Privacy Notice

Owner and Data Controller

We are the Enjoolata Foundation, a registered grant-making trust in East Sussex. Our purpose is to provide funding to support to grassroots charitable projects in the BN postcode area.  We take your privacy seriously and are committed to protecting your personal data in line with the UK GDPR.

1. What Personal Data We Collect

We may collect:

  • Name, address, phone number, email

  • Application details (project description, budget)

  • Bank details (for grant payments)

  • Trustee and staff contact details

  • Communication preferences

2. Why We Collect Your Data

We use your data to:

  • Process and review grant applications

  • Contact you about your application or funding

  • Meet our legal obligations as a charity

  • Keep records for auditing and transparency

  • Send updates and promotional materials (only with your consent)

3. Our Legal Bases for Using Your Data

We rely on:

  • Legitimate interests e.g. to assess applications or keep records

  • Consent e.g. for email newsletters or marketing communications

  • Legal obligation for records required by law (e.g. financial reporting)

  • Contract e.g. recruitment

4. How We Store and Share Your Data

  • Your data is stored securely on password-protected systems or in locked files.

  • We only share your data where necessary e.g. with our accountants, under proper agreements.

  • We never sell your data or share it for marketing.

5. How Long We Keep Your Data

  • Unsuccessful applications: kept for 3 years

  • Successful applications: kept for 6 years in line with charity regulations

  • Trustee and governance records: kept as long as needed for legal and historical purposes

6. Cookies and Website Use

We may use cookies to help us understand how visitors use our website. You can set your browser to refuse cookies or alert you when cookies are being sent.  There is also an opt-out pop up when loading our website.

7.  Data Breaches

We take data breaches seriously. If your data is ever lost, stolen, or shared by mistake and it poses a risk to your rights or freedoms, we will inform you and report the breach to the ICO within 72 hours if required. 

8. Your Rights

You have the right to:

  • Ask for a copy of your data

  • Ask us to correct, delete, or restrict how we use it

  • Withdraw consent (where we rely on it)

  • Complain to the Information Commissioner’s Office (ICO) if you're unhappy

9. Contact Details

Contact us at hello@enjoolata.org for any data questions.  

Our ICO Registration Number is ZB902640.

Latest update: 21 May 2025