Last updated: 14-08-2026

Privacy Policy

At Visufund, we are committed to protecting and respecting your privacy.

This Policy explains what data we collect about you when you visit Visufund (visufund.com), how we use it, who can access it, the conditions under which we may disclose it to others, and how we keep it secure. It also explains your statutory rights regarding your personal data.

We may update this Policy from time to time, so please check this page occasionally to ensure you are aware of any changes. This version was last updated in August 2026.

Who are we?

Visufund Ltd is a company registered in England and Wales (company registration number 10141346). Our registered office is at 20-22 Wenlock Road, London, England, N1 7GU ("Visufund", "the Company", "we", "us", or "our").

Visufund is the Data Controller for the personal data collected directly through this website. We are registered as a data controller with the UK Information Commissioner's Office (ICO) under registration number: ZA510716.

If you have any questions regarding this Policy, our privacy practices, or wish to exercise your data rights, please contact us.

What data do we collect?

We collect certain personal data about you when you use visufund.com. This includes:

Questions, queries, or comments, including your name and email address, if you contact us.
Information provided when creating an account, including your full name, email address, account credentials, account category (Supporter or Non-profit), and organisational or due diligence details for Non-profit account representatives.
Your personal contact details, including your email address and postal address, when you make a charitable donation or Gift Aid declaration.
If you send a digital e-card, the recipient's first name and email address, processed strictly to dispatch the card (this data is never shared with charities or used for marketing).
Your email address and subscription preferences when you sign up for our newsletters.
Online identifiers, including your IP address and details of the web browser version you use when visiting the site.
Information on how you use the site, collected via cookies and page tagging techniques.

How do we use this data?

We use your personal data to:

Process and manage transactions, donations, and campaign contributions.
Facilitate the transfer of donor details and Gift Aid declarations to your chosen Non-profit organisation.
Maintain and recall your specific marketing preferences, communication opt-ins, and cookie settings.
Create, manage, and secure your user account, including verifying your identity and allowing you to log in.
Maintain, protect, and improve our website infrastructure and platform services.
Conduct essential due diligence and background verification on Non-profit account holders.
Notify you of important updates, account security alerts, or changes to our Terms of Service.
Send you direct marketing communications where you have provided explicit, opt-in consent.
Monitor, analyse, and enhance the technical performance, usability, and cyber security of the Platform.

Data Retention: We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Transactional and donation record data is retained for 5 years following the transaction date to enable Non-profit reporting, financial auditing, and compliance with statutory record-keeping rules. Account profile data is retained for as long as your account remains active. If you choose to close your account, access is terminated immediately and your personal profile data is erased or anonymised, unless statutory tax, legal, or financial reporting requirements compel us to retain specific transaction records.

Our legal grounds for processing your personal data

Under Data Protection Legislation (including UK GDPR and the Data Protection Act 2018), we must establish a valid lawful basis for processing your information. We rely on the following conditions:

1. Performance of a Contract

When you create an account, purchase a plan, or use our fundraising tools, processing your data is necessary to fulfil our legal contract with you under our Terms of Service. Without this data, we cannot deliver platform functionality or process transactions.

2. Consent

Where you have given explicit consent—such as ticking an optional opt-in box to receive Visufund marketing updates or accepting non-essential analytical cookies—we process your data on the basis of consent. You have the right to withdraw your consent at any time.

3. Legitimate Interests

We process data where necessary for our legitimate operational and business interests, provided those interests are not overridden by your fundamental privacy rights. This includes:

Verifying Non-profit registration status and conducting manual account background checks.
Enhancing, troubleshooting, and testing our website software and infrastructure.
Detecting, preventing, and investigating fraudulent transactions, platform abuse, or security breaches.
Analysing aggregated user engagement metrics to improve service design.

4. Legal Obligation

We may process or disclose personal data where required to comply with statutory legal, financial, accounting, regulatory, or court orders.

Who has access to your data?

We strictly limit access to your personal information. Your data is only shared with or accessed by:

Beneficiary Non-Profits: When you donate or contribute to a campaign, your details (name, contact details, donation amount, Gift Aid declaration if applicable) are shared with that charity as an independent Data Controller for their record-keeping.
Approved Service Providers: Vetted third parties who provide technical infrastructure, including Stripe (payment processing), MailerLite (email communications), and Google Analytics (website traffic and usage analytics). They are contractually forbidden from using your data for their own purposes.
Visufund Staff: Authorised team members who need access to provide technical support or perform charity account checks.

Visufund will never sell, rent, or trade your personal information to third parties for marketing or commercial gain.

How do we protect your data?

We implement stringent technical and organisational security measures to protect your data against unauthorised access, alteration, loss, or disclosure:

Database & Hosting Location: Core platform data is hosted on encrypted, secure servers located within the UK and European Economic Area (EEA). Where third-party service providers (such as payment gateways) process data outside these regions, we ensure strict UK/EU data transfer safeguards are in place.
Traffic Encryption: All web communication across the Platform is encrypted in transit using industry-standard Transport Layer Security (TLS/SSL) technology.
Access Controls: Access to backend systems and database controls is strictly restricted to authorised personnel bound by legally binding confidentiality obligations.
Role-Based Team Access: We provide multi-user controls so Non-profit account holders can issue individual staff credentials, eliminating the security risks associated with shared passwords.
Account Security & Monitoring: We offer Two-Step Verification (2SV) capabilities to help you protect your account, alongside active session monitoring to detect unauthorised activity.

What are your statutory rights?

Under UK data protection law, you possess the following statutory rights in relation to your personal data:

Right of access: You can request a copy of the personal information we hold about you (Data Subject Access Request).
Right to rectification: You can ask us to update or correct inaccurate or incomplete data.
Right to erasure: You can ask us to erase your personal data under certain legal conditions.
Right to restriction: You can ask us to temporarily limit how we process your information.
Right to object: You can object to our processing where we rely on legitimate interests or direct marketing.
Right to data portability: You can request that we transfer structured electronic copies of your data to another service provider.
Right to withdraw consent: Where our processing is based on your consent (such as direct marketing or non-essential cookies), you have the right to withdraw your consent at any time.

You are not required to pay a fee to exercise your rights. To protect your privacy and security, we may verify your identity before fulfilling a request. Once verified, we will respond to your request within one calendar month. Please contact us to submit a request.

How to complain

If you have any concerns regarding how we collect or process your personal information, please contact us directly so we can resolve the issue.

If you remain dissatisfied, you have the right to lodge a formal complaint with the UK data protection authority, the Information Commissioner’s Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113
Website: https://ico.org.uk

Cookies & External Links

Use of Cookies

Visufund uses cookies to optimise your browsing experience. Cookies are small text files placed on your device to store site preferences and technical identifiers. When visiting the site, you can accept or reject non-essential cookies via our Cookie Preferences Manager accessible in the website footer.

Essential Cookies: Required for basic platform functionality (such as keeping you logged in or processing a donation session). These do not require user consent under UK GDPR/PECR and cannot be turned off via our cookie banner.
Non-Essential (Analytical) Cookies: Google Analytics cookies help us monitor site usage, traffic patterns, and performance metrics. These are only activated if you grant consent via our cookie banner.

Links to External Websites & Social Platforms

Our Platform may contain links to external third-party websites or social sharing features. Once you click an external link or leave our domain, Visufund no longer controls how your data is collected. We recommend reading the privacy notice of any destination website you visit.