Privacy policy

Last updated: 14 October 2026

This policy explains what personal information The Toby Gale Foundation collects through this website, why we collect it, and the choices and rights you have. We keep it simple: we collect as little as possible, and we never sell your information.

1. Who we are

The Toby Gale Foundation is a registered charity in England and Wales (charity number 1219723). We are the “data controller” for the personal information described in this policy, which means we decide how and why it is used.

If you have any questions about this policy or your information, email us at info@tobygalefoundation.co.uk.

2. What we collect and why

When you contact us

If you email us – for example to ask a question, offer support or tell us about a fundraiser – we will receive your name, your email address and anything you choose to include in your message. We use this only to reply to you and to help with what you’ve asked about.

When you donate

Donations are made through our page on JustGiving, not on this website. JustGiving processes your payment and is responsible for the information you give them. We never see or store your card or bank details. JustGiving may share some details with us, such as your name, the amount you gave and any message you left, depending on the choices you make when donating. Please see JustGiving’s privacy policy for how they use your information.

The “raised so far” total shown on our homepage is taken from the public figures on our JustGiving page. It doesn’t include any information about individual donors.

When you fundraise for us

If you take part in or organise a fundraiser for the foundation, we may – with your agreement – feature it on this website, including your name, a description of your challenge and photos. You can ask us to change or remove this at any time.

When you visit the website

This website does not use cookies, analytics tools or advertising trackers, and we don’t build profiles of visitors. However, like all websites, some technical information is processed when you visit:

• Hosting. Our website is hosted by Netlify. Their servers automatically log technical details such as your IP address, browser type and the pages requested, so the site can be delivered and protected from misuse.
• Fonts. Our typeface is loaded from Adobe Fonts. To deliver the font, your browser connects to Adobe’s servers, which receive your IP address and basic browser information.

3. Our lawful reasons for using your information

Under UK data protection law we must have a lawful basis for using personal information. We rely on:

• Legitimate interests – to reply to your messages, to run our charity and to keep this website working and secure. We only do this where it doesn’t override your own rights and interests.
• Consent – to publish your name, photos or story on our website. You can withdraw your consent at any time.
• Legal obligation – where we need to keep records to meet our duties as a charity.

4. Who we share it with

We do not sell, rent or trade your personal information. We only share it with:

• organisations that help us run the website and our email, such as Netlify (website hosting) and Adobe (fonts), who may only use it to provide their services to us;
• regulators, law enforcement or others where we are legally required to.

Some of these providers are based outside the UK, including in the United States. Where your information is transferred abroad, it is protected by safeguards recognised under UK data protection law.

5. How long we keep it

We keep personal information only for as long as we need it. Emails are usually deleted within two years of our last contact with you, unless we need them for an ongoing fundraiser or a legal reason. Fundraiser stories and photos stay on the website until you or we decide to remove them.

6. Keeping it safe

We take sensible steps to protect your information. Our website is served over a secure (HTTPS) connection, and only our trustees can sign in to update it.

7. Your rights

You have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that’s wrong or incomplete;
• ask us to delete your information;
• ask us to limit or stop using your information, or object to how we use it;
• ask for your information in a format you can take elsewhere;
• withdraw your consent at any time, where we rely on it.

To use any of these rights, email us at info@tobygalefoundation.co.uk. There’s no charge, and we will reply within one month.

If you’re unhappy with how we’ve handled your information, please tell us so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

8. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.