Privacy Policy

Who we are

Charity Finder (charityfinder.co.uk) and Charity Finder Data are run by Rubiks Consulting Limited, trading as Two Forty One, a company registered in England and Wales (number 09283550), registered office 527 Mosley Road, Birmingham, B12 9BU. We are the data controller for the personal data described here. Contact: [email protected].

What we collect

No visitor accounts. You don't need to sign up or log in to browse this site, and we don't ask for your name, email, or any other personal information to do so.

Server logs. Like most web servers, ours record incoming requests. Each log entry includes the requesting IP address, the URL requested, the response code, the timestamp, and the user-agent string. These logs are retained for up to 30 days and are used for security monitoring and debugging.

Analytics. We use the following analytics tools to understand how the site is used:

• Rybbit — a privacy-focused, cookieless analytics service that records aggregate visit counts and page views. No personal identifiers, no cookies.
• Google Tag Manager / Google Analytics — loaded only after you opt in via the cookie banner. Records standard pageview and session data using cookies.
• Microsoft Clarity — loaded only after you opt in. Records anonymised session replays and heatmaps to help us identify usability problems.

You can change your analytics consent at any time using the cookie preferences link in the banner. The Cookie Policy lists every cookie set and by which provider.

Find a Charity answers. When you finish the Find a Charity questions, we record the answers you gave, the charities we suggested, and roughly where: the town or council area and county. We never keep your postcode, and the record holds nothing that identifies you: no name, email, IP address or cookie. The same answers go to Rybbit (above) as an event, without cookies. We use these records to see which causes people look for in each area and to improve the suggestions. Opening a shared shortlist link records nothing.

Subscriber accounts. If your organisation subscribes to Charity Finder Data, we hold each user's name, work email address and login details, a record of what they search for and download, and the organisation's billing details. Card payments are handled by Stripe; we never see or store card numbers. We keep account records while the subscription runs, and billing records for six years after it ends.

Email. If you email us, we keep the conversation until it's no longer needed (typically up to 24 months) so we can refer back to prior context.

What we don't do

• We don't sell or share information about visitors to this website.
• We don't run display advertising.
• We don't profile individual visitors or build behavioural profiles.
• We don't collect special-category data (health, religion, etc.), and we never supply the names of trustees to subscribers.

Charity data on this site

The charity records published on this site come from the Charity Commission's public register. The register includes the names of charity trustees, which are public information by statutory requirement.

If you are a trustee and believe a record about you on the public register is inaccurate, the appropriate route is via the Charity Commission, not us. We mirror the register faithfully and don't editorialise trustee information.

Charity information we supply to subscribers

Charity Finder Data is a subscription service that lets organisations which work with charities, such as banks, building societies, insurers, suppliers, funders, councils and researchers, search the register and download lists of charities. They use it to understand the sector, to find charities to fund or work with, and to contact charities about their products and services.

What we supply. Information about charities: name, registered number, legal form, status, address, areas of operation, causes, income and accounts, and the website, email address and telephone number each charity gives the Charity Commission. Some of those contact details identify a person, for example an email address in a staff member's name, or a telephone number or address that reaches one person. Those are the only personal data in the service. We never supply trustee names, or the details of anyone who contacts us about a charity profile.

Which email addresses. We supply an email address only if it is at the charity's own web domain (not a personal mailbox such as Gmail), and only for a charitable incorporated organisation or a charitable company, and a telephone number only for those too. Before we supply an address in a person's name, we write to that person to tell them, and they can object.

Where it comes from. The register of charities kept by the Charity Commission for England and Wales, which we copy each week under the Open Government Licence.

Why, and our lawful basis. Legitimate interests: ours in running the service, and our subscribers' in finding and contacting charities that may want their services. We have weighed these against the interests of the people concerned: the details are ones the charity has published as its contact point, we supply them only to subscribing organisations under a licence that forbids resale and requires them to follow data protection and electronic marketing law, and anyone can opt out at any time.

Who receives it. Subscribing organisations, under a licence. Each one is responsible, as a separate controller, for its own use of what it receives, and must tell you it got your details from Charity Finder when it first contacts you. We keep a record of what each subscriber downloads.

How long we keep it. For as long as it appears on the register. When a charity changes or removes a detail, our copy changes at the next weekly update.

Opting out. Use the link in the notice we sent you, or email [email protected] with the email address or charity number you want removed. An objection made through the link takes effect at once; one made by email, within five working days. From then on we don't supply it to anyone, and we tell any subscriber that already has it, which must delete it within 14 days and confirm to us that it has. If a charity opts out, we withhold all its contact details. This does not change the public register; to change what the register says, contact the Charity Commission.

Legal basis

• Server logs and necessary cookies: legitimate interest in operating a secure, functional website.
• Optional analytics: your consent, captured through the cookie banner.
• Find a Charity answers: legitimate interest in improving the tool; the records do not identify anyone.
• Subscriber accounts and billing: the contract with the subscribing organisation, and our legal duty to keep financial records.
• Charity information supplied to subscribers: legitimate interests, as described above.
• Email correspondence: legitimate interest in maintaining a record of correspondence.

Your rights

Under the UK GDPR you have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where we don't have an overriding legal basis to keep it)
• Withdraw analytics consent at any time
• Object to our supplying your contact details to subscribers, as described above
• Complain to the Information Commissioner's Office if you believe we've handled your data unlawfully

To exercise any of these rights, email [email protected]. We'll respond within one calendar month.

Service providers and international transfers

Our servers are hosted by Hetzner in Germany. We also use Cloudflare to deliver the site, Stripe for payments, Sentry to report errors, and an email service to send account and notice emails. Each processes data only on our instructions.

Some of these, and the analytics tools above (Google, Microsoft), may process data outside the UK. We rely on UK adequacy regulations, or the International Data Transfer Agreement or the UK Addendum to standard contractual clauses, where these apply.

Changes to this policy

If we change this policy materially, the "last updated" date at the top will change. For smaller changes (typos, clarifications) the date may not change.