Privacy Policy
Beyond Assumption – Privacy Policy
(Charity No. 1216643)
Last updated: 31 March 2026
1. Introduction
Beyond Assumption (“we”, “us”, “our”, “the Charity”) is committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with us, including when you use our services, donate, fundraise, or visit our website.
We act as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What is Personal Data?
Personal data means any information that can identify you, either directly or indirectly. This may include your name, contact details, and information about your interactions with us. ()
Some information (such as health data) is considered special category data and is subject to additional protections.
3. Information We Collect
We may collect and process the following types of personal data:
3.1 Information You Provide Directly
● Name, email address, phone number, and postal address
● Donation and payment details
● Information provided when registering for events or fundraising
● Communications with us (e.g. emails, messages, enquiries)
● Feedback, surveys, or applications (e.g. volunteering)
3.2 Sensitive Personal Data
In certain circumstances, we may collect sensitive information (e.g. health or personal experiences), particularly where relevant to our charitable work. This information is handled with additional care and confidentiality.
3.3 Information from Third Parties
We may receive your information from:
● Fundraising platforms (e.g. JustGiving)
● Event organisers
● Partners working on our behalf
3.4 Technical Information
● IP address
● Browser type and device information
● Website usage data (via cookies and similar technologies)
4. How We Use Your Information
We use your personal data to:
● Process donations and payments
● Provide services, support, or information you request
● Manage events, fundraising, and volunteering
● Communicate with you about your involvement
● Improve our services and understand our supporters
● Comply with legal and regulatory obligations
We may also contact you about our work and ways to support us, where permitted by law.
5. Legal Basis for Processing
Under UK data protection law, we rely on the following lawful bases:
● Consent – where you have given clear permission (e.g. marketing communications or sensitive data)
● Contract – where processing is necessary to fulfil an agreement (e.g. event registration)
● Legal obligation – to comply with legal requirements (e.g. Gift Aid)
● Legitimate interests – to operate and improve our charity, provided your rights are respected
Where we process sensitive personal data, we will only do so with your consent or where otherwise permitted by law.
6. Marketing Communications
We may contact you about our work, fundraising, and ways to get involved.
Where required, we will obtain your consent before sending marketing communications. You can opt out at any time by following unsubscribe instructions or contacting us directly.
7. Sharing Your Information
We may share your personal data with trusted third parties, including:
● Payment processors (e.g. Stripe, PayPal)
● Fundraising platforms
● IT and service providers
● Professional advisers or regulators where required
We ensure that any third parties handle your data securely and in accordance with data protection law.
8. International Transfers
Some of our service providers may process your data outside the UK. Where this happens, we ensure appropriate safeguards are in place to protect your information.
9. Data Security
We take appropriate technical and organisational measures to protect your personal data, including:
● Restricted access to authorised personnel
● Secure systems and procedures
● Processes for handling data breaches
10. Data Retention
We will only keep your personal data for as long as necessary for the purposes it was collected, including to meet legal, accounting, or reporting requirements.
11. Your Rights
Under UK data protection law, you have the right to:
● Access your personal data
● Correct inaccurate or incomplete data
● Request deletion of your data
● Restrict or object to processing
● Withdraw consent at any time
● Request transfer of your data
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
12. Cookies
Our website uses cookies and similar technologies to enhance your experience and analyse usage.
Where required, we will ask for your consent before placing non-essential cookies.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to read their policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on our website.
15. Contact Us
If you have any questions about this Privacy Policy or how we use your data, please contact:
Beyond Assumption
Thank you for trusting Beyond Assumption with your information.