Privacy Notice
This notice explains how Edutee Global may collect, use, store and share personal information when you visit our website, contact us, use our forms or make a donation.
1. Who is responsible for your information?
Edutee Global is responsible for handling personal information described in this notice. For privacy questions or requests, contact us using the contact page and clearly mark your message “Privacy request”.
2. Information we may collect
- Contact details: such as your name, email address, telephone number and the contents of messages you send us.
- Donation details: donor name, email, donation amount, payment method, transaction reference and status. We do not intend to collect full card numbers or card security codes through our own forms.
- Enquiry and participation information: details you choose to provide when asking about our programmes, events, volunteering or services.
- Technical information: limited information such as IP address, browser/device information, timestamps and security logs used to operate and protect the website.
- Cookie and anti-abuse data: information used by essential session technologies and security services, including Google reCAPTCHA where enabled.
3. How we use information
We may use information to respond to enquiries; administer donations and payment records; deliver requested services; send relevant communications where permitted; maintain website security; prevent spam, fraud and abuse; keep accounting and operational records; and comply with legal obligations.
4. Lawful bases
Where UK data-protection law applies, we rely on an appropriate lawful basis for each use, which may include taking steps at your request, performing a contract, complying with a legal obligation, pursuing legitimate interests such as protecting the website and administering our work, or consent where required. Where we rely on consent, you can withdraw it at any time; this does not affect processing already carried out lawfully.
5. Payments and third-party services
When you choose a card payment, the transaction may be handled by Stripe or another payment provider configured on the site. That provider processes payment information under its own privacy notice and security controls. We may receive transaction status and reference information so that we can reconcile donations.
Google reCAPTCHA may process technical and interaction information to assess whether a form submission is automated. Google’s own terms and privacy notice apply to its service. Our website may also load hosting, email delivery, analytics or embedded third-party services where configured.
6. Who we share information with
We may share the minimum information necessary with website hosting and IT providers, payment processors, email delivery providers, professional advisers, regulators or public authorities where legally required, and other service providers acting on our instructions. We do not sell personal information. We require service providers to protect information appropriately, subject to their applicable terms and legal obligations.
7. International transfers
Some service providers may process information outside the United Kingdom. Where data-protection law requires safeguards for an international transfer, we will take steps appropriate to the circumstances, such as relying on an adequacy regulation or suitable contractual safeguards. The actual providers and transfer arrangements should be confirmed for the live deployment.
8. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described above, including service delivery, security, dispute resolution and legal or accounting obligations. Retention periods depend on the record type. We should maintain a documented schedule for enquiries, donation records, admin audit logs, and security logs, then securely delete or anonymise information when it is no longer required.
9. Security
We use reasonable technical and organisational measures intended to protect information. No website or transmission method can be guaranteed completely secure. Please do not send passwords, payment-card security codes or other highly sensitive information through general contact forms.
10. Your rights
Depending on the law that applies, you may have rights to request access, correction, deletion, restriction, objection, portability, or to withdraw consent. These rights are not absolute and may be subject to legal exceptions. To make a request, use our contact page. You may also have the right to complain to the relevant data-protection regulator; in the UK, this is the Information Commissioner’s Office (ICO).
11. Children
Our website is not intended to invite children to submit unnecessary personal information. If you believe a child has provided personal information inappropriately, contact us so we can assess and address the request.
12. Changes and contact
We may update this notice when our practices or legal requirements change. The latest review date appears above. For privacy questions or requests, please use our contact page.