Turn2us Website Privacy Policy
At Turn2us, we are committed to protecting your personal information and being transparent about what we do with it.
We will not do anything with your information that you wouldn't reasonably expect.
- Who are we?
- What is personal data?
- The data we collect about you
- What is the legal basis for processing?
- Wealth screening
- How do we use your data?
- Whom will my information be shared with?
- Transferring personal data outside the UK and EU/EEA
- Data security
- How long is my information kept?
- Your rights in connection with personal data
- Changes to our privacy notice
- How to complain
This Privacy Policy explains how we collect and process your personal data, including our practises for collecting, using, storing, and disclosing personal data that we collect from you and/or hold about you. This notice also outlines how we protect your privacy and outlines your rights in relation to your personal data.
For the purposes of the UK Data Protection Act 2018, Turn2us is the "data controller." This means that we are responsible for deciding how we hold and use personal data about you.
We are committed to protecting the privacy and confidentiality of the personal data you provide to us. It is important that you read this notice so that you understand how we process and the measures we take to protect your personal data.
We will:
- only use your personal data (as defined in the Data Protection Act 2018) for the purposes for which you have entrusted it to us;
- only retain your personal data for as long as we are required by law; and
- always ensure appropriate safeguards are in place to protect your personal data and privacy.
We will not:
- sell your personal data;
- share it with other organisations without a legitimate reason.
1. Who are we?
Turn2us (the trading name for Elizabeth Finn Care) is a charity registered in England and Wales (registration number 207812); and in Scotland (registration number SC040987).
2. What is personal data?
‘Personal data’ is any information that relates to and identifies you or can identify you as an individual.
3. The data we collect about you
We classified the individuals whose personal data we process into the following categories:
- General enquirers
- Website users
- Grant applicants, grant recipients, and third parties acting on behalf of applicants.
- Donors and supporters
- Research participants
- Helpline users and Individuals reporting concerns
- Individuals who contact Turn2us and use our services
- Complainants
- Co-Production partners
- Storytellers
We may collect, use, store, and transfer personal data about you, which can be classified as follows:
a) Identity data, including name, username, or similar identifier;
b) Contact data, including home address, email address, and telephone numbers;
c) Date of birth;
d) Information about your employment status/occupation, housing status, relationship status, parental status, and personal circumstances, including disability information.
e) Financial data, including income and expenditure details, other current benefit details, payment details, and tax status (gift aid), where necessary, to support your application or donation;
f) Profile data, including internet protocol (IP) address, including your login data, your preferences, feedback, and survey responses;
g) Usage data, including information about how you use our website, products, and services;
h) Marketing and communications data, including your preferences in receiving marketing from us and our third parties, your communication preferences;
i) Publicly available wealth screening data, e.g. public registers, property records, company records and directorships, etc.;
j) Lived experience stories provided by storytellers;
k) Other information voluntarily disclosed by you.
We may also collect, use, store, and transfer some of the special categories of personal data about you, which can be classified as follows:
a) Demographic information data, including age, gender, ethnic origin, nationality and religion or belief;
b) Health data, including medical information, to support your application for benefits, grants or storytelling;
When we process your personal data/ special category data, we only do so for the stated purposes and legal grounds outlined below.
We may collect other personal data that is necessary to provide you with the products and services you have requested or to comply with our legal obligations. We don’t process your data in any manner that is dependent on a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
If you have any questions or concerns about the data we collect or how it is used, please do not hesitate to contact us.
4. What is the legal basis for processing?
Under the UK Data Protection Act 2018, the lawful bases we rely on for processing your personal data are:
a) Where you have provided your consent.
b) To perform a contract with you.
c) Where we have a legal obligation to process your data.
d) Where we have a legitimate interest.
5. Wealth screening
We value your trust and are committed to protecting your privacy. This section explains how we use your personal data for wealth screening purposes, why we do it, and how you can exercise your rights regarding this activity.
a) What is wealth screening?
Wealth screening involves analysing information about our supporters to better understand their interests, capacity to donate, and potential engagement with our organisation. This helps us:
- Tailor our communications to make them more relevant.
- Use our resources more efficiently to further our mission.
- Identify potential donors who may wish to support us further.
b) What data do we use?
For wealth screening, we may use the following types of data:
- Information you provide directly to us, such as your name, contact details, donation history, and communication preferences.
- Publicly available information, such as property records, LinkedIn profiles, company records, or published articles.
- Data from third-party providers or analytics services that specialise in wealth screening or fundraising insights.
