THE FAIR AND CORRECT FOUNDATION LIMITED
TFACF.CO.UK: PRIVACY POLICY
Registered name: 14023381
This privacy notice tells you what to expect us to do with your personal information.
- Contact details
- What information we collect, use, and why
- Lawful bases and data protection rights
- Where do we get personal information from
- How long do we keep information
- Who do we share information with
- How to complain
Contact details
- Post
- The Fair And Correct Foundation Limited, 71-75 Shelton Street, LONDON, WC2H 9JQ, GB
What information we collect, use, and why
We collect or use the following personal information for research or archiving purposes:
- Names and contact details
- IP addresses
- Records of consent, where appropriate
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights, which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access
- You have the right to ask us for copies of your personal information. You can request other information, such as details about where we get personal information from and who we share personal information with. There are some exemptions, which means you may not receive all the information you ask for. You can read more about this right here.
- Your right to rectification
- Your right to restriction of processing
- Your right to object to processing
- Your right to data portability
- Your right to withdraw consent
If you make a request, we must respond to you without undue delay and, in any event, within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information for research or archiving purposes are:
- Legitimate interests:
- we’re collecting or using your information because it benefits you, our organisation or someone else without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
Where do we get personal information from
- Directly from you
- Regulatory authorities
- Charities or voluntary sector organisations
- Publicly available sources
- Market research organisations
- Credit reference agencies
- Third parties:
- Occasionally, we receive information from third parties, including other organisations or individuals, pertinent to our mission.
How long do we keep information?
Data Category Retention Period Disposal Action. Notes
- Research Data
- 5 years, Secure deletion, Retain for analysis and reporting; anonymise where possible.
- Correspondence
- 2 years, Secure deletion, Includes emails and letters; retain if relevant to ongoing projects or legal matters.
- Financial Records
- 7 years, Secure deletion Required for tax and audit purposes.
- Legal Documents
- Permanent Archive, Includes foundational documents and significant legal agreements.
- Personnel Records
- 7 years post-employment, Secure deletion, Retain for reference and legal compliance.
- Donor Information
- 7 years, Secure deletion, Retain for financial records and donor relations.
Who do we share information with
1. Information Technology (IT)
- Industry: Technology
- Sector/Sub-sector: IT Services
- Location: United Kingdom
- Description: These providers offer services including data storage, cloud computing, and software solutions to manage and protect our data.
2. Data Protection Consultants:
- Industry: Professional Services
- Sector/Sub-sector: Data Protection and Compliance
- Location: United Kingdom
- Description: Consultants who assist us in ensuring compliance with data protection regulations, such as the UK GDPR, and provide guidance on best practices for data handling.
3. External Auditors:
- Industry: Professional Services
- Sector/Sub-sector: Audit and Assurance
- Location: United Kingdom
- Description: Independent auditors who evaluate our data processing activities to ensure compliance with legal and regulatory standards. We ensure that all data processors we engage with adhere to strict data protection standards and operate in compliance with applicable laws to safeguard the personal information entrusted to us.
Others we share personal information with
- Professional advisors
- Legal bodies or authorities
- Local authorities or councils
- Relevant regulatory authorities
- External auditors or inspectors
- Organisations we’re legally obliged to share personal information with
- Professional consultants
- Third parties: At The Fair and Correct Foundation (TFACF), we are committed to transparency regarding the third parties with whom we share personal information. Below is a detailed overview of these parties, including their industry, sector/sub-sector, and location:
- 1. Data Processors:
- Industry: Information Technology
- Sector/Sub-sector: Data Storage and Management
- Location: United Kingdom
- Description: We engage IT service providers to securely store and manage our data, ensuring compliance with data protection regulations.
- 2. Professional Advisors:
- Industry: Legal Services
- Sector/Sub-sector: Data Protection and Compliance
- Location: United Kingdom
- Description: We consult with legal experts specialising in data protection to ensure our practices align with current laws and regulations.
- 3. External Auditors:
- Industry: Professional Services
- Sector/Sub-sector: Audit and Assurance
- Location: United Kingdom
- Description: Independent auditors assess our data processing activities to verify compliance with legal and regulatory standards.
- 4. Regulatory Authorities:
- Industry: Government
- Sector/Sub-sector: Data Protection Oversight
- Location: United Kingdom
- Description: We may share information with regulatory bodies, such as the Information Commissioner’s Office (ICO), when required to comply with legal obligations.
- 5. Public Platforms:
- Industry: Media and Communications
- Sector/Sub-sector: Digital Publishing
- Location: Global
- Description: To promote transparency and public awareness, we may publish certain information on our website and social media channels, ensuring that any personal data shared complies with data protection laws. We ensure that all third parties with whom we share personal information adhere to strict data protection standards and operate in compliance with applicable laws to safeguard the personal information entrusted to us.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
- The ICO’s address:
- Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
TFACF.CO.UK: PRIVACY POLICY
Last updated
2 February 2025