Privacy policy

When you donate we collect your name, email address, the amount, the designation and — unless you give anonymously — the postal address needed to issue a receipt. Payment card details are entered directly with Stripe or PayPal and never reach our servers.

When you create an account we store your email address, your chosen name, your account type and an encrypted password hash held by our authentication provider.

When you contact us we store the message and the contact details you supply so we can reply and keep a record of the conversation.

To process your donation, issue a receipt, meet our reporting obligations, answer your enquiries, and — only where you have asked for it — send you our monthly briefing.

We do not build advertising profiles, and we do not use your data to infer anything about you beyond what is needed to do the above.

Payment processors (Stripe and PayPal) receive what they need to take the payment. Our email provider (Resend) receives your address to deliver receipts and replies. Our database provider (Supabase) hosts the records.

Where you donate to a named organisation and have not chosen to give anonymously, your name and postal address are passed to that organisation so it can thank you and meet its own reporting duties.

We never sell your data. We never share it for marketing by third parties.

Donation records are retained for seven years to meet financial reporting and tax requirements. Contact messages are retained for two years. Newsletter subscriptions are retained until you unsubscribe, after which we keep only a suppression record so we do not contact you again by mistake.

You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it where we are not legally required to keep it. Email hello@rhfi.org and we will respond within thirty days.

You can unsubscribe from our briefing with one click from any email we send.

We set a session cookie when you sign in, which is required for the site to know who you are. We do not use advertising or cross-site tracking cookies. See our cookie policy for the full list.