Privacy Policy

Privacy Policy

Effective Date: February 2026
Last Updated: February 2026

Who we are

Wonderful Foundation (“we”, “us”, “our”) is a UK-based charitable organisation supporting emerging entrepreneurs, innovators and culture shapers through events, community, leadership development and venture-building initiatives.

This Privacy Policy applies to:

• www.thewonderfulfoundation.org
• All Summit event pages (including Summit North, Summit South and related programmes)
• Basecamp event registration pages
• Leaders and community platforms operated by Wonderful Foundation
• Venture Builder and retreat programmes
• Email communications and WhatsApp community groups
  ‍

Data Controller:

Wonderful Foundation
Registered Charity Number: [Insert]
Registered Address: [Insert]
Email: info@thewonderfulfoundation.org

We are committed to protecting your personal data and handling it responsibly in accordance with UK GDPR and the Data Protection Act 2018.

What Personal Data We Collect

We may collect the following types of personal data:

Identity & Contact Information

• Name
• Email address
• Phone number
• Postal address
• Organisation or church affiliation

Event & Programme Information

• Event bookings
• Attendance records
• Volunteer information
• Programme participation
• Dietary or accessibility requirements (where provided)

Donation & Financial Information

• Donation history
• Gift Aid declarations
• Billing details
  (Payment details are processed securely via third-party providers and are not stored by us.)

Community & Communications

• Email preferences
• WhatsApp participation
• Engagement data (e.g. event sign-ups, email opens)

Technical Information

• IP address
• Browser type
• Device information
• Cookies and website usage data
  ‍

How We Use Your Data

We use your personal data to:

• Process event bookings
• Administer programmes and retreats
• Manage volunteer involvement
• Process donations and Gift Aid
• Send event updates and important information
• Provide community communications
• Send newsletters and marketing (where consent is given)
• Improve our services and website
• Meet legal and regulatory requirements
  ‍

Lawful Basis for Processing

Under UK GDPR, we process personal data under the following lawful bases:
Contract
When you book an event, register for a programme, or donate.
Consent
When you subscribe to marketing emails, join WhatsApp groups, or opt in to communications.
Legitimate Interests
To communicate with our community, improve services, and grow our charitable impact, where this does not override your rights.
Legal Obligation
To comply with financial, tax, safeguarding and regulatory requirements.

Marketing Communications

We may send you information about:

• Upcoming Summits
• Basecamp events
• Retreats
• Venture Builder programmes
• Community opportunities
• Resources and media

You will only receive marketing communications if:

• You have opted in, or
• You have previously engaged with us and we believe it is relevant to you (legitimate interest).

You can unsubscribe at any time via the link in emails or by contacting us directly.

Donations & Payments

All payments and donations are processed securely via trusted third-party payment providers (e.g. Stripe or equivalent). We do not store full card details.

We retain donation records for financial compliance and reporting purposes in line with UK legal requirements.

Events, Community & WhatsApp Groups

When you join a Wonderful event or community:

• Your name and contact details may be visible to community members and organisers.
• If you join a WhatsApp group, your phone number will be visible to other participants.
• Participation in groups is voluntary.

We ask all community members to respect confidentiality and appropriate conduct.

Sharing Your Data

We do not sell your data.

We may share data with trusted third-party service providers who help us operate effectively, including:

• Event booking platforms
• Payment processors
• Email marketing providers
• CRM systems
• Website hosting providers
• Analytics providers

All third parties are required to handle data securely and in compliance with UK GDPR.

International Transfers

Some of our service providers may store or process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

Data Retention

We retain personal data only as long as necessary:

• Event records: up to 6 years
• Donation records: up to 6 years (for financial compliance)
• Marketing data: until you withdraw consent
• Volunteer data: as long as engagement remains active

We may retain certain records longer where legally required.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Withdraw consent at any time
• Request data portability

To exercise these rights, contact: [Insert Email]

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Cookies

Our websites use cookies to:

• Improve user experience
• Analyse site traffic
• Remember preferences

You can control cookies through your browser settings. A separate Cookie Policy may provide further details.

Security

We take appropriate technical and organisational measures to protect your personal data from loss, misuse or unauthorised access.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date.

‍