Join the Waiting List

Privacy Policy

Granted Giving Ltd

Effective Date: 15 January 2026

Last Updated: 9 March 2026

Version: 1.1

1. Introduction

Your privacy is important to us at Granted Giving. This Privacy Policy explains how we collect, use, protect, and share information gathered from users of our website (www.grantedgiving.co.uk) and the Granted platform.

Granted Giving is committed to protecting your personal data and respecting your privacy rights in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and other applicable data protection laws.

2. Who We Are

Data Controller:

  • Company Name: Granted Giving Ltd
  • Registered in England and Wales
  • Company Registration Number: 16803388
  • Registered Address: Office 8755, 321-323 High Road, Chadwell Heath, Essex, United Kingdom, RM6 6AX
  • Contact Email: robert.fall@grantedgiving.co.uk
  • Website: www.grantedgiving.co.uk

3. Information We Collect

We collect and process different types of personal information depending on how you interact with our services:

3.1 Information You Provide Directly

When you create an account, sign up to our waiting list, subscribe to our mailing list, or use our platform, we may collect:

  • Name and contact details (email address, phone number)
  • Organisation name and charity registration number
  • Job title and role
  • Login credentials (username and password)
  • Payment and billing information
  • Communications you send to us
  • Any other information you choose to provide

3.2 Waiting List Information

When you sign up to our waiting list via the form on our website, your information is collected and processed through our third-party service provider, Waitlister (https://waitlister.me/). The information collected includes:

  • Your name
  • Your email address
  • Any additional information you provide in the sign-up form

By signing up to our waiting list, your data will be subject to both this Privacy Policy and Waitlister’s Privacy Policy (available at https://waitlister.me/privacy). We recommend reviewing Waitlister’s privacy practices.

3.3 Newsletter and Mailing List Information

When you subscribe to our mailing list via our website, your information is collected and processed through our third-party email service provider, Mailchimp (operated by Intuit Inc.). The information collected includes:

  • Your name
  • Your email address

By subscribing, you consent to receive insights, updates and news from Granted Giving, which may include research reports, sector analysis, platform updates, product news, and information about free tools and trials.

Your data will be subject to both this Privacy Policy and Mailchimp’s Privacy Policy (available at https://www.intuit.com/privacy/statement/). Mailchimp is certified under the UK Extension to the EU-U.S. Data Privacy Framework. We recommend reviewing Mailchimp’s privacy practices.

3.4 Information We Collect Automatically

When you visit our website or use our platform, we automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Referring/exit pages
  • Date and time stamps
  • Clickstream data
  • Pages and resources you access
  • Usage patterns and analytics data

3.5 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us understand how you use our site and remember your preferences.

Types of Cookies We Use:

  • Essential Cookies: Required for the website to function properly
  • Performance Cookies: Help us understand how visitors interact with our website
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Track your activity to show relevant advertisements (only with your consent)

 

Your Cookie Choices:

We use the WPConsent plugin to manage your cookie preferences. When you first visit our website, you will be presented with a cookie consent banner allowing you to:

  • Accept all cookies
  • Reject non-essential cookies
  • Customise your cookie preferences

You can change your cookie settings at any time by accessing the cookie preferences link in the footer of our website or by clearing cookies in your browser settings.

4. How We Use Your Information

We process your personal data for the following purposes:

4.1 Service Delivery

  • To create and manage your account
  • To provide access to the Granted platform and its features
  • To process transactions and manage billing
  • To deliver customer support
  • To communicate with you about your account and our services

4.2 Waiting List Management

  • To manage our waiting list and notify you when platform access becomes available
  • To provide you with early access, discounts, and free tools as promoted
  • To send you updates about the Granted platform launch

4.3 Mailing List and Newsletter Communications

  • To send you research reports, sector analysis, and insight content
  • To share platform updates, product news, and information about free tools and trials
  • To inform you about webinars, events, and educational content
  • To share relevant industry news and insights from Granted Giving

4.4 Service Improvement

  • To understand how our services are used
  • To improve and develop new features
  • To conduct research and analysis
  • To personalise your experience

4.5 Legal and Security Purposes

  • To comply with legal obligations
  • To detect, prevent, and investigate fraud or abuse
  • To protect our rights, privacy, safety, and property
  • To enforce our Terms of Service
  • To resolve disputes

5. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

  • Consent: Where you have given explicit consent for specific processing activities (e.g., subscribing to our mailing list, marketing communications, waiting list sign-up)
  • Contract Performance: To provide the services you have requested and to fulfil our contractual obligations
  • Legal Obligation: To comply with legal and regulatory requirements
  • Legitimate Interests: To improve our services, prevent fraud, ensure security, and pursue our business interests, provided these do not override your fundamental rights and freedoms

6. How We Protect Your Information

We implement appropriate technical and organisational security measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Secure server infrastructure
  • Regular security assessments and updates
  • Access controls and authentication procedures
  • Staff training on data protection

While we strive to protect your personal information using commercially acceptable means, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

If we detect suspicious activity or a potential security breach affecting your account, we may temporarily suspend access while we investigate.

7. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

7.1 Third-Party Service Providers

We work with trusted third-party service providers who help us operate our business, including:

  • Waitlister: For managing our waiting list and sign-up forms. Waitlister processes waiting list data according to their own privacy policy. They act as a data processor on our behalf for waiting list management purposes.
  • Mailchimp (Intuit Inc.): For managing our mailing list, sending newsletters, research reports, platform updates, and marketing communications. Mailchimp processes subscriber data according to their own privacy policy and acts as a data processor on our behalf. Mailchimp is based in the United States and is certified under the UK Extension to the EU-U.S. Data Privacy Framework.
  • Payment processors: For processing payments and billing
  • Cloud hosting providers: For data storage and infrastructure
  • Analytics providers: For understanding website and platform usage
  • Customer support tools: For providing customer service

These service providers are contractually bound to protect your data and can only use it for the specific services they provide to us.

