©The Brits Association for Africa (BAFA) respects your privacy and protects your personal data in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
This notice explains who we are, what data we collect, how we use and retain it, and how you can exercise your rights at any time.
Data controller detailsWho is responsible for your data
The data controller is The Brits Association for Africa (BAFA), Registered Charity in England & Wales no. 1209161 (Charity Commission org ref: 5241960), Companies House no. 14620395, ICO registration no. C2068561. Registered office: 128 City Road, London, EC1V 2NX. Email: info@thebafa.org.
What data we collectEnquiries, giving & cookies
We collect only the information needed to serve our community and supporters: (1) contact enquiries and submissions (your name, email address, telephone number, and message); (2) donation and Gift Aid records (donor name, address, contribution record, and HMRC Gift Aid declarations); and (3) essential preference cookies plus optional analytics cookies only when you explicitly accept them.
How we use your dataLawful basis & zero data selling
We process personal data under lawful bases of consent, legitimate charitable interest, and legal obligation (HMRC Gift Aid and Charity Commission compliance). We use your data solely to respond to your enquiries, administer charitable donations and Gift Aid claims, deliver community programmes, and improve our website where consent is given. We never sell, rent, or trade your personal data to third parties.
Data retentionHow long we keep records
Statutory charity accounting and HMRC Gift Aid records are retained for 6 years after the end of the relevant accounting period as required by UK law. General contact enquiries are retained for up to 24 months unless ongoing correspondence continues. Cookie consent preferences are stored in your browser for 12 months or until you clear or update them.
Your UK GDPR rightsAccess, correction, erasure & objection
Under UK GDPR you have the right to request access to your personal data, request correction of inaccurate data, request erasure, restrict or object to processing, and withdraw consent at any time by emailing info@thebafa.org or projectteam@thebafa.org. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk ↗).
Cookie consent controlsChange your choice at any time
We use strictly necessary storage to remember your cookie choice, and optional analytics only if you click "Accept all". You can reset or change your cookie preference at any time using the button below.
See also our cookie notice.