Privacy policy
This Privacy Notice explains how Age UK Kensington & Chelsea (and, where relevant, any trading or associated companies in the Age UK Kensington & Chelsea Group) collects and uses personal information, the lawful bases we rely on, who we share information with, how long we keep it, and the rights you have.
When you use our website or services, we will use your information in line with this Privacy Notice and UK data protection law. We do not rely on “acceptance” of this notice as a contract; instead we rely on the lawful bases described below.
Who we are
Age UK Kensington & Chelsea is the operating name of Age Concern Kensington & Chelsea. Registered Charity No: 1082658. Company Limited by Guarantee No: 03926026. Registered office: 1 Thorpe Close, London, W10 5XL.
Age UK Kensington & Chelsea is the Data Controller for the personal information described in this notice.
Contact and Data Protection Officer
Any questions regarding this notice and our privacy practices should be addressed to the Data Protection Officer (DPO) by email to administration@aukc.org.uk or in writing to: 1 Thorpe Close, London, W10 5XL. Telephone: 020 8969 9105.
If you are contacting us about a rights request (e.g., access, deletion), please mark your request “Data Protection Rights Request” to help us route it quickly.
Cookies
We use cookies and similar technologies to make our website work, understand how it is used, and improve it. Details of the cookies we use (including expiry and how to change your preferences) are provided in our Cookie information on the website.
Where analytics cookies are used, we will set them in line with your cookie preferences.
UK data protection law and our lawful bases
We process personal information in line with the UK GDPR and the Data Protection Act 2018.
Depending on the activity, we rely on one or more of these lawful bases: consent; contract; legal obligation; vital interests; public task; and legitimate interests. We explain which basis applies in each context below.
Review of this notice
This Privacy Notice was last updated in May 2026.
How do we collect information from you?
We obtain information about you when you use our website, for example, when you contact us about products and services, make a donation, or register for our newsletters. We also collect details from you in verbal and written communication, telephone conversations and emails. We may also obtain information about you from the public domain.
We may also receive information about you from partner organisations where you have asked them to refer you to us or where sharing is necessary to provide a service (for example, with your consent or another appropriate lawful basis).
What information do we collect?
The personal information we collect might include your name, address, email address, IP address, and information regarding what pages are accessed and when. If you make a donation online or purchase a product from us, your card information is not held by us; it is collected by our third party payment processors who specialise in secure online capture and processing of card transactions.
Where we provide services or run activities, we may sometimes process special category data (for example, information about health or support needs) where this is necessary and appropriate. For fundraising, we do not aim to collect special category data; if we become aware of it we will handle it with additional care and only where we have a clear lawful basis under UK GDPR.
How we use your information
We may use your information to process donations and orders, carry out obligations arising from contracts, deal with competition entries, seek feedback, notify you of changes, process grant or job applications, and to send communications you have requested.
We will identify and record the lawful basis for each processing activity. For example: donations and orders are usually processed under contract and/or legal obligation; newsletters and electronic marketing are sent with consent; postal marketing is sent under legitimate interests with an easy opt-out.
Profiling and prospect research
As part of our fundraising activities, we may undertake research and profiling of supporters and prospective supporters to help us target communications in a focused and cost-effective way. We may use publicly available sources such as Companies House or Charity Commission registers, typical earnings and house prices by area, the electoral roll, press reports and publicly available social media posts.
You have the right to object to processing based on legitimate interests, including profiling for fundraising. If you object, we will stop unless we have compelling legitimate grounds.
Marketing and fundraising communications
We use a range of channels to contact supporters including direct mail, SMS/text, telephone and email. We will obtain your prior consent to send marketing by email, text and telephone. We may send marketing by post where this is within our legitimate interests, and you can opt out at any time.
We aim to action preference changes promptly; please allow up to 28 days for postal mailings already in progress.
Who we share information with
We will not sell your information. We may share it with trusted suppliers (for example, IT, mailing, and payment processing providers) who process information on our behalf under contract and only in line with our instructions.
We may also share information with statutory agencies where required by law or where it is necessary to protect someone from harm (for example, safeguarding concerns).
How long we keep your information
We keep personal information only for as long as necessary for the purposes set out in this notice and to meet legal, accounting, and regulatory requirements (for example, Gift Aid records).
Retention periods vary depending on the type of record. Where you ask us to stop contacting you for marketing, we will keep a minimal suppression record so we can respect your preferences.
Your data protection rights
You have rights under data protection law, including the right to request access to your information (Subject Access Request), to ask us to correct inaccurate data, and (in some circumstances) to request deletion.
You may also have rights to restrict processing, object to processing (including direct marketing), and request data portability where processing is based on consent or contract. The extent of each right depends on the lawful basis we rely on.
We will respond to valid rights requests within one month (and may extend by up to two further months for complex requests, as permitted by law).
Complaints
If you are unhappy with how we handle your information, please contact our DPO first so we can put things right. You also have the right to complain to the Information Commissioner’s Office (ICO).
Security
Payment card details are handled by our payment providers. Where we collect information through our website, we use encryption in transit (e.g., TLS/HTTPS) and apply appropriate technical and organisational measures to protect it.
Most browsers show a padlock icon in the address bar when the connection is secure (HTTPS).
International transfers
Transferring your information outside the UK - sometimes our suppliers may store or process information outside the UK. Where this happens, we will ensure appropriate safeguards are in place (for example, UK adequacy regulations or approved contractual protections).
User-generated content
Stipulations regarding discussion boards (where used)
Any material you post in a public area of our website will be treated as non-confidential. Please do not post personal information you would not want others to see.
This privacy notice was reviewed and updated in May 2026.
It is due for review in May 2029.