Privacy notice

Health and Hope UK is a charitable company limited by guarantee, registered in England under company no. 08290412 and charity no. 1151105. This Privacy Notice is also available as a downloadable file here.

1. OVERVIEW

1.1 SUMMARY

This Privacy Policy describes how Health & Hope UK collects, uses and discloses information, and what choices you have with respect to the information. 

When entering details on our website or contacting our UK office, your personal data and donation details will be processed by Health & Hope UK. 

  • Health & Hope UK is committed to protecting and respecting your privacy and complying with the principles of the Data Protection act and UK General Data Protection Act (GDPR). This policy sets out the basis on which any personal data we collect from you, or that you provide to us through your use of our website, will be processed by us.
  • Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
  • The data controller is the Health & Hope UK, 7 Bournemouth Road, Chandler’s Ford, Eastleigh, Hampshire SO53 3DA. This means that Health & Hope UK alone determines how your personal data will be used in relation to services we provide to you.
  • We are committed to processing information about you fairly and in a transparent manner and the aim of this document is to provide you with sufficient information for you to be able to understand what we are doing with your data. If you are unsure how we are handling information about you or you think we could improve our privacy information please let us know.
  • If we would like to process your personal data for any other purpose incompatible with the purposes listed below, we will provide you with appropriate additional privacy information at the point where you come across those additional purposes.  Our commitment to you is that we will not process your data for any purpose other than those listed, or similar to those listed in this privacy policy.

1.2 CHANGES TO THIS POLICY

We may change this privacy policy from time to time to reflect changes in data protection law, but if we change it in a way which significantly alters the terms upon which you have agreed to use our website, we will post notice of the change on our website and you will be deemed to have accepted such changes.

This privacy notice was last updated in June 2025.

2. YOUR DATA

2.1 WHAT PERSONAL DATA WE HOLD ABOUT YOU

Depending on the services you interact with, we may hold the following personal data on you if you have provided it to us:

  • Names
  • Addresses
  • E-mail addresses
  • Telephone number
  • Gift aid status
  • Details of your visits to the Health & Hope website and the resources that you access using cookies (see below). Please access our cookie policy at this link.
  • General communication we may have with you
  • Marketing Preferences you have for our services
  • Relationships, including, if you have provided it, your contact with an organisation or and affiliation
  • Information on your social media profiles where you follow our page on Facebook

Information that you provide to us directly

  • We collect this information in connection with specific activities, for example, when you use our website or printed forms or telephone us to:
    • Make a donation to us
    • Sign up for our email newsletters
    • Or otherwise provide us with personal information.

Information that you give us indirectly

  • Your information may be shared with us by fundraising sites like JustGiving. These independent third parties will only do so when you have indicated that you wish to support Health & Hope and with your consent. You should check their privacy policy when you provide your information to understand fully how they will process your data.

Information that we collect from your use of our website

  • Website usage information is collected using cookies. This helps us to see how many people visit our website and other key activities. Visitors to our website are informed of our use of cookies through a banner and can manage their preferences. For more information, please refer to our Cookie Policy at the link provided.

Information from third parties

  • We may receive information about you from third parties, for example from a friend who wants to send you a gift or information, book an event or make a donation in your name.

Information from public sources

  • We may use information you provide to us with information available from public sources or records in order to gain a better understanding of our supporters. This helps us to improve our fundraising methods. Such information may be found in places such as Companies House and information that has been published online and in print.

Sensitive data

  • Certain categories of personal information are more sensitive. Sensitive personal data or special categories of data and covers health information, race and ethnicity, religious or philosophical beliefs and political opinions, etc.
  • We do not collect sensitive personal information about you unless there is a clear reason for doing so.
  • When we collect this information, we will make it clear to you what we are collecting and why and what are our legitimate interests or other legal grounds for processing this information.

Under 16s

  • If you are aged 16 or under and would like to make a donation, please make sure that you have your parent or guardian’s permission before giving us your personal information.
  • When we collect information about a child or young person, we will make it clear why we are collecting this information and how it will be used.