We only use data that is necessary and proportionate for wealth screening purposes.
c) Why do we conduct wealth screening?
We rely on the legitimate interests legal basis under the General Data Protection Regulation (GDPR) to conduct wealth screening. It helps us ensure our fundraising efforts are effective and targeted, enabling us to continue supporting our mission and goals.
We ensure that this processing does not unduly impact your rights or freedoms and provide safeguards to minimise any impact.
d) How do we protect your data?
We take appropriate measures to ensure the security and confidentiality of your data during wealth screening activities, including:
- Limiting access to your data to authorised personnel.
- Using encrypted systems to store and analyse data.
- Ensuring that any third parties we work with comply with GDPR requirements.
e) Your rights
You have rights regarding the use of your personal data for wealth screening, including:
- Right to object: You can object to your data being used for wealth screening or profiling.
- Right to access: You can request details about the personal data we hold about you and how it is used.
- Right to erasure: You can request that we delete your personal data if you no longer wish to be contacted by us or if you object to wealth screening.
If you wish to exercise any of these rights, please contact us using the details provided in the “How to opt out” section of this notice.
f) How to opt out
If you do not want your data to be used for wealth screening, you can let us know at any time by contacting us at:
- Email: consent@turn2us.org.uk
- Address: 33-39 Bowling Green Lane, London, EC1R 0BJ
We will promptly honour your request and ensure your data is no longer used for this purpose.
g) Updates to this section
We may update this section from time to time to reflect changes in our practices or legal obligations. Please check our privacy notice regularly for updates.
6. How do we use your data?
We will only use your personal data as permitted by law. We have outlined below how we intend to use your personal data and which legal grounds we will rely on to do so.
Depending on the specific purpose for which we are using your data, we may process your personal data for more than one lawful ground. If you require details about the specific legal basis we are relying on to process your personal data where more than one ground has been listed in the table below, please contact us.
We will use your personal data for the purposes and lawful bases as outlined in the data subject categories below:
Purpose/Activity
To give you access to Turn2us core services:
Including grants, benefits opportunities, and other information and financial support, which include:
- Enabling individuals to use our Grants Search, Benefits Calculator and PIP Helper functionality on our website to enquire about visible grant opportunities in their area and make benefit enquiries
- Enabling Turn2us to respond to individual enquiries linked to obtaining financial support
Lawful basis for processing
a) Consent
b) Legitimate interests (to provide you with information on grant and benefit opportunities)
Purpose/Activity
To manage our relationship with you, which includes:
- Processing of personal data in order to contact/communicate with you.
- Asking you to leave a review or take a survey
Lawful basis for processing
a) Consent
b) Legitimate interests (to provide you with information on grant and benefit opportunities)
c) Legal obligation
Purpose/Activity
To give you access to Turn2us core services:
Including grants, benefits opportunities, and other information and financial support, which include:
- Enabling individuals to use our Grants Search, Benefits Calculator and PIP Helper functionality on our website to enquire about visible grant opportunities in their area and make benefit enquiries
- Processing grant applications
Lawful basis for processing
a) Consent
b) Legitimate interests (to provide you with information on grant and benefit opportunities)
Purpose/Activity
To manage our relationship with you, which includes:
- Processing of personal data in order to contact/communicate with you.
- Notifying you about changes to our terms or privacy policy
- Asking you to leave a review or take a survey
Lawful basis for processing
a) Consent
b) Legitimate interests (to provide you with information on grant and benefit opportunities)
c) Legal obligation
Purpose/Activity
Marketing and communications purposes, which include:
- Sending e-mails to the individuals who have expressed an interest in finding out about current co-production and consultancy opportunities
- Processing of website contact us forms to respond to your queries and concerns.
- Sending out newsletters to individuals through website sign-up.
Lawful basis for processing
a) Consent
b) Legitimate Interests (to respond to your queries and concerns and other communication requests)
Purpose/Activity
Analytics purposes
To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences
Lawful basis for processing
a) Legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business)
Purpose/Activity
To give you access to Turn2us core services:
Including grants, benefits opportunities, and other information and financial support, which include:
- Enabling individuals to use our Grants Search, Benefits Calculator and PIP Helper functionality on our website to enquire about visible grant opportunities in their area and make benefit enquiries
- Processing grant applications
- Enabling Turn2us to respond to individual enquiries linked to obtaining financial support
Lawful basis for processing
a) Consent
b) Legitimate interests (to provide you with information on grant and benefit opportunities)
Purpose/Activity
Financial management purposes, which include:
- Processing of ongoing grantee applications
- To pay successful grant applications
- Completion of individual applicant declaration forms
Lawful basis for processing
a) Consent
b) Legal obligation
c) Legitimate interests (to effectively manage our finances and to ensure that grants and payments are distributed in a timely and accurate manner)
Purpose/Activity
To manage our relationship with you, which includes:
- Processing of personal data in order to contact/communicate with you.
