Skip to content

UK non-profit · Established to relieve hardship

Unity ReliefUK

Privacy notice

Last reviewed · 2026-05-01

How we handle your
information.

In plain English. Drafted by humans, reviewed by our trustees and a UK data-protection solicitor — not lifted from a template.

§ I

Who we are

Unity Relief UK is a registered charity in England and Wales (reg. 1199482) and Scotland (SC051427). We are the controller for the personal information described in this notice. Our company number is 14589321 and our registered office is 4th Floor, 25 Greville Street, Holborn, London EC1N 8SQ.

We are registered with the Information Commissioner's Office under the Data Protection Act 2018. Our ICO registration number is ZA876543 and is publicly searchable on the ICO register.

§ II

What we collect

When you apply for support, we collect: your name, date of birth, address, contact details, immigration or residency status, household composition, income and expenditure, the reason for your application, and supporting documents you choose to share.

When you donate, we collect: your name, contact details, donation amount and frequency, and Gift Aid declaration if applicable. Donations are taken by bank transfer, standing order, payroll giving or cheque — we do not process card payments and we do not hold any card-payment information.

When you browse this website, we collect: the minimum analytics required to understand which pages help applicants and donors. We use a privacy-respecting analytics provider (Plausible) which does not set cookies, does not track you across sites, and does not store your IP address.

§ III

Why we collect it

For applications: to assess your eligibility, make a fair decision, prevent fraud, and meet our legal duties around safeguarding and anti-money-laundering. The legal basis is contract (your loan or grant agreement) and legitimate interests (operating a regulated charity).

For donations: to process your gift, claim Gift Aid where appropriate, acknowledge your contribution, and meet our reporting duties to HMRC and the Fundraising Regulator. The legal basis is contract and legal obligation.

For marketing: only if you have opted in. You can opt out at any time using the link in any email we send, or by contacting us directly.

§ IV

Who we share it with

We share the minimum necessary, only with:

· Our trustees and staff, who are bound by confidentiality · Our regulated banking partners (for payments and transfers) · HMRC (for Gift Aid) · Our auditors (for the annual audit, under confidentiality) · Statutory authorities where we are legally required to (e.g. safeguarding referrals, court orders)

We do NOT share your information with: credit reference agencies, debt collectors, marketing companies, family members, employers, landlords, or any partner organisation without your explicit consent.

We do not transfer your data outside the United Kingdom or European Economic Area.

§ V

How long we keep it

Applications (whether approved or declined): seven years after the last interaction, in line with regulatory guidance for charities and lenders.

Donation records: seven years (HMRC Gift Aid requirements).

Website analytics: 12 months, aggregated and not linked to individuals.

After the retention period, we permanently delete or fully anonymise the records. Routine deletion happens twice a year, in January and July.

§ VI

Your rights

Under the UK GDPR you have the right to: access your data, correct it if it is wrong, ask us to delete it, restrict how we use it, object to certain uses, and receive it in a portable format. To exercise any of these rights, email privacy@unityrelief.org.uk — we will respond within one calendar month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. We would always rather you spoke to us first — but we will never penalise you for going directly to the ICO.

§ VII

Security

We store personal information in encrypted databases hosted in the United Kingdom. Access is restricted to named staff, logged, and reviewed quarterly. Backups are encrypted and held in two geographically separate UK locations.

If we ever experience a personal-data breach that is likely to result in risk to your rights and freedoms, we will notify the ICO within 72 hours and contact you directly without undue delay.

Questions or concerns

If anything on this page is unclear, or you would like us to act on it, please get in touch.