2.2. THE PURPOSE FOR HAVING IT AND OUR LEGAL REASON FOR DOING SO

We rely on the legal basis of consent and legitimate interest for processing your data. Legitimate interest is about balancing the interests of Health & Hope UK against your rights and freedoms and having due regard to your reasonable expectations about the use of your data. These purposes include:

  • Mailing other information about Health & Hope UK such as our Annual Review
  • Thanking (either by post or telephone) those of you who have made a financial gift
  • Research and wealth screening activity to better tailor any financial requests we make of you so that they reflect your specific interests in our mission and are at an appropriate financial level

We rely on the legitimate interest legal basis to share with you the fundraising needs of the charity and to ask for your support, given your engagement with our resources and events, provided that we have also previously obtained any additional consents required to send this information to you in particular formats. For example, we will not send fundraising information or requests to you by email where you have not opted in to this format beforehand. You can let us know at any time if you would prefer not to receive these communications.

We use your consent for all our email newsletters. Every email newsletter you receive provides a clear opportunity for you to opt out of/unsubscribe from future email newsletters.

We never sell your data, and we will never share it with another company or charity for their own purposes.

We will use information provided to help us deliver our services to you:

What we use your information for

Our Reason for Having your personal data

Our Legitimate Interest

Updating you on the work of the Health & Hope Partnership. 

Marketing appeals and fundraising.

Your consent to marketing

Your consent to cookies

Keeping our records up to date, working out which of our services may interest you and telling you about them.

Developing new services and ideas

Defining types of supporters for appropriate campaigns.

Seeking your consent when we need it to contact you.

Being efficient about how we fulfil our legal duties.

Sending paper based marketing

Building up a profile regarding you

Having appropriate security and safeguards

Processing your donation

Fulfilling your donation request

Legal obligations surrounding gift aid

Having appropriate security and safeguards

Responding to Queries

To provide the best possible customer service and answer your queries quickly

Our need to respond to concerns

 

  2.3 HOW LONG WE KEEP IT FOR

  • If you have made a donation to Health & Hope UK, we will hold personal information about you in our database that you have provided, to process the donation and keep a record of your gift along with your marketing preferences.  This will be kept for a period of seven financial years from the date of your last donation, before being pseudonymised (see below), unless you continue to be an active subscriber to our mailing list. 
  • An active subscriber is defined as someone who receives information from us via our electronic mailing service and has not clicked 'unsubscribe'. 
  • At any point you may request your personal data and past donation history to be pseudonymised and your personal details deleted. However, if you have gift-aided your donation, we have a legal obligation to keep a copy of your gift aid declaration and associated giving data for seven years in order to comply with Her Majesty's Revenue and Customs (HMRC).
  • If you subscribe to our mailing list and have not made a donation, your personal details will be permanently deleted within 28 days or immediately upon request, if you unsubscribe to one of our mailings.
  • If you support an appeal, respond to a fundraising campaign or re-subscribe to our mailing list, this will refresh the time period above.
  • We may also need to keep your records for longer to comply with any other legal obligation.
  • We have determined by the legal basis of legitimate interest that we will retain your records for three years, if not subject to a longer retention period (e.g. gift aided donation), if there has been no activity within that time. Activity will include:
    • Making a donation
    • Remaining on our mailing list through consent
    • Event sign-up
    • Newletter click
    • Requested for your details to be deleted or pseudonymised as above.
  • Once your records exceed the necessary time, we will anonymize them through pseudonymization. This is a procedure by which all the identifying fields within a data record are replaced by one or more artificial identifiers, or pseudonyms. There can be a single pseudonym for a collection of replaced fields or a pseudonym per replaced field. In practice, this means that all your personal data will be deleted as listed above in 2.1 and we will solely keep transaction information for compliance and record keeping purposes.
  • We may also contact you where we have consent or legitimate interest before we anonymize your record to see if you would still like to be kept informed about Health & Hope UK's appeals and services. We rely on consent for email marketing and legitimate interest for direct postal appeals.
  • Health & Hope UK will hold data on the above schedule unless:        

a) you ask us to remove it
b) we believe that you are no longer interested in our business
c) we no longer need it for the purposes it was collected.   