- Notifying you about changes to our terms or privacy policy
- Asking you to leave a review or take a survey
- Invite you to take part in current evaluations
Lawful basis for processing
a) Consent
b) Legitimate interests (to provide you with information on grant and benefit opportunities)
c) Performance of a contract with you
d) Legal obligation
Purpose/Activity
Financial management purposes
Lawful basis for processing
a) Consent
b) Legal obligation
c) Legitimate interests (to effectively manage our finances and to ensure that grants and payments are distributed in a timely and accurate manner)
Purpose/Activity
Fundraising and donation purposes, which include:
- Community and event fundraising
- Receipt of donations
Lawful basis for processing
a) Consent
b) Legitimate interests (to promote and fund our charitable activities)
Purpose/Activity
To manage our relationship with you, which includes:
- Processing of personal data in order to contact/communicate with you.
- Notifying you about changes to our terms or privacy policy
Lawful basis for processing
a) Consent
b) Performance of a contract with you
c) Legal obligation
d) Legitimate interests (stewardship and relationship building communications)
Purpose/Activity
Wealth screening, to identify potential high-value donors:
- Analysing publicly available data to assess an individual's wealth, interests, and likelihood of donating.
Lawful basis for processing
a) Legitimate interests (to ensure that our propositions to donors are reasonable and help positive relationships with them.)
Purpose/Activity
Safeguarding purposes, which include:
- Completion of safeguarding case register following phone/in-person/email reporting of safeguarding concerns by external individuals or personnel
- Case management of safeguarding concerns
Lawful basis for processing
a) Consent
b) Legal obligation
c) Legitimate Interest (to protect vulnerable individuals’ welfare and minimise the risk of harm or abuse.)
Purpose/Activity
To manage our relationship with you, which include:
- Processing of personal data in order to contact/communicate with you.
- Asking you to leave a review or take a survey
Lawful basis for processing
a) Consent
b) Performance of a contract with you
Purpose/Activity
To give you access to Turn2us core services:
Including grants, benefits opportunities, and other information and financial support, which include:
- Enabling individuals to use our Grants Search, Benefits Calculator and PIP Helper functionality on our website to enquire about visible grant opportunities in their area and make benefit enquiries
- Processing grant applications
- Enabling Turn2us to respond to individual enquiries linked to obtaining financial support
Lawful basis for processing
a) Consent
b) Legitimate interests (to provide you with information on grant and benefit opportunities)
Purpose/Activity
To manage our relationship with you, which includes:
- Processing of personal data in order to contact/communicate with you.
- Notifying you about changes to our terms or privacy policy
- Asking you to leave a review or take a survey
- Invite you to take part in current evaluations
Lawful basis for processing
a) Consent
b) Legitimate interests (to provide you with information on grant and benefit opportunities)
c) Performance of a contract with you
d) Legal obligation
Purpose/Activity
Marketing and communications purposes, which include:
- Sending e-mails to the individuals who have expressed an interest in finding out about current co-production and consultancy opportunities
- Processing of website contact us forms to respond to your queries and concerns.
- Sending out newsletters to individuals through website sign-up and event sign-up.
Lawful basis for processing
a) Consent
b) Legitimate Interests (to respond to your queries and concerns and other communication requests)
c) Legal obligation
Purpose/Activity
Research purposes, which include:
- Analysing survey data
- Analysing evaluation/research responses
Lawful basis for processing
a) Consent
Purpose/Activity
To manage our relationship with you, which includes:
- Processing of personal data in order to contact/communicate with you.
Lawful basis for processing
a) Consent
Purpose/Activity
To manage our relationship with you, which includes:
- Processing of personal data in order to contact/communicate with you.
- Notifying you about changes to our terms or privacy policy
- Asking you to leave a review or take a survey
- Invite you to take part in current evaluations
Lawful basis for processing
a) Consent
b) Performance of a contract with you
c) Legal obligation
Purpose/Activity
To register you as a Co-Production partner and manage your involvement in our programmes.
