Privacy Policy

Last updated: 27 November 2025

Data Controller

Mamacita Foundation (SCIO) is the data controller. We collect identity and contact details, service information, limited wellbeing notes, volunteering and recruitment data (including PVG/Disclosure outcomes), donation and Gift Aid details, marketing preferences, and basic website analytics and cookies.

How We Use Your Data

We use your data to deliver support and safeguarding, manage volunteers, process donations, send operational updates and optional marketing (with your consent), meet legal duties, and improve our website.

Lawful Bases

  • •Legitimate interests
  • •Consent
  • •Contract
  • •Legal obligation
  • •Vital interests

Special Category Data

Special category and criminal data is handled sparingly under consent or substantial public interest and safeguarded with appropriate security measures. We share data with delivery partners, payment and IT providers, regulators and advisors where necessary. Your data is never sold.

Data Retention

We retain your data for different periods depending on the type of information:

Service Records

Up to three years

Donations & Gift Aid

Six years

Finance Records

Six years

Your Rights

Under UK GDPR, you have the right to:

  • •Access your personal data
  • •Rectify inaccurate data
  • •Request erasure of your data
  • •Restrict processing of your data
  • •Object to processing
  • •Request data portability
  • •Withdraw consent at any time

Contact & Complaints

For any questions about your data or to exercise your rights, please contact us at:

Email: info@mamacitafoundationuk.com

If you are unhappy or concerned, you can also complain to the Information Commissioner's Office (ICO).

Security

We prioritise security with staff training and encryption to protect your personal data from unauthorised access and misuse.