Open Hands (OH) is a small charity with a limited need to collect and process data from our donors, other supporters and other contacts (collectively, “our Contacts”) . As such we have not considered it necessary to register under the Data Protection Act 1998.

However, the implementation of the EU General Data Protection Regulation (GDPR) in May 2018 and the new Data Protection Act impose new obligations on OH in relation to personal data, which this notice addresses.

Personal Data

For the purpose of this notice, the term “personal data” means data relating to a living individual which allows that person to be identified. Such identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession.

OH is unlikely to acquire personal data from any source other than the individual identified by the data or someone acting on such individual’s behalf and with their knowledge.

Data Controller

OH acquires personal data in various ways including through our website We use your personal data for the following purposes: -

OH does not access bank account, credit card or similar financial data from donors, although the agencies through which it collects some donations (Virgin Money Giving and PayPal) may have such information.

Security and Other Matters

OH is committed to ensuring that personal data is maintained securely and is protected from loss, unintended destruction or damage and from unauthorised or unlawful processing; it has put in place suitable physical, electronic and organizational procedures.

OH will not collect or retain excessive amounts of personal data and will, to the extent it is able, keep the personal data it needs up to date.


Personal data will be retained in relation to each of our contacts and volunteers as long as relevant law requires or, if longer, so long as we consider there to be an ongoing relationship an individual. After that time such data will be securely destroyed.

Legal Basis for Processing Personal Data

Personal data is processed on the following bases:

Sharing Personal Data

Subject to the following or to the requirements of any relevant law, personal data will be treated as strictly confidential and will only be shared among the trustees and employees of OH and OH will not share personal data with third parties. Personal data may also on occasion be shared with volunteers working with OH.

Where volunteers intend to visit projects in Romania it may for local legal or other reasons be necessary to share personal data with the staff of FOH (who will operate similar protections to OH by virtue of the GDPR) or Romanian governmental authorities.

Personal data may also need to be shared with tax authorities to allow for tax reclaims or other processing of donations qualifying for tax benefits.

Rights in Relation to Personal Data

Unless subject to an exemption under the GDPR, individuals have the following rights with respect to their personal data:

Exercising some of these rights may make ongoing participation in our child sponsorship program impossible.

Further processing

If OH wishes to use any individual’s personal data for a new purpose, not covered by this notice, then we will provide that person with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, OH will always seek such individual’s prior consent to the new processing.

Contact Details

To exercise all relevant rights, queries or complaints please in the first instance contact Open Hands Charity, Rosevine, Wellgreen Lane, Kingston, East Sussex BN7 3NS or

You can contact the Information Commissioners Office on 0303 123 1113 or via email or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.


* indicates required