This privacy notice tells you what to expect us to do with your personal information. It contains the following sections:

Contact details

Post: MissionAssist, 483 Green Lanes, London, N13 4BS, United Kingdom
Telephone: 07983 168435
Email: info@missionassist.org.uk

What information we collect, use, and why

MissionAssist members

We collect or use the following information when a new Member joins MissionAssist, and contact all Members on an annual basis so they can check and update, where appropriate, the data we hold about them. This data is used so that we can provide services, specifically membership services, to link a Member up with a serving role where they have indicated that they would like to join a team, and to provide service and marketing updates (where consent has been provided for this). The data is generally provided by the person themselves, but we may link up data we already hold about them, for example if they have been a client or attended conference previously.

  • Name and contact details
  • Address
  • Year of birth
  • Qualifications
  • Information about work experience, interests, hobbies, training and volunteering
  • Religious or philosophical beliefs – this is special category information that is subject to additional protection due to its sensitive nature
  • Service use history
  • Marketing preferences
  • Records of consent, where appropriate
  • Information relating to compliments or complaints.

MissionAssist trustees

In addition to the data collected and used for all Members, we collect or use the following data about Members who are Trustees, who hold leadership positions, who are service co-ordinators or have access to the personal data held by the Charity, the Charity’s IT systems or social media platforms. This data is used for recruitment purposes and so we can comply with legal requirements, specifically that we can operate in accordance with our Safeguarding Policy and meet the requirements of the Charity Commission in terms of good governance.

  • Reference(s) (the person who is the subject of the reference provides the name and
    contact details of the referee(s))
  • Records of meetings and decisions (in which the individual is mentioned).

Conference attendees

We collect or use the following information about individuals who register to attend the conference. This data is used so we can provide services, specifically conference services, and provide service and marketing updates (where consent has been provided for this).

  • Name and contact details
  • Address
  • Health information (including food allergies/intolerances and other health conditions relevant for the conference organiser to know) – this is special category information that is subject to additional protection due to its sensitive nature
  • Payment details (including card or bank information for transfers and direct debits)
  • Service use history
  • Marketing preferences
  • Records of consent, where appropriate
  • Information relating to compliments or complaints.

Small Project Grant applicants

We collect and use the following information when someone applies for a Small Project Grant. This data is used so that we can provide services, specifically that we can process the application, communicate the result to the applicant, make the grant payment where the application has been successful and keep in touch with successful applicants in order to monitor and report on the progress of the project. The data is generally provided by the person themselves, with the applicant also providing the details marked with an asterisk below):

  • Name and contact details (of the applicant, project leader* and referee*)
  • Address
  • Bank account details.

Service users

We collect and use the following information when someone requests a service. This data is used so that we can provide services, specifically that we can process the request, communicate the status of the request to the potential client and keep in touch with clients in order to deliver the service. The data is generally provided by the person themselves, but we may link up data we already hold about them, for example if they have been a previous client or grant recipient.

  • Name and contact details
  • Addresses.

Hospitality service users

In addition to the data collected and used for all potential clients, we also collect and use the following information from those applying for the hospitality services. This data is used so we can provide services, specifically hospitality that meets the specific needs of our clients and so we can operate in accordance with our Safeguarding Policy.

  • Reference (the client provides the name and contact details of the referee)
  • Ages and gender of any children who will be staying
  • Any other relevant information, which could include health-related information if relevant for access arrangements and dietary requirements e.g. allergies/intolerances (health-related information is special category information this is subject to additional protection due to its sensitive nature).

Donors

We collect or use the following information about those who make a donation or participate in fundraising activities. This data is used so we can receive donations or funding and organise fundraising activities, specifically that we can process donations and fundraising income and comply with legal requirements that relate to financial transactions and charitable giving.

  • Name and contact details
  • Addresses
  • Payment or banking details
  • Donation history
  • Tax payer information (for Gift Aid purposes).

Website

We collect or use the following information about our website visitors. This data is used so we can provide services, specifically that we can track usage of our website and continually improve its performance based on user experience.

