Privacy Policy

1. Who We Are

Little Angels Research Fund is a registered charity in England and Wales (Charity No. 1214152). We are the data controller for the personal information we hold about you. If you have any questions about this policy or how we handle your data, please contact us at info@littleangelsresearch.org.uk.

2. What Information We Collect

We may collect the following categories of personal information:

Identity data: your name, title, and date of birth (where relevant).
Contact data: your email address, postal address, and telephone number.
Financial data: payment card details (processed securely by our payment provider; we do not store card numbers) and details of donations made.
Transaction data: records of donations, direct debit mandates, and Gift Aid declarations.
Communications data: your preferences for receiving communications from us, and any correspondence you send us.
Technical data: your IP address, browser type and version, and pages visited on our website, collected via cookies (see our Cookie Policy).

We do not collect sensitive personal data (such as health information) unless you choose to share it with us voluntarily in correspondence.

3. How We Use Your Information

We use your personal information for the following purposes:

To process donations, direct debit mandates, and Gift Aid claims.
To send you receipts, acknowledgements, and updates about your giving.
To send you our newsletter and updates about our work, where you have given consent.
To respond to enquiries and requests you send us.
To maintain accurate records for charity compliance and reporting to the Charity Commission.
To improve our website and communications based on how they are used.

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

Consent: for sending newsletters and marketing communications. You can withdraw consent at any time.
Contract: to process donations and fulfil direct debit arrangements you have entered into.
Legal obligation: to maintain records required by HMRC (Gift Aid), the Charity Commission, and other regulators.
Legitimate interests: to respond to your enquiries, maintain supporter records, and improve our website and services.

5. Who We Share Your Information With

We do not sell or rent your personal data to third parties. We may share your information with:

Payment processors: to handle donations and direct debit mandates securely.
Email service providers: to send newsletters and communications on our behalf.
HMRC: to claim Gift Aid on eligible donations.
Regulatory bodies: such as the Charity Commission, where required by law.

All third parties are required to handle your data securely and in accordance with UK data protection law.

6. How Long We Keep Your Data

We retain donor records, including Gift Aid declarations, for seven years after the last donation, as required by HMRC. Communication preferences are retained until you withdraw consent. Enquiry correspondence is typically retained for two years. We regularly review our records and delete data that is no longer necessary.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: to request a copy of the information we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to ask us to delete your data in certain circumstances.
Right to restrict processing: to ask us to limit how we use your data.
Right to data portability: to receive your data in a machine-readable format.
Right to object: to object to processing based on legitimate interests or for direct marketing.
Rights related to automated decision-making: we do not use automated decision-making that has a significant effect on you.

To exercise any of these rights, please contact us at info@littleangelsresearch.org.uk. We will respond within 30 days. If you are unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your information against unauthorised access, loss, or disclosure. All payment data is handled by PCI-DSS compliant payment processors. We do not store credit or debit card numbers on our systems.

9. Cookies

Our website uses cookies. Please see our Cookie Policy for full details of what cookies we use and how to control them.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. This policy was last updated in June 2026.