RCPCH fundraising - Privacy notice

This privacy notice explains how RCPCH processes your personal data in relation to donations or fundraising we receive for any of our initiatives or charitable foundations, which includes the National Reye’s Syndrome Foundation. If you would like to donate to a specific initiative or charitable foundation managed by RCPCH, please indicate this on your donation form or or by entering a comment in the "Add a message of support" box on the JustGiving website.

Who we are

We are the Royal College of Paediatrics and Child Health (RCPCH), 5-11 Theobalds Road, London, WC1X 8SH (telephone: +44 (0)20 7092 6000).

The contact details for the Data Protection Officer are the same as above or via email to information.governance@rcpch.ac.uk

Why do we collect this information?

Under UKGDPR, we are required to have a legal basis for processing your personal data. Our legal bases are:

"Contractual obligation" - Where we need to process your personal data to enter into or fulfil a contract with you.

"Legitimate interest" - Where we need to process your personal data to carry out a specific task and have undertaken a balancing test, balancing the legitimate interest of doing the task against your right to privacy.

"Legal requirement" - Where we need to process your personal data to comply with the law

"Consent" - Where you have provided explicit consent for us to process your personal data.

Specifically, we process your data for the following purposes:

  • To process your donation transaction - this where necessary to ensure appropriate security checks to prevent against fraud, to process gift aid, to acknowledge receipt of your payment and to assign to specific funds or projects 
  • Where we are required by law to share your personal details with HMRC or financial regulatory bodies 
  • To invite you to a VIP event connected with your donation, to undertake due diligence in relation to a large donation or to thank you for your support. Where we rely on legitimate interest in relation to marketing, we will always provide an option to opt out of future marketing communications from RCPCH in every communication we send
  • Where you have consented by opting into marketing from JustGiving and RCPCH. You can opt out at any time, see the below section on ‘Your data rights’ for more details.

Where we receive a legacy, we will only communicate with the donor and executors/solicitors as required to process the legacy, unless we have consent to further communicate with you. 

If you have donated through the JustGiving website, please see their privacy notice to find out more about how they process your data.

Cookies

Both RCPCH and JustGiving use cookies on their web pages. 

Find out more about RCPCH cookies and about JustGiving cookies.

Who do we share your information with?

RCPCH and JustGiving will disclose information to a third party where they have a legal requirement to do so, such as for gift aid or because they have a regulatory requirement to do so. 

JustGiving also share information with carefully selected partners - to find out more read the JustGiving privacy policy.

Your personal data will be transferred outside of the European Economic Area (EEA) if you donate via the JustGiving website. To ensure you receive the same level of protection for your data, they will either rely on an adequacy decision, or have European Union (EU) standard contract clauses or binding corporate rules in place. For more information, read the JustGiving privacy policy.

Your data rights

Where we are processing your data with consent, such as for marketing purposes, you can withdraw consent at any time by contacting us on fundraising@rcpch.ac.uk, or if you have an RCPCH online account you can log in to this website and update your contact preferences.

To help you understand more about this information, please see our page Understanding GDPR and your data rights. This explains common words and phrases used in our privacy notices and details the rights you have in relation to the processing of your personal data under UK General Data Protection Regulation (UK GDPR).

To find out more about your rights, visit the Information Commissioners Office (ICO) website or to make a request please contact the Data Protection Officer by emailing: information.governance@rcpch.ac.uk or by writing to the address in the ‘who we are’ section, addressed to the ‘Data Protection Officer’. 

If you want to make a request to JustGiving in relation to the information they process about you, JustGiving privacy policy for contact details.

In accordance with Data Protection Legislation, we have a legal duty to protect any information we collect from you and we have measures in place to ensure your data is securely and safely stored. You do have the right to complain to the ICO if you have concerns about the way your personal data is being handled: casework@ico.org.uk.

Keeping your personal data

It is your responsibility to update us of any changes to the personal information you have provided. You can update your details at any time by contacting us: fundraising@rcpch.ac.uk or if you have an RCPCH online account you can log in to this website and update your details.

We are legally required to keep information relating to your donation and gift aid for 7 years in line with Income Tax Act 2007 sections 413 to 430 but this will be non-personal information unless the amount is over £10,000. Depending on the nature of the donation, we may occasionally be required to keep a record of your donation for longer in line with Medical Research Council guidelines or external funder requirements.

If you have consented to marketing, your information will be retained permanently as a record of consent/non-consent but will be suppressed if you opt out of marketing so that only essential information is retained to be able to record your opt out. 

We may also keep anonymised data for longer as evidence of funding and as required by funders and for future research and analysis. 

If you have donated via the JustGiving Platform, please see the JustGiving privacy policy for more information on how long they will retain your personal data.

Changes to this privacy notice

We review all our privacy notices on an annual basis.  Any updates to this notice will be posted here. 

Last reviewed 29 September 2025