  • IP addresses
  • Website user journey information

Matomo Analytics

We use Matomo, a privacy-focussed analytics platform, to monitor how our website is used. This does not collect any personal data or use any cookies, and no data is passed to third parties, but you may opt-out if you prefer.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

Google Analytics

We use Google Analytics to track clicks on our Google Ads. If you are happy for Google to place cookies and track you, you can agree on the cookie consent bar. Our lawful basis for this is consent.

Marketing

We may collect or use images (photos or videos), and these may be of Members, clients, Small Project Grant recipients or conference attendees. This data is used for service updates and marketing purposes. In group settings, we make individuals aware of the taking of images so they are able to remove themselves from the images if this is their preference, and we seek consent for higher profile / more specific image use e.g. of individuals, small groups.

We may collect or use the following personal information to comply with legal requirements, not covered by any of the above:

  • Name
  • Contact information
  • Financial transaction information
  • Any other personal information required to comply with legal obligations
  • Safeguarding information.

Queries, claims, and complaints

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Name and contact details
  • Correspondence.

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Providing services

Our lawful bases for collecting or using personal information to provide services are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
    Our legitimate interests are:

    • MissionAssist is a Charitable Incorporated Organisation (CIO) and we operate according to our stated charitable objectives. We process your data to maintain internal records, deliver our services and manage member and client relationships.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Donations and fundraising

Our lawful bases for collecting or using personal information to receive donations or funding and organise fundraising activities are:

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Marketing

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
    Our legitimate interests are:

    • MissionAssist has post and telephone lists for some of its members, with data collected previously for the legitimate purposes of sharing service updates and information about the organisation (marketing), and we may use them from time to time to contact these members in these ways.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Legal requirements

Our lawful bases for collecting or using personal information to comply with legal requirements are:

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Recruitment

Our lawful bases for collecting or using personal information for recruitment purposes are:

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
    Our legitimate interests are:

    • MissionAssist processes your personal data in evaluating your suitability for taking up a role with the organisation, managing our recruitment process and making recruitment decisions, ensuring that our legitimate interests are not overridden by your data protection rights.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Queries, complaints or claims

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Legitimate interests – we’re collecting or using your information because it benefits
    you, our organisation or someone else, without causing an undue risk of harm to
    anyone. All of your data protection rights may apply, except the right to portability.
    Our legitimate interests are:

    • MissionAssist uses your personal data to handle service queries, provide support and improve our services. We also process personal data provided during complaints to investigate, resolve and learn from feedback. In the event of a claim, we would process personal data to investigate, defend our legal rights or comply with legal obligations, including protecting the organisation from fraudulent claims or pursuing legal action.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Where we get personal information from

  • Directly from you
  • Previous employers or others from whom we are seeking references if you are: applying to become a Trustee; applying to take on a leadership role; applying to become a service co-ordinator; applying for a role that involves access to the personal data held by the Charity, the Charity’s IT systems or social media platforms; applying to become a hospitality client; or applying for a Small Project Grant
  • Those for whom we need to seek a reference generally pass on the name and contact details of their referees.

How long we keep information

We will only keep your personal data for as long as is necessary in relation to the specific requirements in the following categories: provide services; receive donations or funding and organise fundraising activities; to provide service updates or for marketing purposes; to comply with legal requirements; for recruitment purposes; or for dealing with queries, complaints or claims.

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above in order to receive our Record of Processing Activities.

Who we share information with

Data processors

  • TigerFinch
  • CiviCRM.

This data processor does the following activities for us:

  • TigerFinch provides our website
  • CiviCRM is our membership database.

Others we share personal information with

  • Legal bodies or authorities
  • Relevant regulatory authorities
  • External auditors or inspectors.

Sharing information outside the UK

Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

Organisation name: Microsoft
Category of recipient: Platform provider
Country the personal information is sent to: US

How the transfer complies with UK data protection law: The country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge).

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

Last updated
July 2026