Who We Are

The Susan Vickers Foundation is a UK-based not-for-profit Community Interest Company (CIC) run by and for care-experienced people.
We are committed to protecting your privacy and handling your personal data responsibly, in line with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

Who Controls Your Data?

The Susan Vickers Foundation acts as the data controller for your personal data.
We are registered with the Information Commissioner’s Office (ICO).

What Data Do We Collect?

Depending on your relationship with us, we may collect and process:

• Personal information (name, contact details, date of birth)
• Information about your care experience (where you choose to share this)
• Financial details for donors, grant applicants, and recipients
• Special category data (e.g., health or ethnicity) — only where necessary and with your explicit consent
• Website usage data (via cookies) — see our Cookie Policy for details

Why Do We Collect Your Data?

We collect your data so we can:

• Process grant and support applications
• Deliver care-experienced support services and mentoring
• Manage donations and communicate with donors
• Improve our services
• Comply with charity, safeguarding, and tax laws

Our Legal Bases for Using Your Data

We process your personal data under lawful bases including:

• Consent (e.g., for marketing and special category data)
• Contract (to manage grants or donations)
• Legal obligation (when UK law requires it)
• Legitimate interests (to improve our charity’s services, run events, or communicate)

How We Keep Your Data Safe

We take protecting your data seriously. 

Our measures include:

• Data protection staff training
• Secure systems and encrypted storage
• Strict access controls
• Regular security checks

Who Do We Share Your Data With?

We only share your data:

• With your explicit consent
• With trusted UK-based service providers (e.g., IT support, fund processing)
• Where required for the running of our social mission (e.g., reporting to regulators)
• When the law requires it

International Transfers

If we ever transfer your information outside the UK, we will ensure appropriate safeguards are in place, in line with UK GDPR.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request corrections if your data is inaccurate
• Ask us to delete data (unless the law requires us to keep it)
• Restrict or object to how we process your data
• Receive your data in a portable format
• Withdraw consent at any time (for uses based on consent)
• Complain to the ICO

Children’s Privacy

We only collect personal data about children where needed for our services — and always with parental/guardian consent and full compliance with safeguarding laws.

How Long Do We Keep Your Info?

We keep your data only as long as necessary to meet our legal obligations and charitable purposes, following our internal retention schedule.

Cookies

Our website uses cookies. You can change your preferences in your browser.
See our Cookie Policy for more details.

Contact Us

If you have any questions or want to exercise your privacy rights, contact us:

Email: [email protected]
Post: Susan Vickers Foundation, 51 Tempest Street, Wolverhampton, WV1 1AA

Changes to This Policy

We update this policy when needed. Please check this webpage for the latest version.
If we make significant changes, we will notify you directly.

This Privacy Policy demonstrates our commitment to transparency and data protection excellence in serving the care-experienced community across the UK.