Privacy notice
Last updated: 09/06/26
RN Fundraising is a sole trader business operated by Rachel Nutting, based in Woodbury, Devon. For the purposes of data protection law, RN Fundraising acts as a data controller for its own business and contact data, and as a data processor when handling personal data on behalf of clients.
What personal data we collect
We may collect and use the following information about organisations and their representatives:
- Organisation name
- Registered charity number
- Organisation address
- Key contact details (name, email address, phone number)
- Payment and invoicing details
- Agreed client objectives and project information
How we obtain your data
We collect personal data:
- Directly from you or your organisation when you engage RN Fundraising
- From publicly available sources, such as: Organisation websites, Email signatures, Public registers (e.g. Charity Commission)
Why we use your data (lawful basis)
We process your data to:
- Deliver agreed fundraising and consultancy services
- Manage client relationships and communications
- Issue invoices and maintain financial records
- Meet legal and tax obligations
Our lawful bases under UK GDPR are:
- Contract – processing is necessary to deliver agreed services
- Legal obligation – for record keeping and tax compliance
- Legitimate interests – to manage and operate the business effectively, provided this does not override your rights and interests
Who we share your data with
We only share data where necessary:
- Clear Books (accounting software) – used to manage invoicing and financial records. Data shared is limited to organisation name, invoice number and invoice amount. Clear Books securely processes data using EU-based hosting (AWS Ireland) and applies appropriate technical and organisational security measures.
We may also use a small number of trusted third-party service providers (e.g. cloud software tools) where necessary to deliver our services. Information about these providers and how they process data can be provided on request.
We do not sell personal data or share it for marketing purposes.
How we store and protect your data
Your data is held securely using:
- Microsoft 365 (OneDrive, Excel, Outlook, SharePoint, Planner)
- Password protection and multi-factor authentication
- Restricted access (limited to Rachel Nutting only)
International transfer of data
Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place in line with UK GDPR, such as adequacy regulations or approved contractual clauses.
How long we keep your data
We retain records for 6 years to meet UK tax and accounting requirements. After this period, data is securely deleted, including removal from recycle bins.
Your data protection rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (in certain circumstances)
- Object to or restrict processing
- Request transfer of your data (data portability)
To exercise your rights, please contact us using the details above. We will respond within one month.
Automated decision-making
RN Fundraising does not carry out automated decision-making or profiling when handling personal data.
How to complain
If you have concerns about how your data is handled, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office (ICO).
Updates to this notice
This privacy notice may be updated from time to time. The latest version will always be available on http://www.rnfundraising.co.uk.
Contact details:
Rachel Nutting
Email: rachel@RNfundraising.onmicrosoft.com
Business location: Woodbury, Devon
ICO registration number: ZC147598