Privacy Policy
This Privacy Policy explains how Memusi Foundation (Registered Charity No. 1133371) collects, uses, and protects your personal data. We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Data Controller: Memusi Foundation
Registered Charity Number: 1133371
Registered Address: 55 Broadfield Park, Holmbridge, HD9 2JQ
Data Protection Contact: Sally Norton, sally@memusifoundation.co.uk
2. What personal data we collect
We collect personal data in the following circumstances:
-
Newsletter subscription: your first name, last name, and email address.
-
Volunteer enquiry form: your first name, last name, email address, phone number, date of birth, preferred trip dates, and any additional information you choose to share.
-
Sponsor a Project enquiry form: your first name, last name, email address, and organisation name (if applicable).
-
Donation forms: your name, email address, and billing information as processed by our payment providers (currently Zeffy). We do not store your full card details.
-
Child sponsorship correspondence: the names and correspondence details of child sponsors, and the names and correspondence of sponsored children, as necessary to facilitate the sponsorship relationship.
-
Corporate partnership enquiries: your name, email address, job title, and organisation.
3. How we use your personal data
We use your personal data for the following purposes:
-
To process your donation, volunteer booking, or enquiry and provide you with the goods or services you have requested.
-
To send you our newsletter and updates about our work, where you have consented to receive these.
-
To manage child sponsorship arrangements, including facilitating annual correspondence between sponsors and sponsored children.
-
To communicate with you about your volunteer trip, including pre-departure information and post-trip follow-up.
-
To respond to enquiries about sponsoring a project or corporate partnerships.
-
To comply with our legal obligations as a registered charity.
-
To analyse how our website is used, in order to improve it (using Wix Analytics and Google Analytics — see Section 7).
4. Legal basis for processing
We process your personal data on the following legal bases:
-
Consent: where you have actively opted in to receive our newsletter or marketing communications. You can withdraw your consent at any time.
-
Contract: where processing is necessary to fulfil a contract with you, such as processing a donation or managing a volunteer trip booking.
-
Legitimate interests: where we have a legitimate interest in processing your data that is not overridden by your rights, such as improving our website and communications.
-
Legal obligation: where we are required to process your data to comply with charity law or other legal requirements.
5. Who we share your data with
We will only share your personal data in the following circumstances:
-
With service providers acting on our behalf, such as our website provider (Wix), email service provider (Gmail/Google Workspace), and payment processors (Wix Payments, JustGiving). These providers are bound by data processing agreements and may only process your data on our instructions.
-
With HMRC, where you have provided a Gift Aid declaration and we are required to submit your details as part of a Gift Aid claim.
-
Where we are required to do so by law or regulatory authority.
We will never sell your personal data or share it with third parties for their own marketing purposes.
6. How long we keep your data
-
Newsletter subscriber data is retained for as long as you remain subscribed. If you unsubscribe, we will remove your data within 30 days.
-
Volunteer enquiry and booking data is retained for 3 years after your trip, in case of any follow-up queries or legal requirements.
-
Donation records are retained for 7 years in accordance with HMRC requirements for Gift Aid.
-
Child sponsorship records are retained for the duration of the sponsorship and for 3 years afterwards.
-
Enquiry form data where no subsequent relationship is formed is retained for 12 months.
7. Cookies and analytics
Our website is built on Wix and uses cookies automatically set by the platform. We also use Google Analytics 4 (GA4) to understand how visitors interact with our site.
-
Google Signals: We have enabled Google Signals, which allows Google to collect data about your visitation information and associate it with Google information from accounts of signed-in users who have consented to this association for the purpose of ads personalization. This may include your location, search history, and data from sites that partner with Google.
-
User-provided data: Where you provide an email address (e.g., via a newsletter signup), we may share a hashed, non-identifiable version of this data with Google to improve our measurement and ad performance.
-
Opt-out: You can manage or opt-out of this tracking via your Google My Ad Center or by using the Google Analytics Opt-out Browser Add-on. For full details, please see our Cookie Policy.
8. Your rights
Under UK GDPR, you have the following rights:
-
The right to access the personal data we hold about you.
-
The right to have inaccurate data corrected.
-
The right to have your data deleted ('the right to be forgotten'), subject to our legal obligations.
-
The right to restrict or object to our processing of your data.
-
The right to data portability.
-
The right to withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, please contact Sally Norton at sally@memusifoundation.co.uk. We will respond within 30 days.
9. How to complain
If you are unhappy with how we have handled your personal data, please contact us in the first instance at the address above. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available on our website. This policy was last updated in May 2026.
11. Contact us
If you have any questions about this Privacy Policy, please contact:
Sally Norton
Memusi Foundation, 55 Broadfield Park, Holmbridge, HD9 2JQ
Email: sally@memusifoundation.co.uk