Privacy Policy

Who we are

FreelyGive Limited ("FreelyGive", "we", "us") is the data controller for the personal data described in this policy. We are a company registered in England and Wales with company number 09130615.

  • Address: 157 Athelstan Road, Hastings, East Sussex, TN35 5JF, United Kingdom

  • Email: support@freelygive.org.uk

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What this policy covers

This policy applies to:

  • visitors to our websites, freelygive.io and freelygive.ai

  • people who sign in to our applications, including Site Shields, using their Google account

  • people who contact us by email or through our website

Where we process personal data on behalf of a client under contract, the client is the data controller and their own privacy notice applies.

Information we collect

Website analytics (only with your consent). Usage data collected by Squarespace, our website platform: pages viewed, referring site, browser and device type, and approximate location at country level. We use this to understand how the site is used and improve it.

Google sign-in. Your name, email address, profile picture and Google account ID, held only for your signed-in session and not stored. We use this to confirm who you are and give you access to the application.

Contacting us. Your name, email address, organisation and the content of your message. We use this to respond to you.

We do not collect special category data through our website or applications, and we do not sell personal data.

Google sign-in and Google user data

When you sign in with Google, you are asked to let us access basic profile information from your Google account: your name, email address, profile picture and Google account ID. We hold this information only for the length of your signed-in session and do not store it afterwards. We do not request access to your Gmail, Google Drive, calendar, contacts or any other Google data.

We use this information only to:

  • confirm who you are when you sign in

  • show your name and picture within the application

  • control which sites and features you can access

We do not use Google user data for advertising, sell it, or transfer it to third parties except where needed to provide the service (for example our hosting provider), to comply with the law, or as part of a merger or acquisition with notice to you. We do not use it to train artificial intelligence or machine learning models.

FreelyGive's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove our access at any time from your Google account permissions page. Because we do not keep your Google data, there is nothing held by us to delete.

Cookies

We use two kinds of cookie:

  • Strictly necessary cookies keep you signed in to our applications and remember your cookie choices. They do not need consent and cannot be switched off.

  • Analytics cookies are set by Squarespace, which hosts our websites. They record how visitors use the sites, such as pages viewed and how you arrived, and use a random identifier to recognise returning visitors. They last up to two years. We only set these if you accept them in our cookie banner.

You can change your choice at any time using the cookie settings link at the foot of each page, or by clearing cookies in your browser. We do not use advertising or cross-site tracking cookies.

Lawful bases and sharing

We rely on the following lawful bases:

  • Analytics cookies: consent

  • Google sign-in and running our applications: performance of a contract, or our legitimate interest in providing the service to you and your organisation

  • Responding to enquiries: legitimate interests

  • Meeting legal obligations: legal obligation

We share personal data only with service providers who help us run our website and applications, such as hosting, cloud infrastructure and email providers. They act on our instructions under contracts that require them to protect your data. We may also disclose data where the law requires it.

We mainly process personal data in the United Kingdom and the European Economic Area. Some of our authorised suppliers and contractors work from India. Where data is transferred outside the UK to a country without UK adequacy regulations, we use the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Squarespace, which hosts our websites and analytics, is based in the United States and participates in the EU-US Data Privacy Framework.

Retention and security

We keep personal data only as long as we need it:

  • Google sign-in data: not stored; held only for your signed-in session

  • enquiry emails: as long as needed to deal with your enquiry and any follow-up relationship

  • analytics data: held by Squarespace and not used by us to identify you; analytics cookies expire after up to two years

We protect personal data with encryption in transit, access controls limited to authorised staff, and the security measures of our hosting providers.

Your rights

You have the right to:

  • access the personal data we hold about you

  • have inaccurate data corrected

  • have your data deleted

  • restrict or object to our processing

  • receive your data in a portable format

  • withdraw consent at any time, where we rely on consent

To exercise any of these rights, email support@freelygive.org.uk. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. We will tell signed-in users of our applications about significant changes.