We are here to help you
📩 Contact us for any questions
Privacy Notice
Last updated: 12 December 2025
This Privacy Notice explains how HOPE BR CYF (“HOPE BR CYF”, “we”, “us”, or “our”) collects, uses, shares and protects your personal data when you visit our website, make a donation, subscribe to our communications or otherwise interact with us.
HOPE BR CYF is the data controller for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and applicable data protection laws in the United Kingdom.
1. Who We Are
HOPE BR CYF
21 TY N Y PARC RD
SOUTH GLAMORGAN
CARDIFF
WALES CF14 6BH
United Kingdom
Email: contact@hopebrcyf.co.uk
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- Identification and contact data – such as your name, email address, postal address, telephone number.
- Donation and transaction data – such as donation amount, currency, date, payment method, transaction identifiers (we do not store full card details).
- Communication data – such as your messages, feedback and information you provide when you contact us.
- Marketing preferences – such as your subscription to our newsletters or campaign updates.
- Technical data – such as IP address, browser type, device identifiers, and pages visited, collected via cookies and similar technologies.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- To process and acknowledge your donations and issue receipts;
- To manage recurring donations and your donor account, where applicable;
- To respond to your enquiries and provide support;
- To send you updates about our work, campaigns and opportunities to support us, where permitted;
- To maintain and improve our website, services and security;
- To comply with legal obligations, such as accounting, reporting and fraud prevention.
4. Legal Bases for Processing
We rely on the following legal bases under the UK GDPR to process your personal data:
- Contract – where processing is necessary to perform a contract with you, for example, to process your donation.
- Legal obligation – where we must comply with legal requirements, such as tax and accounting rules.
- Legitimate interests – to pursue our legitimate interests in operating and developing our projects, communicating with supporters and maintaining the security of our website, provided that your interests and fundamental rights do not override those interests.
- Consent – where you have given us clear consent, for example, to receive marketing emails. You can withdraw your consent at any time by following the unsubscribe link in our emails or contacting us.
5. How Long We Keep Your Data
We keep your personal data only for as long as necessary for the purposes described in this Notice and to meet our legal, accounting or reporting requirements. The retention period depends on the type of data, for example:
- Donation and transaction records are typically kept for 6–7 years for tax and audit purposes;
- Marketing contact data is kept until you unsubscribe or object to receiving communications;
- Technical log data is kept for a shorter period, usually a few months, unless needed for security investigations.
6. Sharing Your Personal Data
We may share your personal data with:
- Payment service providers who process donations on our behalf;
- IT and hosting providers who help us operate our website and systems;
- Professional advisors such as auditors, accountants and legal counsel;
- Regulators and public authorities where required by law.
We require all third-party service providers who process personal data on our behalf to respect the security of your data and to treat it in accordance with the law. They may only process your personal data on our instructions and for specified purposes.
7. International Transfers
Some of our service providers may be located outside the United Kingdom and the European Economic Area. Where we transfer personal data internationally, we do so in compliance with applicable data protection laws, for example by using the UK’s approved standard contractual clauses or transferring to countries with an adequacy decision.
8. Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. However, no system can be completely secure, and we cannot guarantee absolute security of your data.
9. Your Rights
Under the UK GDPR, you have certain rights in relation to your personal data, subject to conditions and exceptions:
- Right of access – to obtain a copy of your personal data and information about how we process it.
- Right to rectification – to request correction of inaccurate or incomplete data.
- Right to erasure – to request deletion of your data in certain circumstances.
- Right to restriction – to request restriction of processing in certain circumstances.
- Right to data portability – to receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller where applicable.
- Right to object – to object to processing based on legitimate interests or for direct marketing.
- Rights in relation to automated decision-making – we do not use your data for automated decisions producing legal or similarly significant effects.
To exercise your rights, please contact us at contact@hopebr.co.uk. We may need to verify your identity before responding to your request.
10. Cookies and Similar Technologies
We use cookies and similar technologies to operate our website, analyse usage and improve your experience. Some cookies are essential for the functioning of the site, while others are optional and used for analytics or marketing.
You can manage your cookie preferences through your browser settings or any cookie banner we provide. For more information, please see our Cookie Policy, if available, or contact us.
11. Marketing Communications
If you choose to receive updates from us, we will send you emails about our projects, fundraising campaigns and events. You can stop receiving these communications at any time by clicking the “unsubscribe” link in our emails or by contacting us.
12. Children’s Data
Our website is not directed at children under 18 years of age. We do not knowingly collect personal data directly from children through the site. If you believe a child has provided us with personal data, please contact us so that we can delete it where appropriate.
13. Complaints
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the UK data protection authority:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
14. Changes to This Privacy Notice
We may update this Privacy Notice from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this Notice periodically to stay informed about how we protect your data.
Support emails:
youhelped@hopebr.uk
support@hopebrcyf.co.uk
We aim to respond within 24-48 hours on business days.
Important information about donations
When proceeding to checkout and clicking the "Donate Now" button (or equivalent on the payment page), you expressly accept all our terms and policies. These documents can be read at any time through the links below:
We recommend reading them carefully before completing any donation.