  • We always think about your best interests when we apply retention rules to our systems and are always happy to remove you at your request. If you have any questions on how long we keep your data please contact us: info@healthandhope.org

2.4 HOW WE SECURE AND MAINTAIN IT

  • We will take all steps reasonably necessary including policies, procedures and security features to ensure that your data is treated securely and protected from unauthorised and unlawful access and use and in accordance with this privacy policy. 
  • Unfortunately, the transmission of information via the internet is not completely secure and although we will do our best to protect your personal data transmitted to us via the internet we cannot guarantee the security of your data transmitted to the healthandhope.org website from your device: any transmission is at your own risk. 
  • Where we have given you (or where you have chosen) a password which enables you to access certain parts of the website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

2.5 NECESSARY PROCESSORS

Health & Hope UK is a small team of less than 5 people and volunteers, who launch UK wide and international appeals, processing donations to many people each year. In order to achieve this, we work with some of the best third parties to allow you to make donations as efficiently and cost-effectively as possible.  This means that donations we receive from you will pass through a third-party platform to get to us. In addition, your email, first name and last name will be stored with our mailing service provider if you sign up for our regular eNewsletter.  Each partner is carefully reviewed and maintains the same security and standards towards the data protection act as we do. These are outlined below:

Name of Organisation

Purpose

Stripe

Online or Direct Debit Donation Processing

GoCardless

Direct Debit Donation Processing

Square

Contactless / Chip & Pin Card Processing

Fundraise Up

Online Donation Processing

Paypal

Online Donation Processing

Global Giving

Online Donation Processing

2.6 WHO WE SHARE IT WITH AND HOW

We may disclose your personal information to third parties:

  • If we are under a duty to disclose or share your personal data to comply with any legal obligation;
  • To fulfil any service that you request from us (e.g. enquiry via our website etc.);
  • To enforce or apply our terms of use and other agreements; 
  • To protect the rights, property, or safety of Health & Hope UK, you our customer, or others, including, if required, exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

 

Name of Organisation

Purpose

Data collected/recorded

HMRC

Submission of applications for Gift Aid funding

Name, address, donation details

Quickbooks online

Bookkeeping and recording financial transactions

Name, donation details

Salesforce

Central database and marketing

Name, address, email, phone (if provide), donation details, event attendance, communications (e.g. letters/emails sent or received)

MailChimp

Mailing service list management

Name, email, analytic data (e.g. tracking email opens & click-throughs)  

 

2.7 INTERNATIONAL TRANSFER OF PERSONAL DATA

If Health & Hope UK ever had to transfer data outside of the European economic area, we will take measures to ensure all adequate safeguards are in place that matches the EU Data Protection standards, in accordance with legal requirements. 

3. YOUR RIGHTS & ACCESSING YOUR DATA

Right of access.

You have the right of access to information we hold about or concerning you.  If you would like to exercise this right you should email us at info@healthandhope.org

For example; we could provide a copy of all your information in a .csv file or .pdf or let you know how many times you have donated / gift aided your donations.

Right of rectification or erasure.

If you feel that any data that we hold about you is inaccurate you have the right to ask us to correct or rectify it.  You also have a right to ask us to erase information about you where you can demonstrate that the data we hold is no longer needed by us, or if you withdraw the consent upon which our processing is based, or if you feel that we are unlawfully processing your data. 

Your right of rectification and erasure extends to anyone we have disclosed your personal information to and we will shall take all reasonable steps to inform those with whom we have shared your data about your request for erasure or, where possible, delete it ourselves.

Right to restriction of processing.

You have a right to request that we refrain from processing your data where you contest its accuracy, or the processing is unlawful and you have opposed its erasure, or where we don’t need to hold your data anymore but you need us to establish, exercise or defend any legal claims, or we are in dispute about the legality of our processing your personal data.

Right to Portability.

You have a right to receive any personal data that you have provided to us in order to transfer it onto another data controller where the processing is based on consent and is carried out by automated means. This is called a data portability request.

Right to Object.

You have a right to object to our processing of your personal data.

This includes the right to object to any direct marketing we may undertake and to any automated decisions based on profiling which we carry out. This also includes the right to object to any processing based on legitimate interests.

Right to Withdraw Consent.

You have the right to withdraw your consent for the processing of your personal data where the processing is based on consent.

You can do so by contacting us on info@healthandhope.org and we will immediately mark our records accordingly, this will take effect as soon as possible.

Please be aware that some activities may already have left our system at time of consent withdrawal.

Right of Complaint.

You also have a right to lodge a complaint about any aspect of how we are handling your data with the UK’s Information Commissioner’s Office who can be contacted at http://www.ico.org.uk. Please also refer to our Complaints Policy for further details of how to make a complaint.

4. DONATING ON BEHALF OF SOMEONE

You are responsible for informing and obtaining the consent of any third parties whose data you enter into our website.

5. CONTACTING HEALTH & HOPE UK

If you would like to find out more about this policy or ask us any questions, please contact us at the Health & Hope UK address details found in the footer on our website or on: info@healthandhope.org