends of Maiwut ("we", "us", "our") is a charity registered in England and Wales (registration number 1208860). Our registered office is 61 Richmond Road, Wolverhampton WB3 9JH, United Kingdom.

We are committed to protecting the privacy of our supporters, volunteers, beneficiaries and website visitors. This policy explains what personal information we collect, how we use it, who we share it with, and your rights under UK data protection law.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Friends of Maiwut is the data controller.

2. The information we collect

Depending on how you engage with us, we may collect the following categories of personal information:

Information you give us

• Name and contact details (postal address, email address, telephone number)
• Donation information, including payment references and Gift Aid declarations where applicable
• Communications you send us (emails, letters, social media messages)
• Information you share when volunteering, attending events, or partnering with us

Information we collect automatically

• Information about your visit to our website, including IP address, browser type, and pages viewed (see our Cookie Policy for details)
• Anonymous statistical data about how our website is used

Information from third parties

• Bank confirmation of donations received via direct transfer
• Information from partner organisations where relevant to a specific project or appeal

3. How we use your information

We use personal information only for the purposes for which it was given, including:

• Processing and acknowledging donations, including claiming Gift Aid where you have given a valid declaration
• Sending you news, updates and prayer requests where you have asked to receive them
• Responding to your enquiries and correspondence
• Administering our work, maintaining records, and meeting legal and regulatory obligations
• Improving our website and the services we offer

4. Our legal basis for processing

Under UK GDPR, we process personal data on one or more of the following legal bases:

• Consent — for example, when you sign up to receive our newsletter
• Legitimate interests — for example, to communicate with existing supporters about our work, where this does not override your rights
• Legal obligation — for example, to maintain financial records as required by the Charity Commission and HMRC
• Contract — for example, where you have agreed to volunteer with us or partner on a specific project

5. Who we share your information with

We do not sell, rent, or trade personal information to third parties for marketing purposes. We may share information with:

• Service providers who process information on our behalf (such as our bank, email service provider, and website hosting provider), subject to written agreements requiring them to protect the information
• HMRC, where required for Gift Aid claims
• The Charity Commission of England and Wales, where required by regulation
• Law enforcement or other authorities, where required by law

Where information is shared with service providers based outside the United Kingdom, we ensure appropriate safeguards are in place as required by UK GDPR.

6. How long we keep your information

We keep personal information for as long as is necessary for the purposes for which it was collected, and to meet our legal and regulatory obligations. Financial records, including Gift Aid declarations, are retained for at least seven years in line with HMRC requirements. Other personal data is reviewed periodically and deleted when no longer needed.

7. Your rights

Under UK data protection law, you have the right to:

• Request a copy of the personal information we hold about you
• Ask us to correct information that is inaccurate or incomplete
• Ask us to delete information we no longer need to hold
• Object to or restrict our processing of your information
• Withdraw your consent at any time, where consent is the basis for processing
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us using the details below.

8. Security

We take reasonable steps to protect personal information from loss, misuse, and unauthorised access. Despite our best efforts, no method of transmission over the internet is fully secure, and we cannot guarantee absolute security.

9. Children

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

10. Cookies and website tracking

Our website uses cookies and similar technologies. For full details, please see our Cookie Policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this policy shows when it was last reviewed. We encourage you to check this page periodically for any changes.

12. Contact us

If you have any questions about this Privacy Policy, or about how we handle your personal information, please contact:

Friends of Maiwut
61 Richmond Road, Wolverhampton WB3 9JH, United Kingdom
Email: info@friendsofmaiwut.org

You also have the right to lodge a complaint with the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113  •  Website: ico.org.uk