Privacy Policy

Last updated: August 2026

This policy explains what personal data Kennedy Street Foundation ("we", "us", "our") collects through kennedystreetrecovery.org (the "Site"), why, and what rights you have. We are the data controller for the personal data described below unless stated otherwise.

1. What we collect and why

We only collect personal data through three routes on the Site: our contact form, our mailing list signup, and donations.

Contact form — when you use the contact form, we collect your name, email address, phone number, company name, subject, message, and how you heard about us, so we can respond to your enquiry. Legal basis: legitimate interest in responding to enquiries, or consent where the enquiry concerns sensitive information.
Mailing list — we have a separate mailing list signup form on the Site, provided by Mailchimp. If you sign up, we collect your first name (optional), email address, and which topics you'd like updates on (e.g. recovery stories, workshops and sober socials, self-employment programmes, volunteering opportunities, fundraising and events), so we can send you relevant updates. Legal basis: your consent, which you can withdraw at any time by unsubscribing via the link in any email, or by contacting us.
Donations — if you donate, the donation form is provided by Donorbox and embedded on the Site. Donorbox (and its payment processor, such as Stripe or PayPal) collects and processes your payment details directly — we never see or store your card details. Donorbox passes us your name, email address, donation amount, and any information you choose to add (such as gift aid status), so we can thank you, issue receipts, and keep records for our charity accounts. Legal basis: performance of a contract (processing your donation) and legitimate interest / legal obligation (charity accounting and Gift Aid records).

2. Who we share data with

Squarespace — our website hosting platform, which processes data as our data processor.
Donorbox — processes donations on our behalf and is a separate data controller for the payment details it collects directly from you. See Donorbox's privacy policy: donorbox.org/privacy.
Mailchimp — stores and sends to our mailing list on our behalf, as our data processor. See Mailchimp's privacy policy: mailchimp.com/legal/privacy/.

We do not sell your personal data, and we do not share it with anyone else except where required by law.

3. International transfers

Some of the providers above (including Squarespace, Donorbox, and Mailchimp) may store or process data outside the UK/EEA. Where this happens, they are required to put in place appropriate safeguards, such as standard contractual clauses.

4. How long we keep data

Contact form enquiries: kept only as long as needed to deal with your enquiry, then deleted.
Mailing list: kept until you unsubscribe or ask us to remove you.
Donation records: kept for as long as required for charity accounting and tax purposes (typically at least 6 years).

5. Your rights

Under UK GDPR, you have the right to:

Ask what personal data we hold about you and get a copy of it
Ask us to correct inaccurate data
Ask us to delete your data, except where we must keep it for legal reasons (e.g. donation/accounting records)
Withdraw consent at any time (e.g. unsubscribe from the mailing list)
Complain to the Information Commissioner's Office (ico.org.uk) if you think we've handled your data incorrectly

To exercise any of these rights, contact us using the details below.

6. Children

The Site is not aimed at children. Please see our Terms of Use for our age requirements for using the Site.

7. Cookies

Details of the cookies used on the Site are set out in our separate Cookie Policy.

8. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted here with a new "Last updated" date.

Contact us

Kennedy Street Foundation

Bank House, Southwick Square, Southwick, Brighton, BN42 4FN, UK

Registered Charity Number: 1189265

Email: hello@kennedystreetrecovery.org