1. Who we are
Mercy House (operating as The Jubilee Hub) is a registered charity in England and Wales (Charity No. 1212118). We are the data controller for the personal information described in this policy.
You can contact us at:
Email: info@mercyhouse.org.uk
Phone: 07736 496 999
2. What data we collect
We may collect the following personal information depending on how you interact with us:
When you contact us or request a presentation
- Your name
- Email address
- Home address (if provided)
- Phone number (if provided)
- Organisation or network you represent (if provided)
- The message or enquiry you send us
When you donate via LaunchGood
Donations are processed directly by LaunchGood. Please refer to LaunchGood's privacy policy for details of how they handle your payment and personal data. We may receive your name and donation amount from LaunchGood for Gift Aid and campaign reporting purposes.
When you donate via Give A Little
Donations are processed directly by Give A Little. Please refer to Give A Little's privacy policy for details of how they handle your payment and personal data. We may receive your name and donation amount from Give A Little for Gift Aid and campaign reporting purposes.
When you join our WhatsApp group
WhatsApp is operated by Meta. When you join our group, Meta can see your phone number and profile information. We see your phone number and display name. We use this only to send campaign updates. Other members of the group may be able to see your name, number, and display picture depending on your in-app privacy settings. Please refer to WhatsApp's privacy policy for details of their data handling.
When you set up a monthly donation
If you complete our monthly donation form (Donate Monthly), we collect your first name, last name, email address, monthly donation amount, and your Gift Aid choice. If you opt in to Gift Aid, we also collect your address and postcode, as these are required to make a valid Gift Aid claim. This information is stored by Mercy House as we use it to keep a record of monthly pledges. We do not collect or store any bank account or payment details on this website.
After submitting the form, you are redirected to GoCardless, a third-party Direct Debit provider, to securely set up your Direct Debit mandate and enter your bank details. Mercy House does not see or store your bank details — these are held only by GoCardless. Please refer to GoCardless's privacy policy for details of how they handle your payment data.
When you visit this website
This website does not use analytics cookies or tracking scripts. Aside from the monthly donation form described above, no personal data is collected by us through the website itself. If you click through to third-party services (LaunchGood, Give A Little, Google, WhatsApp, GoCardless), those services have their own privacy policies.
3. How we use your data
We use the information we collect to:
- Respond to your enquiry or message
- Arrange presentations to your family, network, mosque, or organisation
- Process and record donations (including Gift Aid claims where applicable)
- Manage monthly donation pledges and match your form submission to your GoCardless Direct Debit mandate
- Administer Gift Aid claims where you have opted in
- Maintain donation and charity accounting records
- Send campaign updates to people who have opted in via WhatsApp or email
- Contact you if we need to follow up about your donation or pledge
- Comply with our legal and regulatory obligations as a registered charity
We do not use your data for automated decision-making or profiling, and we do not sell or rent your data to any third party.
4. Lawful basis for processing
Under UK GDPR, we rely on the following lawful bases:
| Activity | Lawful basis |
|---|---|
| Responding to an enquiry you initiated | Legitimate interests / contract |
| Processing a donation and Gift Aid | Legal obligation / legitimate interests |
| Setting up and administering a monthly donation pledge | Contract / legitimate interests |
| Sending campaign updates (email or WhatsApp) | Consent (you opted in) |
| Retaining records for charity accounting | Legal obligation |
Where we rely on consent, you may withdraw it at any time by contacting us at info@mercyhouse.org.uk. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
5. Who we share your data with
We do not sell your data. We may share it only in the following circumstances:
- HM Revenue & Customs (HMRC) — if you have authorised a Gift Aid declaration, we are required to submit your name and address to HMRC.
- The Charity Commission — as required to meet our reporting obligations as a registered charity.
- Google — monthly donation form submissions are stored in Google Sheets so we can keep a record of pledges.
- GoCardless — after submitting the monthly donation form, you are redirected to GoCardless to set up your Direct Debit. GoCardless collects and holds your bank details directly; Mercy House does not receive or store them.
- Our volunteers and staff — who access data only on a need-to-know basis and are bound by confidentiality.
- Legal requirement — if we are required to disclose data by law, court order, or a competent authority.
6. How long we keep your data
We retain personal data only for as long as is necessary for the purposes it was collected and to meet our legal obligations:
- Donation and Gift Aid records — 7 years, in line with HMRC and Charity Commission requirements. This includes monthly donation pledge details and Gift Aid declarations submitted through our monthly donation form.
- General enquiry correspondence — up to 2 years after our last meaningful contact.
- WhatsApp group membership — until you leave the group or ask us to remove you.
After the applicable retention period, data is securely deleted or anonymised.
7. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your data where there is no legitimate reason to retain it
- Restriction — ask us to pause processing of your data in certain circumstances
- Objection — object to processing where we rely on legitimate interests
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — at any time, where consent is the lawful basis
To exercise any of these rights, please contact us at info@mercyhouse.org.uk. We will respond within one calendar month. There is no charge for making a request.
8. Cookies
This website does not set any cookies of its own. No tracking, analytics, or advertising cookies are used on this site.
If you click links to third-party services such as LaunchGood, Give A Little, Google Forms, WhatsApp, or GoCardless, those services may set their own cookies. Please refer to their respective privacy and cookie policies for details.
9. Third-party services
This website links to the following third-party platforms. We are not responsible for their data practices:
- LaunchGood — crowdfunding platform used for donations and peer fundraising. LaunchGood Privacy Policy
- Give A Little — fundraising platform used for contactless and digital donations. Give A Little Privacy Policy
- WhatsApp (Meta) — used for our community updates group. WhatsApp Privacy Policy
- Google Forms — used for our contact and presentation-request form. Google Privacy Policy
- Google Apps Script / Google Sheets — used to receive and store monthly donation pledge form submissions. Google Privacy Policy
- GoCardless — third-party Direct Debit provider used to securely collect bank details and set up monthly donation mandates. GoCardless Privacy Policy
- Google Fonts — fonts are loaded from Google's servers, which may log your IP address. Google Privacy Policy
10. Contact & complaints
If you have any questions about this policy, or wish to exercise your data rights, please contact us:
Email: info@mercyhouse.org.uk
Phone: 07736 496 999
If you are not satisfied with how we have handled your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK supervisory authority for data protection:
- Website: ico.org.uk
- Helpline: 0303 123 1113
This policy may be updated from time to time. The date at the top of this page reflects when it was last revised. We recommend checking back periodically.