7.2 Business Transfers

If Granted Giving Ltd is involved in a merger, acquisition, asset sale, or other business transaction, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

7.3 Legal Requirements

We may disclose your information when required by law, legal process, litigation, or governmental or regulatory authorities, or to:

  • Comply with legal obligations
  • Protect and defend our rights or property
  • Investigate or prevent illegal activities, fraud, or abuse
  • Protect the safety of our users or the public

7.4 Partner Organisations

If you access Granted through a partner referral link or affiliate programme, we may share limited information with that partner (such as confirmation of your sign-up) for the purposes of managing the partnership relationship and any associated benefits or commission payments.

8. International Data Transfers

Your information may be transferred to and stored on servers located outside the United Kingdom, including in countries that may have different data protection laws.

When we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the UK authorities
  • Adequacy decisions recognising equivalent data protection standards
  • Certification under the UK Extension to the EU-U.S. Data Privacy Framework
  • Other legally approved transfer mechanisms

Waitlister is based in the United States. By signing up to our waiting list, your data will be transferred to the United States and processed according to Waitlister’s privacy practices and applicable US laws.

Mailchimp (Intuit Inc.) is based in the United States and is certified under the UK Extension to the EU-U.S. Data Privacy Framework. By subscribing to our mailing list, your data will be transferred to the United States and processed according to Mailchimp’s privacy practices.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

  • Account Information: Retained while your account is active and for a reasonable period after account closure (typically 90 days) unless a longer retention period is required for legal, security, or business reasons
  • Waiting List Data: Retained until you request removal, you create an account (at which point it may be merged with your account data), or for up to 2 years after collection if no account is created
  • Mailing List Data: Retained while you remain subscribed to our mailing list. If you unsubscribe, your data will be removed from our active mailing list within 30 days, though anonymised engagement data may be retained for analytics purposes
  • Financial Records: Retained for up to 7 years in compliance with UK tax and accounting requirements
  • Communications: Retained for as long as necessary to provide customer support and resolve any disputes
  • Analytics Data: May be retained in aggregated, anonymised form indefinitely

If your account is terminated due to violations of our Terms of Service, we may retain certain information for a longer period to prevent repeated abuse.

10. Your Rights

Under UK data protection law, you have the following rights:

10.1 Right of Access

You can request a copy of the personal data we hold about you.

10.2 Right to Rectification

You can ask us to correct inaccurate or incomplete personal data.

10.3 Right to Erasure (“Right to be Forgotten”)

You can request deletion of your personal data in certain circumstances.

10.4 Right to Restriction of Processing

You can ask us to limit how we use your personal data in certain situations.

10.5 Right to Data Portability

You can request your personal data in a structured, commonly used, and machine-readable format.

10.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

10.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time.

10.8 Rights Related to Automated Decision-Making

You have rights regarding automated decision-making and profiling, where applicable.

To exercise any of these rights, please contact us at privacy@grantedgiving.co.uk. We will respond to your request within one month, though this may be extended by up to two additional months for complex requests.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe we have not handled your personal data properly. Visit https://ico.org.uk/ for more information.

11. Children’s Privacy

Granted Giving is intended for use by adults working in charitable organisations and the wider charity sector. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

12. Third-Party Links

Our website and platform may contain links to third-party websites, services, or resources that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We recommend reviewing the privacy policies of any third-party sites you visit.

13. Marketing Communications

We may send you marketing communications about our services, features, reports, tools, events, and related content where:

  • You have consented to receive such communications (for example, by subscribing to our mailing list, which covers insights, updates and news from Granted Giving including research reports, sector data, platform updates, product news, and information about free tools and trials), or
  • You are an existing customer of Granted Giving Ltd and we are marketing our own similar products or services, provided you were given a clear opportunity to opt out when we first collected your details and in every subsequent communication (soft opt-in under PECR Regulation 22)

 

You can opt out of marketing communications at any time by:

  • Clicking the “unsubscribe” link in any marketing email
  • Updating your preferences in your account settings
  • Contacting us at privacy@grantedgiving.co.uk

Please note that even if you opt out of marketing communications, we will still send you essential service-related communications (e.g., account notifications, transaction confirmations, security alerts).

14. Referral and Affiliate Programmes

If you access Granted through a partner referral link:

  • We may share confirmation of your sign-up or subscription with the referring partner
  • You may receive benefits such as early access, discounts, or free tools
  • The referring partner may receive commission or other benefits
  • Your use of Granted remains subject to this Privacy Policy

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the updated policy on our website with a new effective date
  • Sending you an email notification (for significant changes)
  • Displaying a prominent notice on our platform

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

16. Data Processing Agreement

If you use Granted to collect and process personal data about individuals (such as grant applicants or beneficiaries), you act as a data controller and we act as a data processor. We provide a Data Processing Agreement (DPA) to govern this relationship. Please contact us at privacy@grantedgiving.co.uk to request a copy of our DPA.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Email: robert.fall@grantedgiving.co.uk

Address: Office 8755, 321-323 High Road, Chadwell Heath, Essex, United Kingdom, RM6 6AX

Website: www.grantedgiving.co.uk

For data protection queries, please clearly mark your communication as “Privacy Query” or “Data Protection Request” to ensure prompt handling.