Privacy Policy
Plain-English answers to what data we collect, why, and what your rights are under UK GDPR.
Last updated: 1 May 2026
The short version
We are a small charitable trust. We only collect data you give us directly, when you contact us, donate, or request a collection box. We never sell your data, share it with third parties for marketing, or use it for anything beyond running the trust. You can ask us at any time what we hold, and we'll delete it on request unless we're legally required to keep it.
Who we are
This privacy policy applies to Moosa Trust UK, an unincorporated charitable trust based at Daisy Street, Blackburn, BB1 5EW, United Kingdom. We are the data controller for any personal data you provide to us through this website, WhatsApp, or in person.
What data we collect
From the contact form
If you fill in the contact form on our homepage, we collect:
- Your name
- Your email address
- The subject and message you send us
We use Formspree to receive these submissions. Formspree forwards your message to a trustee's mailbox; their privacy policy applies in addition to ours.
From WhatsApp
If you message us on WhatsApp (07854 690073), we receive your phone number, name (if shared in your WhatsApp profile), and the messages you send. WhatsApp / Meta's privacy policy applies to the platform itself.
From donations and collection boxes
If you donate or request a collection box, we may record:
- Your name and contact details (email, phone, or address as relevant)
- The amount and date of your donation
- Where the collection box is located, if applicable
- Whether you've claimed Gift Aid (and the declaration you signed), once Gift Aid is operational
Automatically when you visit the site
This website is served as plain static files via GitHub Pages. We do not run analytics, tracking pixels, advertising scripts, or set cookies of our own. Your browser may exchange standard server logs (IP address, user agent, page requested) with GitHub's infrastructure as part of normal HTTP requests, GitHub's privacy statement applies to those logs.
Why we collect it (lawful basis)
- To respond to you. When you contact us, we use your details to reply. Lawful basis: your consent (you chose to message us) and our legitimate interest in running a charity.
- To process and acknowledge donations. Lawful basis: legitimate interest in running a charity transparently, plus contractual / legal necessity for Gift Aid records.
- To meet legal duties. If HMRC or the Charity Commission requires records (e.g. for Gift Aid claims or future Charity Commission registration), we keep what the law requires.
How long we keep it
- Contact form messages: kept while we're corresponding with you, then deleted within 12 months unless you become a donor.
- Donation records: kept for at least 6 years after the financial year of the donation, in line with HMRC Gift Aid record-keeping rules.
- WhatsApp message history: subject to your own WhatsApp settings and Meta's retention; we don't separately archive it.
Who we share it with
We do not sell or rent your data. We share data only where necessary to run the trust:
- Formspree, to deliver contact-form submissions to us.
- Meta / WhatsApp, the platform you choose to message us through.
- HMRC, if you Gift Aid a donation, we file the minimum information required to claim Gift Aid.
- Banking / payment partners, once we set up online giving (Givey) and a bank account, those providers will process payment data under their own privacy terms.
- Charity Commission, if and when we register as a charity, the records they require will be filed.
- Law enforcement, only if compelled by a valid legal process.
Your rights under UK GDPR
You have the right to:
- Be informed, what this policy is for.
- Access, ask us for a copy of the data we hold about you.
- Rectification, ask us to correct inaccurate data.
- Erasure, ask us to delete your data, subject to legal record-keeping duties.
- Restrict processing, ask us to pause using your data while a question is resolved.
- Object, tell us to stop using your data for a particular purpose.
- Data portability, ask for your data in a machine-readable format.
- Withdraw consent, at any time, where consent is the lawful basis.
- Complain to the ICO, if you're unhappy with how we've handled your data, you can raise it with the UK Information Commissioner's Office at any time.
How to contact us about your data
Moosa Trust UK
Daisy Street, Blackburn BB1 5EW
WhatsApp: +44 7854 690073
Or via the contact form, mark your message "Data request".
We aim to respond within 30 days, in line with UK GDPR.
Changes to this policy
We may update this policy as the trust grows (for example, when we set up online giving or register with the Charity Commission). The "Last updated" date at the top of the page will reflect any change. Material changes will also be flagged in the next message we send to existing donors.