PRIVACY POLICY

Last updated: 09/02/2026

Introduction

MM Educational Foundation is committed to protecting your personal data and respecting your privacy. We take great care with any personal information you provide to us, whether you are a donor, supporter, volunteer, or website visitor.

This Privacy Policy explains how and why we collect, use, store, and protect your personal data when you interact with us.

If you engage with us in a different way (for example, applying for a role, enrolling in a programme, or working with us as a contractor), a separate privacy notice may apply.

Who We Are

MM Educational Foundation is a registered charity in England and Wales.
Registered Address: 14 Lupin Grove, Birmingham, B9 5HN
Charity number: 1216056

For the purposes of UK data protection law, MM Educational Foundation is the Data Controller of the personal data described in this policy.

Our Purpose

MM Educational Foundation exists to advance education and learning, particularly for children and young people, through charitable programmes, resources, and initiatives.

Supporters help us achieve this by:

  • Making donations

  • Engaging with our educational work

  • Volunteering or supporting our activities

  • Signing up for updates or communications

Why We Hold and Process Personal Data

We process personal data for the following purposes:

  • To record and process donations

  • To communicate with supporters about our work

  • To administer Gift Aid claims

  • To manage our charity and comply with legal obligations

  • To improve our website and communications

  • To ensure we do not send unwanted communications

All processing is carried out in accordance with the UK General Data Protection Regulation (UK GDPR).

Legal Bases for Processing

We rely on the following legal bases when processing personal data:

Consent

Where appropriate, we ask for your explicit consent, for example when you opt in to receive email updates or newsletters. You can withdraw consent at any time.

Legitimate Interests

We may process data where it is reasonably necessary for our charitable purposes, provided this does not override your rights or freedoms. This may include:

  • Sending postal updates to supporters

  • Analysing engagement to improve our communications

  • Managing supporter relationships

You can object to this processing at any time.

Legal Obligation

We are required by law to retain and process certain information, for example for Gift Aid claims and financial record-keeping.

Contractual Necessity

Where you make a donation or sign up for an activity, we process your data to fulfil that request.

Marketing Communications

We will only send you marketing communications where:

  • You have given consent; or

  • We are permitted to do so under legitimate interest or “soft opt-in” rules

You can control how we contact you at any time by using unsubscribe links or contacting us directly.

Unless otherwise stated, marketing consent is treated as valid for 24 months, after which we may seek refreshed consent.

How We Collect Your Data

Information You Provide Directly

You may provide personal data when you:

  • Make a donation

  • Sign up to receive updates

  • Contact us by email or through our website

  • Complete a form or survey

Information Collected Indirectly

We may receive your data via third-party platforms acting on our behalf, including:

  • Donorbox (donation management)

  • Stripe (payment processing)

These providers act as data processors and only process data under our instructions.

Website Usage and Cookies

Our website is hosted by Squarespace, which may collect technical information such as IP address, browser type, and pages visited.

We use cookies to:

  • Ensure the website functions correctly

  • Understand how visitors use the site

  • Improve user experience

You can manage cookie preferences via your browser or our cookie banner. For more information, see our Cookie Policy.

What Information We Collect

Depending on your interaction with us, we may collect:

  • Name

  • Email address

  • Postal address

  • Telephone number

  • Donation amounts and dates

  • Gift Aid status

  • Technical data (IP address, browser type)

Payment details are never stored by MM Educational Foundation.
All card payments are processed securely by Stripe via Donorbox.

Sensitive Personal Data

We do not routinely collect sensitive personal data. Where it is required (for example, accessibility or safeguarding reasons), it will only be collected with clear explanation and appropriate safeguards.

How We Use Your Data

We use your personal data for:

Administration

  • Processing donations and Gift Aid

  • Confirming donations and providing receipts

  • Responding to enquiries

  • Maintaining accurate records

Fundraising and Communications

  • Sending updates about our work (where permitted)

  • Inviting feedback or participation in surveys

Website Improvement

  • Analysing website usage

  • Improving content and accessibility

Sharing Your Information

We do not sell or share your personal data with third parties for their own marketing purposes.

We may share your data with trusted service providers who support our operations, including:

  • Squarespace (website hosting)

  • Donorbox (donation platform)

  • Stripe (payment processing)

  • Email service providers

All such providers are contractually required to protect your data and use it only for specified purposes.

International Transfers

Some of our service providers may process data outside the UK or EEA. Where this occurs, appropriate safeguards (such as standard contractual clauses) are in place.

Data Retention

We keep personal data only for as long as necessary:

  • Donation and Gift Aid records: minimum 7 years (HMRC requirement)

  • Marketing preferences: retained to respect opt-out requests

  • Other data: retained only as long as required for its purpose

Your Rights

You have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Withdraw consent

  • Object to processing

  • Request deletion (where legally permitted)

  • Restrict processing

  • Request data portability

Requests can be made using the contact details below. We may ask you to verify your identity.

How to Update Your Preferences or Data

To update your details or communication preferences, please contact us:

Email: info@mmeducationalfoundation.org

We aim to action requests promptly:

  • Email: within 24 hours

  • Phone: within 24 hours

  • Post: within 28 days

Data Security

We use appropriate technical and organisational measures to protect your data, including:

  • Encrypted online forms

  • Secure third-party platforms

  • Access controls for authorised personnel only

Complaints

If you have concerns about how we handle your data, please contact us first.

If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO):

📞 0303 123 1113
🌐 https://www.ico.org.uk/concerns

Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be clearly communicated on our website. Continued use of our website indicates acceptance of the updated policy.