Privacy Policy


This document explains how we, the Community Foundations serving Lancashire and Merseyside (Community Foundations), use data about individuals.

Why do we need your information?

We believe that thriving communities with caring people and strong voluntary groups give everyone the chance to achieve their best. Thriving communities are built on time, money and effort that enable ambition to be achieved, potential fulfilled and ends to be met. We use personal data to help organise the giving of that time, money and effort in Lancashire and Merseyside and the wider North West of England in support of those aims.

Whose data do we collect?

We hold data on those who have given financial or other support to the Community Foundations, those who might do, and those who apply to the Community Foundations for grants, whether personally or on behalf of an organisation.

How do we obtain your data?

The majority of the information we hold about you has been provided directly to us by you. In some cases, we may collect data from other sources. Examples include where existing supporters feel you may be interested in supporting our work and suggest your name to us, or data collected via a service provider like Virgin Money Giving or My BT Donate.

We also collect data from publicly available sources. Examples include information gathered from a news article or online media, including social media like LinkedIn or Twitter. We may also use publicly available directories such as Companies’ House.

What are the legal grounds for our processing of your personal information?

Where it is needed to administer donations and grant applications in line with legislative and regulatory requirements, such as:

Where it is in our legitimate interests to do so, such as:

We may use data obtained from external sources to ensure that your contact details are up to date, to support the planning of our fundraising (including using indicators of affluence to reflect the possible level of donation someone is able to make) and to ensure that appropriate due diligence is carried out to safeguard the assets and reputation of the Community Foundations.

What we do with your data and why?

Information on Supporters and Volunteers

We collect the information described below in order to promote the work of CFLM and build and manage financial and volunteer support.

We collect the following classes of information:

Information on Grant Applicants  

We collect the information described below in order to solicit and process applications for grants from the Community Foundations.

We collect the following classes of information:

Protecting your data

We keep your data secure in our database with appropriate security mechanisms in place.

In principle we do not share your data with anyone else or any other organisation unless it is necessary for the purpose for which you have given us the data. Examples are given below:

Our responsibilities

The law requires us to tell you the basis on which we process your data.

We will keep data for as long as is needed to complete the task for which it was collected. Relationships between donors, grantees and the Community Foundations are often long term and so we expect to keep your data for as long as that relationship exists and in line with legal and regulatory requirements or guidance.

Your rights

The law requires us to tell you that you have a variety of rights about the way we process your data. These are as follows:

Contacting us

If you have any questions about this privacy notice and about the way in which we process your data including how we communicate with you, please contact us:


Sarah Mitchell, Finance Director and Data Manager, or Rae Brooke, Chief Exec and Data Controller

3rd Floor Stanley Buildings, 43 Hanover Street, Liverpool, L1 3DN

T: 0330 440 4900 E:

If you wish us to remove the personal data we hold, please email:  

Facebok Twitter LinkedIn