Privacy Policy

Wellbeing Care Foundation · Registered charity no. 1172813 (England and Wales) Version 1.0 · Last updated: 9 November 2026

1. Who we are

Wellbeing Care Foundation (“WBF”, “we”, “us”) is a UK registered charity. We are the controller of the personal information described in this policy, which means we decide how it is used and are responsible for it.

• Address: Suite 3, 119 The Grove, London E15 1EN
• Email for privacy questions: info@wbf.org.uk
• Phone: 020 3327 6434

We have not appointed a Data Protection Officer because the law does not require one for a charity of our size. Our trustees are responsible for data protection at WBF.

2. What information we collect

When you donate online

• Your name, email address and any comment you add.
• If you choose Gift Aid: your home address, postcode and your Gift Aid declaration.
• The amount, date, appeal and fund type (Zakat, Sadaqah or Lillah).
• Payment details are entered directly into our payment providers, Stripe (including Google Pay) or PayPal. We never see or store your full card or bank details.

When you fill in our Gift Aid declaration form

• Your name, home address, postcode, email address, phone number if you give it, and the declaration you tick. The form is emailed to us and kept as our Gift Aid record.

When you donate by bank transfer or in person

• Your name, the amount and date, any reference you give, and your address if you make a Gift Aid declaration.

When you use our contact form or email us

• Your name, email address, the subject and your message.

If you set up a monthly donation

• The same details as a one-off donation, plus the date your monthly gift started and its status.
• Stripe or PayPal keeps your card or account details securely so it can take each monthly payment. We never see them.
• You can stop a monthly donation at any time by contacting us (section 1). We stop it within 5 working days.

When you visit our website

• Technical information such as your IP address, browser type and the pages you visit. Our web host and payment providers process this to keep the site working and secure.
• Visitor statistics. We use Burst Statistics, a tool that runs on our own website, to count visits and see which pages are used. It works without cookies, does not store your IP address, and cannot recognise you from one day to the next. The figures stay on our website and are not shared with anyone.
• We do not use advertising cookies, and we do not track you across other websites.

Children. We do not knowingly collect information from children under 13. If you are under 18, please ask a parent or guardian before donating.

3. Religious information

Choosing to pay Zakat, Sadaqah or Lillah, or giving to a Qurbani or Hifz appeal, may show your religious beliefs. The law treats this as “special category” information and protects it more strictly.

We use it only to make sure your gift goes where you asked and is spent in line with Islamic requirements. We rely on the legal condition that allows a not-for-profit body with a religious aim to process information about its supporters, as long as it is not shared outside WBF without your consent.

We never use your religious information for any other purpose, and we do not pass it to anyone except HMRC (which receives only what a Gift Aid claim needs) and our accountants and independent examiner, who are bound by confidentiality.

4. How we use your information and our legal reasons

Where we rely on legitimate interests, we have considered your rights and believe you would reasonably expect us to use your information this way. You can object at any time (section 11).

5. When we will contact you

Even if you have not signed up for news, we may contact you by email, phone or letter about:

• your donation receipt or a problem with a payment;
• your Gift Aid declaration, if details are missing or need checking;
• your monthly donation, for example if a payment fails or your card is about to expire;
• a refund or a question you have asked us.

These messages are not marketing, so they are sent even if you have not opted in to news.

6. Keeping in touch

We will only send you news and appeals by email or text if you have ticked a box to agree. You can unsubscribe at any time using the link in every email, by replying “STOP” to a text, or by contacting us. We will act on your request within 5 working days.

We do not phone people for fundraising.

7. Volunteers, trustees and the people we help

• Volunteers and trustees: we keep contact details and the records charity law requires, for as long as you volunteer or serve and for 6 years after.
• People who receive help: our overseas partners run the projects and hold any information about the people they help. We receive reports and, only with that person’s consent (or a parent’s or guardian’s consent for a child), photos and stories. We do not publish anyone’s full name, exact address or health details.

8. Who we share your information with

We do not sell, rent or swap your information. We share it only with:

• Stripe and PayPal: to process payments.
• Fasthosts: our website host.
• Elementor (Site Mailer): to send emails from our website, such as receipts and form messages.
• HMRC: to claim Gift Aid.
• Our accountants and independent examiner: to prepare and check our accounts.
• Regulators, police or courts: only if the law requires it.

We do not pass donors’ personal details to our overseas project partners.

9. International transfers

Stripe, PayPal, Elementor and Google (which supplies fonts used on our website) may process information outside the UK, including in the USA. Where they do, they rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the UK’s approved international data transfer contract clauses.

10. How long we keep your information

We then delete or anonymise it.

11. Your rights

You have the right to:

• ask for a copy of your information;
• ask us to correct it;
• ask us to delete it (unless the law requires us to keep it, for example Gift Aid records);
• ask us to restrict or stop using it, or object to our use based on legitimate interests;
• withdraw consent at any time;
• ask us to transfer information you gave us to another organisation.

We do not make decisions about you by automated means only, and we do not build profiles of donors for wealth screening or targeting.

Contact us using the details in section 1. We will reply within one month. There is normally no charge.

12. Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint · 0303 123 1113.

13. Security

• Our website uses encryption (HTTPS) for every page.
• Card payments are handled by Stripe and PayPal, which meet the payment card industry security standard (PCI DSS).
• Only trustees and authorised volunteers can see donor records, using individual logins.
• If a data breach happens, we will act to contain it. Where the law requires, we will report it to the ICO within 72 hours and tell anyone at high risk without delay.

14. Cookies

A cookie is a small text file a website stores on your device. Our website uses only cookies needed for it to work:

Because these are strictly necessary, the law does not require your consent for them. Our visitor statistics (Burst Statistics) work without cookies. If we ever add advertising cookies, we will ask for your consent first and update this policy.

15. Changes to this policy

We review this policy every year and when the way we use information changes. The version and date at the top show when it last changed.