Donate

Privacy Policy – Hannah’s Hope (UK)

Effective Date: 28/09/2025

  1. Who We Are

Hannah’s Hope (“we”, “us”, or “our”) is a UK-based charitable organisation committed to supporting families affected by childhood brain tumours.

Our website is: https://www.hannahs-hope.co.uk

We are committed to protecting your personal information and your right to privacy, in full accordance with:

  • The UK General Data Protection Regulation (UK GDPR)
  • The Data Protection Act 2018
  • Other applicable laws and regulations in the United Kingdom

If you have questions or concerns about our use of your personal data, please contact us via the details in Section 10.

  1. The Information We Collect

We may collect and process the following types of personal information:

We do not knowingly collect sensitive personal data unless explicitly provided and consented to by you.

 

  1. Legal Basis for Processing

We process personal data under the following legal grounds, in accordance with the UK GDPR:

  • Consent — When you opt-in to communications or provide your data voluntarily
  • Legal obligation — For compliance with laws (e.g. Gift Aid, tax reporting)
  • Legitimate interest — For purposes such as fundraising, communication, or improving our services (balanced against your rights)
  • Contractual necessity — Where necessary to perform services you request from us

 

  1. How We Use Your Information

We use your data to:

  • Process and acknowledge donations (including Gift Aid claims)
  • Send updates, newsletters, or fundraising appeals (with your consent)
  • Respond to your enquiries or feedback
  • Organise and administer events
  • Maintain website security and performance
  • Meet our legal and regulatory obligations

 

  1. Sharing Your Information

We will never sell your data. We may share it with trusted UK-based third parties such as:

  • Payment processors (e.g. Stripe, PayPal)
  • Email marketing services (e.g. Mailchimp, if used)
  • Charity regulators or HMRC, for Gift Aid or compliance
  • IT and web service providers for secure hosting and support
  • Professional advisors (e.g. accountants, auditors)

All third parties are bound by strict confidentiality and data protection obligations.

 

  1. Cookies and Tracking Technologies

Our website may use cookies for:

  • Site functionality
  • Performance analysis (e.g. through Google Analytics)
  • User experience enhancement

You can manage your cookie preferences via your browser. See our separate [Cookie Policy] if applicable.

 

  1. Data Storage and Retention

We store personal data securely within the United Kingdom or countries deemed adequate under UK data laws.

We retain your data only as long as necessary:

  • Donation records: 6–7 years, for tax and charity law compliance
  • Newsletter/email preferences: until you unsubscribe or withdraw consent
  • Website usage data: typically 12–24 months, anonymised where possible

When no longer needed, your data is securely deleted or anonymised.

 

  1. Your Rights Under UK Law

Under the UK GDPR, you have the following rights:

  • Access – You can request a copy of the personal data we hold about you
  • Correction – You can ask us to correct inaccuracies
  • Erasure – You can request we delete your data (where legally possible)
  • Objection – You can object to processing for legitimate interests or direct marketing
  • Restriction – You can request limited processing of your data
  • Portability – You can request we transfer your data to another provider
  • Withdraw consent – Where consent is our legal basis (e.g. email marketing)

To exercise any of your rights, contact us at the details in Section 10.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/

 

  1. Data Security

We have implemented appropriate technical and organisational safeguards to protect your data from loss, misuse, or unauthorised access.

Measures may include:

  • SSL encryption (HTTPS)
  • Firewalls, malware protection, and access controls
  • Staff training on data protection
  • Secure backup and data retention procedures

Despite our best efforts, no method of transmission is 100% secure.

 

  1. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, contact:

Hannah’s Hope

Mercia Marina, Willington, Derbyshire, DE65 6AD
Email: hello@hannahs-hope.co.uk

Website: https://www.hannahs-hope.co.uk

  1. Changes to This Policy

We may update this policy from time to time to reflect changes in the law or our operations. Any updates will be posted on this page with a new “Effective Date.”

Please check this page regularly for updates.