Lawful basis for processing
a) Legitimate interests (to manage relationships and coordinate project delivery)
Purpose/Activity
To enter into joint consultancy arrangements with you, including working on projects led by Turn2us or an external consultant.
Lawful basis for processing
a) Performance of a contract with you
b) Legitimate interests (to engage your skills in co-delivery work)
Purpose/Activity
To communicate with you about ongoing projects, opportunities, or updates related to your role.
Lawful basis for processing
a) Consent
b) Legitimate interests (to keep you informed and involved)
Purpose/Activity
To notify you about changes to our terms or privacy policy.
Lawful basis for processing
a) Legal obligation
Purpose/Activity
To ask for your feedback, testimonials, or participation in surveys and evaluations.
Lawful basis for processing
a) Consent
b) Legitimate interests (to improve and evaluate our services)
Purpose/Activity
To invite you to take part in current or future evaluations related to Co-Production activities
Lawful basis for processing
a) Consent
b) Legitimate interests (to assess impact and engagement)
Purpose/Activity
To provide references for you in your capacity as a Co-Production partner or for future opportunities.
Lawful basis for processing
a) Legitimate interests (supporting professional development and recognition)
Purpose/Activity
To enable the secure distribution and management of digital vouchers via our provider, Evouchers Ltd, which includes sharing your name and email address for voucher system access.
Lawful basis for processing
a) Performance of a contract with you (if applicable)
b) Legitimate interests (to enable effective delivery of support tools)
Purpose/Activity
To process any payments to you, either via direct bank transfer or digital vouchers, in line with your agreement with us.
Lawful basis for processing
a) Performance of a contract with you
Purpose/Activity
To maintain accurate financial records and comply with audit or funder reporting requirements.
Lawful basis for processing
a) Legal obligation
Purpose/Activity
To respond to your data subject requests under UK GDPR (e.g. right of access, correction, or deletion).
Lawful basis for processing
a) Legal obligation
Purpose/Activity
Collecting and using lived experience stories including written quotes, audio, video and photography for campaigning, fundraising, media, and policy work (including but not limited to, social media content, email campaigns, reports, campaign materials, partner presentations, programme and service evaluations)
Lawful basis for processing
a) Consent – we only use your story and personal information if you’ve given us clear, informed consent
b) Explicit Consent – where story includes special category data (e.g. health, disability, race, political views), we only process this with your explicit permission.
Purpose/Activity
Storing your responses securely for up to 3 years, in case a relevant opportunity arises.
Lawful basis for processing
a) Consent – you allow us to hold your information, and we seek renewed consent if we wish to keep it longer than 3 years.
b) Explicit Consent – required for storing sensitive data over time.
Purpose/Activity
Contacting you about opportunities, projects and updates related to sharing your story publicly (e.g. in the media, social media, at events, for fundraising, or in campaigns).
Lawful basis for processing
a) Consent – you choose how and when we contact you, and can opt out at any time
Purpose/Activity
Contacting you about opportunities for training, support and development related to your lived experience or sharing your story.
Lawful basis for processing
a) Legitimate Interests
Purpose/Activity
Inviting you take part in current or future evaluations related to storytelling activities, and to improve our storytelling processes and the support we offer to contributors.
Lawful basis for processing
a) Consent
b) Legitimate Interests – we may review anonymised or aggregated data to help improve how we support people who share their stories. We ensure this does not override your rights and interests.
c) Explicit Consent – we would seek your explicit consent for any detailed analysis of special category data.
Purpose/Activity
To provide references for you in your capacity as a Storyteller for future opportunities.
Lawful basis for processing
a) Legitimate interests (supporting professional development and recognition)
Purpose/Activity
Responding to safeguarding concerns or legal obligations.
Lawful basis for processing
a) Legal Obligation – we may be required to disclose personal data where necessary to comply with safeguarding laws, child protection, or other legal duties.
b) Vital Interests – if we believe someone is at serious risk, we may share information to protect their life or wellbeing.
Purpose/Activity
To enable the secure distribution and management of digital vouchers via our provider, Evouchers Ltd, which includes sharing your name and email address for voucher system access.
Lawful basis for processing
a) Performance of a contract with you (if applicable)
b) Legitimate interests (to enable effective delivery of support tools)
Purpose/Activity
To process digital vouchers, in line with your agreement with us.
Lawful basis for processing
a) Performance of a contract with you
Purpose/Activity
To maintain accurate financial records and comply with audit or funder reporting requirements.
a) Legal obligation
Purpose/Activity
To respond to your data subject requests under UK GDPR (e.g. right of access, correction, or deletion).
