Humanity First UK ("Humanity First", "we", "us", "our") is committed to protecting the privacy of everyone who supports our work, whether you are a donor, a subscriber, a volunteer, a partner, or simply visiting our website. This notice explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have over it.
Humanity First UK is a charity registered in England and Wales (No. 1188494) and a company limited by guarantee registered in England and Wales (company No. 11512888). Our registered office is 104A Roebuck Road, Chessington, KT9 1EU. For the purposes of UK data protection law, Humanity First UK is the data controller for the personal information described in this notice.
This notice covers the personal information we hold about our supporters, donors, volunteers, partners, and website visitors. It does not cover information we process about our employees or job applicants, which we handle separately.
If you have any questions about this notice, or you want to exercise any of your rights, you can contact our Data Protection Officer:
The Data Protection Officer
Humanity First UK
104A Roebuck Road
Chessington
KT9 1EU
Email: [email protected]
We only collect the personal information we need in order to do our work and to keep in touch with the people who support it. Depending on how you interact with us, this may include:
When you make a donation
When you donate through our website (a one-off or a monthly donation, by card or by Direct Debit), we collect your name, billing or home address, email address, the amount and frequency of your donation, and the appeal or fund you are giving to. If you choose to add Gift Aid, we also collect the confirmation of your declaration together with the name, home address, and postcode required to make the claim. If you are donating on behalf of someone else, we collect the name you provide for that purpose. Your card details (for one-off donations) and bank details (for monthly Direct Debits) are entered directly into secure fields hosted by our payment providers, Stripe and GoCardless, and are never seen by, transmitted through, or stored on Humanity First systems, as explained under "Payments and Security" below.
When you contact us
If you use the contact form on our website, or write to us by email or phone, we collect the information you give us, such as your name, email address, the subject of your enquiry, and the contents of your message, so that we can respond.
When you subscribe to our updates
If you sign up to our newsletter, we collect your email address. To confirm that the sign-up is genuine and that the address belongs to you, we use a double opt-in process: we send a confirmation email and only add you to our mailing list once you click the link inside it. You can unsubscribe at any time using the link in every email we send.
Information from third parties
Where you choose to support us through a third-party fundraising platform, such as JustGiving, we may receive personal information from that platform, such as your name, the amount you gave, and any Gift Aid declaration, where you have chosen to share it and in line with that provider's own privacy notice.
Information we collect automatically
When you visit our website we collect a limited amount of technical information to keep the site secure and to understand how it is used. Some of this understanding comes from Cloudflare's privacy-preserving analytics, which set no cookies. We also use Google Analytics, which sets cookies and only runs if you agree through our cookie banner. You can change or withdraw that choice at any time, as explained under "Cookies" below.
We do not routinely collect special category personal data (such as information about your health, racial or ethnic origin, religious beliefs, sexual orientation, political opinions, or trade union membership). We only collect it where it is necessary for a specific purpose, for example for safeguarding, volunteering, health and safety, an accessibility requirement, or to comply with a legal obligation, which may include carrying out a Disclosure and Barring Service (DBS) check for certain volunteer roles.
Card payments on our website are processed by Stripe, a global payment provider certified to the highest level of the Payment Card Industry Data Security Standard (PCI DSS). When you pay by card you are typing your details directly into secure input fields served and controlled by Stripe, embedded within our donation pages.
Monthly Direct Debits are handled by GoCardless, an FCA-authorised Direct Debit provider, and set up through Donorfy, our supporter-database provider. When you set up a Direct Debit you enter your bank details on GoCardless's own secure page, not on ours. In every case your full card number, security details, and bank account details never enter Humanity First's website, servers, or systems, and we never store them.
To make entering a billing or home address easier, Stripe's address field may offer address suggestions powered by Google Maps as you type. We share the information you give us with these providers only as far as they need it to take your payment or set up your Direct Debit.
We use your personal information to:
Under UK data protection law we must have a lawful basis for processing your personal information. Depending on the activity, the bases we rely on are:
We will only send you marketing communications where you have actively opted in, for example by ticking the relevant box when you donate (these boxes are never pre-ticked) or by subscribing to our newsletter. We do not sell or rent your information to anyone for their own marketing.
Every marketing email we send includes a one-click unsubscribe link, and you can opt out at any time by emailing [email protected]. Our email provider records whether our emails are opened and whether links are clicked, so that we can understand engagement and improve what we send. This information is linked to your subscription and is never used to build a profile of you for any other purpose.
We do not sell your personal information. We share it only with the trusted service providers who help us run our charity, and with professional advisers, auditors, regulators, funding bodies, and partner organisations, in each case only as far as they need it. Each is bound by a written agreement to protect your information and to use it only on our instructions. These include:
Some of our appeals, and fundraising pages set up by our supporters, are hosted on JustGiving. If you donate or fundraise through JustGiving, JustGiving acts as a separate data controller under its own privacy policy and passes us the information we need, such as your name, the amount, and any Gift Aid declaration, to acknowledge and administer your donation.
We also share information where we are required or permitted to by law: with HMRC, to claim Gift Aid; with our professional advisers, to obtain advice or protect our legal rights; with law enforcement or other authorities, where there is a legitimate need, for example to prevent fraud or to protect someone from serious harm; and with regulators such as the Charity Commission or the Information Commissioner's Office where required.
Some of our service providers, including Stripe, Brevo, Cloudflare, and Google, are based in or operate from outside the UK, including the United States. Where your information is transferred outside the UK, we make sure it is protected by appropriate safeguards recognised under UK data protection law, such as the UK's adequacy regulations, the International Data Transfer Agreement, or Standard Contractual Clauses, together with the data-residency options these providers offer.
The only cookies we set without asking are strictly necessary ones: those our payment provider Stripe uses inside its secure payment fields, and a small first-party cookie that remembers your cookie choice.
We also use Google Analytics to understand how the site is used. It sets cookies and only runs if you agree through the banner shown on your first visit. You can accept, decline, or change your choice at any time using the "Cookie settings" link in our footer. Google Analytics never loads on our donation or payment pages.
We keep your personal information only for as long as we need it for the purposes set out in this notice, or for as long as the law requires. For example, Gift Aid and financial records are kept for the periods required by HMRC and company law, and marketing preferences are kept until you ask us to change or remove them. When we no longer need your information, we securely delete or anonymise it.
We store personal information on secure, access-controlled systems, and we restrict access to authorised individuals who need it for their work and who are subject to appropriate confidentiality obligations. We take appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, alteration, or disclosure.
No transmission of information over the internet can be guaranteed to be completely secure, but we work hard to protect your information. If a personal data breach is likely to put your rights at risk, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of the breach where feasible. Where a breach is likely to result in a high risk to you, we will also let you know as soon as we reasonably can.
Under UK data protection law you have the right to:
To exercise any of these rights, please contact our Data Protection Officer using the details above. We may need to confirm your identity before we act on a request, to make sure your information is not disclosed to anyone else. We will respond within the timeframes the law allows.
Our website and donation services are intended for adults and are not directed at children. We do not knowingly collect personal information from children.
If you have any concerns about how Humanity First UK collects, uses, stores, or shares your personal information, please contact our Data Protection Officer using the contact details provided in this Privacy Notice. We will investigate your concerns and seek to resolve them as quickly as possible.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your personal information has been processed unlawfully or your data protection rights have been infringed. We would, however, appreciate the opportunity to address your concerns before you contact the ICO.
For complaints relating to Humanity First UK's services, activities, staff, volunteers, fundraising, or other matters not related to data protection, please see the complaints section of our Terms and Conditions or contact [email protected].
We may update this Privacy Notice from time to time to reflect changes in our activities, legal requirements, or data protection practices.
Any updates will be published on our website, and the date of the latest revision will be shown at the bottom of this Privacy Notice. We encourage you to review this Privacy Notice periodically to stay informed about how we collect, use, and protect your personal information.
Last Updated: September 2026
Contact our Data Protection Officer at [email protected] or write to 104A Roebuck Road, Chessington, KT9 1EU.
Get in touch