Privacy Policy
RehVamp Foundation (CIO)
Last updated: 04-09-2025
1. Introduction
RehVamp Foundation (CIO) (“we”, “us”, “our”) is committed to protecting the privacy and personal data of everyone who interacts with us — including children, young people, families, supporters, donors, and visitors to our website at www.rehvampfoundation.org.
This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
RehVamp Foundation (CIO) is a registered Charitable Incorporated Organisation in England and Wales, working to advance health, education, and wellbeing for children and young people.
Contact Information:
📍 Registered Address:
11 Old Bond Street, London, England, W1S 4PN, United Kingdom
📧 Email: connect@rehvampfoundation.org
📞 Phone: +44 7415 999508
🌐 Website: www.rehvampfoundation.org
3. What Data We Collect
We may collect and process the following types of personal data:
Website Visitors
- IP address and browser information
- Pages visited and time spent on the site
- Cookies and tracking technologies (see section 9)
Supporters & Donors
- Full name and contact details
- Payment information (processed securely via third-party platforms)
- Gift Aid declarations (if applicable)
- Donation history
Event Participants or Volunteers
- Name, contact details, and emergency contact info
- Health or dietary information (where relevant and consented)
- DBS check results (where required for safeguarding)
Children and Young People (if engaged directly)
- First name, age, and non-identifying demographic info
- Parental/guardian consent (for all data collected from minors)
- Safeguarding information (where relevant)
Important: We do not knowingly collect personal data from children under 13 without verified parental consent.
4. How We Use Your Data
We only use your data where we have a legal basis to do so. This includes:
- Responding to your enquiries or requests
- Processing donations and claiming Gift Aid
- Sending you updates, newsletters, or fundraising appeals (with your consent)
- Administering events, programmes, or volunteer opportunities
- Safeguarding children and vulnerable people
- Improving our website and digital services
- Complying with legal and regulatory obligations
5. Legal Basis for Processing
We rely on the following legal grounds to process your data:
- Consent – for email communications or special category data
- Legal obligation – for Gift Aid, safeguarding, or record-keeping
- Legitimate interests – for general operations, supporter engagement, and website analytics
- Vital interests – where data is needed to protect life or prevent harm
6. Data Sharing and Third Parties
We do not sell or rent your data.
We may share your personal data with trusted third parties in limited circumstances, such as:
- Payment processors (e.g., Stripe, PayPal)
- Email marketing platforms (e.g., Mailchimp)
- Event partners or venues (if applicable)
- Regulatory bodies or law enforcement (if legally required)
- IT and website service providers (for secure hosting and functionality)
All third parties are required to process your data securely and lawfully, under contract.
7. Data Retention
We retain personal data only for as long as necessary:
Retention Periods:
- Donation and supporter data: Up to 6 years (for tax and accounting)
- Safeguarding records: In line with legal and sector-specific guidance
- Enquiry and communication data: Up to 2 years
- Child-related data: Securely stored and deleted according to safeguarding policy and consent
8. Your Rights
Under the UK GDPR, you have the following rights:
Your Data Protection Rights:
- Right to access – request a copy of your personal data
- Right to rectification – correct inaccurate or incomplete data
- Right to erasure – request deletion of your data (in certain cases)
- Right to restrict processing – limit how we use your data
- Right to object – object to direct marketing or certain processing
- Right to data portability – receive your data in a usable format
To exercise any of these rights, please contact us at connect@rehvampfoundation.org.
Making a Complaint:
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
🌐 www.ico.org.uk
9. Cookies and Tracking Technologies
Our website uses cookies to improve user experience, measure site traffic, and support security. Cookies are small text files stored on your device.
You can control cookies through your browser settings or via our cookie banner on your first visit.
For more information, please read our full Cookie Policy [insert link].
10. Data Security
We take data protection seriously and implement appropriate physical, technical, and organisational safeguards to prevent unauthorised access, loss, or misuse of your data.
Our Security Measures:
- Encrypted connections
- Access control measures
- Regular security audits
- GDPR-compliant third-party services
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we do, we’ll update the “last updated” date at the top of this page. We encourage you to review the policy regularly.
12. Contact Us
If you have questions about this policy or how we handle your data, please contact:
RehVamp Foundation (CIO)
📧 Email: connect@rehvampfoundation.org
📍 Address: 11 Old Bond Street, London, W1S 4PN, United Kingdom
📞 Phone: +44 7415 999508
🌐 Website: www.rehvampfoundation.org
Thank you for trusting us to protect your data.
