Privacy Policy for Megs Arm of Love

Last updated: 23rd December, 2025

Megs Arm of Love (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

• Megs Arm of Love is a charitable organisation established to prevent and relieve poverty through training, advice, donations, and physical and emotional support, particularly for women and their children.

• For the purposes of data protection law, Megs Arm of Love is the Data Controller.
  
  

2. Personal Data We Collect

We may collect and process the following types of personal data:

• Personal identification information (name, date of birth)
  
  

• Contact details (address, email address, telephone number)
  
  

• Demographic information (gender, household details, where relevant to our services)
  
  

• Financial information (donation records, Gift Aid declarations)
  
  

• Support-related information (information shared when accessing our services)
  
  

• Volunteer and staff information (applications, references, training records)
  
  

• Website usage data (IP address, cookies, and analytics data)
  
  

We only collect personal data that is necessary and relevant to our charitable purposes.

3. Special Category Data

In some cases, we may collect special category data, such as information relating to health, wellbeing, or personal circumstances. This data is treated with the highest level of confidentiality and only collected where necessary to provide appropriate support, with consent or another lawful basis.

4. How We Use Personal Data

We use personal data to:

• Deliver charitable services and support
  
  

• Communicate with beneficiaries, donors, volunteers, and partners
  
  

• Process donations and Gift Aid claims
  
  

• Manage volunteering and employment relationships
  
  

• Comply with legal and regulatory obligations
  
  

• Improve our services and organisational effectiveness
  
  

• Safeguard individuals and promote wellbeing

5. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

• Consent – where you have given clear permission
  
  

• Contract – where processing is required to fulfil an agreement
  
  

• Legal obligation – where required by law
  
  

• Legitimate interests – where necessary for our charitable activities and not overridden by your rights
  
  

• Vital interests – to protect life or prevent serious harm

6. Data Sharing

We do not sell or rent personal data.

We may share personal data only where necessary with:

• Service providers (e.g. IT systems, payment processors)
  
  

• Regulatory bodies (e.g. HMRC for Gift Aid, Charity Commission where required)
  
  

• Safeguarding authorities, where legally required or to protect individuals
  
  

All third parties are required to respect confidentiality and comply with data protection law.

7. Data Storage and Security

We take appropriate technical and organisational measures to protect personal data, including:

• Secure digital systems and password protection
  
  

• Restricted access to authorised personnel only
  
  

• Secure storage of paper records
  
  

• Regular review of data handling practices
  
  

We retain personal data only for as long as necessary for the purposes for which it was collected or to meet legal requirements.

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
  
  

• Request correction of inaccurate data
  
  

• Request erasure of your data (“right to be forgotten”)
  
  

• Restrict or object to processing
  
  

• Request data portability
  
  

• Withdraw consent at any time (where consent applies)
  
  

• Lodge a complaint with the Information Commissioner’s Office (ICO)

9. Cookies and Website Data

Our website may use cookies to improve user experience and analyse website traffic. You can control cookie settings through your browser preferences.

10. Children’s Data

We take special care when handling data relating to children. Personal data relating to children is processed only where necessary for safeguarding or support purposes and handled in accordance with safeguarding legislation and best practice.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on our website and made available upon request.

12. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Megs Arm of Love
Email: admin@megsarmoflove.org
Address:45 Walker Avenue, Fyfield, Ongar, CM5 ORG

You also have the right to contact the Information Commissioner’s Office (ICO) for further guidance or to make a complaint.