Privacy Policy - Donations.

Charity Name: Invictus UK 2027  

Effective Date: 18 June 2025 

1. Introduction 

At Invictus UK 2027 we are committed to protecting your personal data and respecting your privacy, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

This privacy notice explains what personal data is collected by the through our fundraising activities and how and why we use this data. 

Personal data is any information that relates to a living individual who can be identified from that data. Personal data which we collect could include your name, address, date of birth, telephone number, email address or photograph. If you contact us,  we may collect personal data about you and other people connected to your organisation. 
This privacy statement explains how we collect, use, and protect your personal data when you make a donation to us, including donations made via our fundraising partner, Enthuse. 

2. Who We Are 

Our registered name is Invictus UK 2027 Ltd, and we are a registered charity in the UK Registered Charity Number 1210319:]. Our registered address is 199 Borough High Street, London, SE1 1AA. 
 
We are the “data controller” of the personal data collected directly by us and may act as “joint controller” for data collected via third-party platforms such as Enthuse. 

3. How We Collect Your Information 

We collect personal data when: 
- You donate via our website or directly through Enthuse 
- You sign up to fundraise or take part in an event 
- You opt in to receive communications from us 
 
When donating through Enthuse, your data is shared with us securely and in accordance with their privacy policy. You can view Enthuse’s Privacy Policy here: 
https://enthuse.com/privacy/ 

4. Personal Data We Collect 

We may collect: 
- Name 
- Contact details (address, email, phone) 
- Donation amount and frequency 
- Gift Aid status 
- Payment method (note: we do not store full card or bank details; these are securely processed by Enthuse) 
- Fundraising activity and event participation 
- Communication preferences 
- Any messages or notes you leave with your donation 

5. Why We Use Your Data 

We will use your data to: 
- Process and acknowledge your donation 
- Claim Gift Aid (if applicable) 
- Comply with legal and regulatory obligations 
- Keep accurate financial and supporter records 
- Send updates, newsletters or fundraising appeals (only if you opt in) 
- Analyse donor trends to improve our campaigns 
 
We process your personal data under one or more of the following lawful basis  

  • Consent: You have given clear consent for us to use your personal data for a specific purpose. We will use your consent for marketing activities.  

  • Contract: We need to use your information for a contract we have with you, or because you have asked us to do something before entering into a contract with us. We will use this processing ground to process your donation.  

  • Legal obligation: Using your information is necessary for us to comply with the law. This can include information required for HMRC reporting  

  • Vital interests: Using your personal data is necessary to protect someone’s life. 

  • Legitimate interests: Using your personal information is necessary for our legitimate interests or the legitimate interests of a third party, and your own interests or any impact the processing may have on you do not override those legitimate interests. This may include activities to help us better understand donor behaviour.  
     

6. Sharing Your Information 

We will never sell or rent your data. We may share it with: 

  • Enthuse – our donation platform provider 

  • Payment processors and banks 

  • HMRC (for Gift Aid claims) 

Organisations which support our IT software and systems may also have access to personal data. 

In each case, we will only share personal data needed to carry out their work, and will do so subject to appropriate safety measures that are designed to ensure your personal data remains secure and is only used for the intended purpose All partners are contractually required to comply with data protection law and to keep your data safe. 

7. Your Rights 

You have the right to: 
- Access your data 
- Correct inaccuracies 
- Request erasure (where legally applicable) 
- Restrict or object to certain types of processing 
- Withdraw consent at any time 
- Lodge a complaint with the ICO: https://www.ico.org.uk 

If our processing of your personal data relies on your consent, you also have the right to withdraw your consent at any time. 

For more information or to exercise your data protection rights, please contact our Data Protection Officer using the contact details below. There are other rights not listed here and exemptions may apply in some circumstances. 

If you are unhappy about how your personal data has been used, or if you have any queries, please do contact us. 

You also have a right to complain to the Information Commissioner’s Office – contact details below – which regulates the processing of personal data. 

8. Retention 

We keep your data only as long as necessary: 
- Donation and Gift Aid records: 6 years (for legal/tax purposes) 
- Marketing records: until you withdraw consent 

9. Cookies 

If you interact with our website or Enthuse’s, cookies may be used to improve user experience.  There is more information on how we use Cookies within our Cookie Policy, which you can access here  

10. Marketing and fundraising communications 

Where you have consented, we may send you marketing and fundraising emails, texts, or other electronic mail messages. We may also send marketing and fundraising communications by post or call you, unless you have opted out of receiving these types of contact. 

To ensure our fundraising is conducted efficiently, and to make sure we contact you with the most relevant information in the most appropriate way, we analyse the personal data we collect to create profiles of individuals’ interests and preferences. We may increase and enhance the information we hold about you by obtaining further information from external sources. This may include obtaining details of changes of address, and other contact details, age, as well as consumption and demographic data. It may also include information from public registers and other publicly available sources, such as Companies House, newspapers, and magazines. 

By signing up to receive our newsletter you agree to us storing your contact details for this purpose only and acknowledge that your information will be transferred to Mailchimp for processing. Your details will be kept private and will not be shared with any other third party. You can unsubscribe from our newsletter at any time by simply following the prompt at the bottom of any of our newsletters. 

Learn more about Mailchimp’s privacy practices here. 

In limited circumstances, such as when you enter your details into an online registration form, we may use this information to contact you even when you have not submitted the form. We only do this to check if we can help, such as to resolve any problems you may have experienced, or to avoid you thinking your registration is submitted when it has not been. 

11. Contact Us 

If you have any questions, queries or complaints, and to exercise your personal data rights, please contact us at   
Email: contact@invictusgames2027.org  

Email is our preferred way of communicating. It is quicker, more convenient, cheaper, and has less impact on the environment.  

If you need to write to us, you can contact us at: 

Supporter Care 

Invictus Games Birmingham 2027 

199 Borough High Street, 

London 

SE1 1AA 

You can contact the Information Commissioner’s Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.