Lawful basis for processing
a) Legal obligation
We will use your special category data for the purposes and lawful bases as outlined in the data subject categories below:
Purpose/Activity
To give you access to Turn2us core services
Including grants, benefits opportunities, and other information and financial support, which include:
- Enabling individuals to use our Grants Search, Benefits Calculator and PIP Helper functionality on our website to enquire about visible grant opportunities in their area and make benefit enquiries
- Processing ongoing grant applications
- Enabling Turn2us to respond to individual enquiries linked to obtaining financial support
- Case management of safeguarding concerns
Lawful basis for processing
a) Consent
b) Legitimate interests (to provide you with information on grant and benefit opportunities)
Purpose/Activity
To improve our products and services and understand the audience that we reach, which includes:
- Analysing survey data
Lawful basis for processing
a) Consent
Purpose/Activity
To collect and using lived experience stories & storing their story in case:
- a relevant opportunity arises where story may include special category data (e.g. health, disability, race, political views)
- match opportunities according to our special category data - e.g. if there’s an opportunity to tell a story of someone with a health condition or disability, or of a particular gender etc.
Lawful basis for processing
a) Consent (processed only with explicit permissions)
7. Whom will my information be shared with?
We may disclose your personal data to the following third parties:
- Financial institutions, consultants, and professional advisors.
- Other service providers such as information technology systems providers (duly appointed as data processors) and involved in the provision of services to Turn2us.
- Independent public accountants and auditors, authorised representatives of internal control functions such as audit, legal and/or corporate security.
- HMRC and other government bodies where Turn2us determines that it is necessary to comply with applicable laws or regulations.
8. Transferring personal data outside the UK and EU/EEA
Some of our external third parties are located outside of the UK and/or EEA; therefore, their processing of your personal data will involve a transfer of data outside of the UK and/or EEA.
Whenever we transfer your personal information outside of the UK and/or EEA, we implement at least one of the following safeguards to ensure an equivalent level of protection:
- We will only transfer your personal information to a country that provides an adequate level of protection for personal data, as determined by the UK or EEA data protection regime.
- When using service providers located outside the UK or EEA, we may use standard data protection contractual terms recognised or approved by the applicable UK or EEA data protection regime.
Please contact us if you wish to learn more about the specific mechanism we employ when transferring your personal data outside the United Kingdom and/or the EEA.
We require all third parties to treat your personal information securely and in accordance with the UK Data Protection Act 2018. Third-party service providers are not permitted to use your personal information for their own purposes and can only process your personal information per our instructions.
9. Data security
We record, store, and transmit your personal data securely in paper and electronic formats. We have implemented a number of technical and organisational measures to protect your personal data from loss, unauthorised use, access, alteration, or disclosure to unauthorised individuals. We limit access to your personal data to employees, contractors, and trusted third parties who process personal data on our behalf on a need-to-know basis.
10. How long is my information kept?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
If you would like further information regarding how long we store your personal data, please contact consent@turn2us.org.uk.
11. Your rights in connection with personal data
Under data protection law, you have certain rights including:
- The right to be informed about the collection and use of your personal data.
- The right of access to receive a copy of your personal data and other supplementary information.
- The right to rectification of your personal data to correct inaccuracy or complete where it is incomplete.
- The right to erasure rights in certain circumstances; you have the right to ask us to erase your personal data (this is also known as the ‘right to be forgotten’) in certain circumstances.
- The right to restrict processing to ask us to restrict the processing of your personal data in certain circumstances.
- The right to data portability, the right to obtain and reuse personal data for other purposes across different services in certain circumstances.
- The right to object to the processing of your personal data in certain circumstances.
- Rights in relation to automated decision-making and profiling, you have the right not to be subject to automated decision-making or profiling where this activity produces legal effects.
12. Changes to our privacy notice
Any future changes to this Notice will be posted on our website and, where appropriate, via email notification. Unless otherwise specified, all such changes will be effective immediately after they are posted on our website.
Privacy Notice last updated – July 2025.
If you wish to exercise your data rights, we have one calendar month to respond to you. All requests should be made to consent@turn2us.org.uk..
13. How to complain
If you have any concerns about our use of your personal data, you can make a complaint to consent@turn2us.org.uk.
If you are dissatisfied with how we have used your data, you can also complain directly with the Information Commissioner’s Office (ICO).
The ICO’s address is:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk