At The Bobby Mill Foundation (collectively, “BMF”, “we”, “us” or “our”), we are committed to maintaining the accuracy, confidentiality and security of your personal information. This Privacy Policy describes the personal information that BMF collects from or receives about you in connection with the operation of our website: (the “Website”). This Privacy Policy also describes how we use and to whom we disclose your personal information. By accessing or using our Website, you signify your acceptance of this Privacy Policy and agree to be bound by its terms. You can withdraw your consent at any time, however, if you choose to do so, we may not be able to provide you with the services, opportunities and communications that are available through the Website. If you submit any personal information relating to other people to us or to our service providers in connection with your access and use of the Website or otherwise, you represent and warrant that you have the authority to do so and to permit us to collect, use and disclose the information in accordance with this Privacy Policy.

: This Privacy Policy does not address, and we are not responsible for, the privacy, information or other practices of any third party, including, without limitation and any other charitable foundation or organization that BMF supports; (b) Facebook, Inc., Apple Inc., Google Inc., Microsoft Corp., Blackberry; (c) or any wireless carriers or third-party operating any website or other property to which our Website contains a link. In addition, the inclusion of a link on our Website does not imply endorsement of, or affiliation with, the linked site or property by us or our affiliates. Please note that the Website may include the ability to access and submit certain information directly to third parties such as Facebook or to any application platform such as Apple’s App Store or Google Play. Such information is submitted by you directly to such third parties, and this Privacy Policy does not apply to any such information. These links are provided for your convenience only and you assume all risk for clicking these links to other websites. We cannot assume any responsibility for the privacy practices, policies or actions of the third parties that operate these websites. BMF is not responsible for how such third parties collect, use or disclose your personal information. You should review the privacy policies of any linked websites before providing them with your personal information.

: We may change this Privacy Policy at any time. The “LAST UPDATED” legend at the top of this page indicates when this Privacy Policy was last revised. If we make any material changes we will notify you as required by law, but encourage you to check back often for updates. Any changes will become effective when we make the revised Privacy Policy available on or through our Website. Your continued use of the Website following an update or amendment to this Privacy Policy means that you accept the revised Privacy Policy and consent to the collection, use and disclosure of your personal information as described in the updated Privacy Policy.

: Personal information is any information about an identifiable individual.
 The Personal information that We Collect
 We collect and maintain different types of personal information in respect of the individuals with whom we interact. This personal information may include, but is not limited to:
 contact and identification information, such as your name, residential address, telephone number and email address; and
payment information, such as your credit card information, debit card information, billing address and other similar banking information required to process transactions, such as donations made on or through our Website. How we may collect personal information
 We, our partners and third-party service providers collect personal information in a variety of ways, including:
 Through the Website: We collect personal information when you interact with or provide us with your personal information through the Website.
From the charities to which you donate or contribute through BMF: The charities and organizations that BMF supports share information relating to your donation to these charities.
From our Third-Parties & Service Providers: From time to time, we may utilize the services of third-parties and may receive personal information collected by those third parties in the course of the performance of their services for us or otherwise. Where this is the case, we will take reasonable steps to ensure that such third parties have represented to us that they have the right to disclose your personal information to us. These third-parties may include, but are not limited to our joint marketing partners, payment processors, social media platforms and analytics providers.

Why we collect personal information
: We only collect the necessary information from you to provide you with the services available through our Website, to fulfil BMF’s legitimate business purposes as a charitable enterprise, and which enables BMF to manage, maintain, and develop our operations. For example, we collect and use information in order to:

Charity governance
: To deliver our charitable purposes, statutory and financial reporting and other regulatory compliance purposes.To facilitate research, events management, the administration of volunteers, employment and recruitment activities, and carry out the day-to-day operations of BMF.

Fundraising and Campaigning
: To administer campaigns, events, initiatives, programs and donations, send marketing materials and sending thank you communications, including preparing and providing tax receipts.

Providing the functionality of the Website and fulfilling your requests.
 To verify your identity, establish, maintain, administer and manage our relationship with you so that we may provide you with, facilitate or receive from you, the services, payments, donations or other matters that have been requested.
To enable you to register, access and maintain an account with us.
To respond to your inquiries and fulfil your requests, when you contact us via our Website or otherwise, for example, when you send us questions, or when you request information about our Website, organisation or services.
To send you administrative information, including information regarding the Website and changes to our terms, conditions and policies.
To complete and fulfil your donation or purchase, for example, to process your payments and donations, communicate with you regarding your purchase or donations and provide you with related customer service.

Providing you with our communications, newsletter and/or other marketing materials.
 To communicate with you about services, offers, promotions, campaigns and events offered by BMF and others.
To send you marketing related push notifications and emails, with information about our services and other news about BMF and its initiatives.

Analysis of personal information for business reporting and providing personalised services.
 To analyse or predict our users’ preferences in order to prepare aggregated trend reports on how our digital content is used, so that we can improve the Website.
To better understand you, so that we can personalise our interactions with you and your experience on the Website, including by presenting information, content, opportunities and offers tailored to your interests.

Allowing you to participate in sweepstakes, contests or other promotions.
 We may offer you the opportunity to participate in sweepstakes, contests and other promotions. Some of these activities have additional rules with information about how we use and disclose your personal information.

Aggregating and/or anonymising personal information.: We may aggregate and/or anonymise personal information so that it will no longer be considered personal information. We do so to generate other data for our use, which we may use and disclose such aggregated and/or anonymised data for any purpose.

Accomplishing our business and charitable purposes: For data analysis, for example, to improve the efficiency of our Website.
For audits, to verify that our internal processes function as intended and are compliant with legal, regulatory or contractual requirements.
For fraud and security monitoring purposes, for example, to detect and prevent cyberattacks or attempts to commit identity theft.
For developing new offerings, communications, services, programs, events and initiatives.
For enhancing, improving or modifying our current, offerings, opportunities, services, programs, events and initiatives.
For identifying usage trends, for example, understanding which parts of our Website are of most interest to users.
For determining the effectiveness of our promotional campaigns, so that we can adapt our campaigns to the needs and interests of our users.
For operating and expanding our activities, for example, understanding which parts of our Website are of most interest to our users so we can focus our energies on meeting our users’ interests.

Fulfill any other reasonable purpose to which you consent.
 By consenting to our collection, use and disclosure of your personal information through the use of our Website you allow us to fulfill the purposes for which we collect your personal information. We will collect your express consent prior to sending you any commercial electronic messages (e.g., marketing emails, news and updates), unless an exception to obtaining your opt-in consent applies under applicable laws. You will have the opportunity to opt-out of receiving commercial electronic messages at any time.

Disclosure of Personal information
: We may disclose your personal information to our affiliates and our respective employees, contractors, consultants, service providers, the charitable organizations that BMF supports and other parties who require such information to assist us with managing our relationship with you and operating our organization, including third parties that provide services to us or on our behalf. For example, we disclose personal information:

To the charities and organizations that BMF supports as well as our third-party service providers, to facilitate services they provide to us.
 These can include providers of services such as hosting, data analysis, payment processing, order fulfillment, information technology and infrastructure provision, customer service, email delivery, auditing and other services. For example, we may use a third-party payment service to process payments made through the Website. If you wish to make a payment through the Website, your personal information may be collected by such third party and not by us, and will be subject to the third party’s privacy policy, rather than this Privacy Policy. We have no control over, and are not responsible for, this third party’s collection, use and disclosure of your personal information. Another example is our use of the Amazon Web Services hosting platform in support of the Website.

To third parties, to permit them to send marketing communications to you, consistent with your choices.
 To third-parties that sponsor contests, sweepstakes and similar promotions.
 In connection with a sale or business transaction involving BMF:

Personal information may be disclosed or transferred to another party during the course of, or completion of, a change in ownership of or the grant of a security interest in, all or a part of BMF or its affiliates through, for example, an asset or share sale, or some other form of business combination, merger or joint venture, provided that such party is bound by appropriate agreements or obligations and required to use or disclose your personal information in a manner consistent with the use and disclosure provisions of this Privacy Policy, unless you consent otherwise.

To enforce our terms and conditions and to protect our rights, safety, property and/or that of our affiliates, partners, you or others.
 In addition, your personal information may be disclosed:
 As permitted or to comply with applicable law and regulations in cooperation with foreign or domestic government authorities or law enforcement.
 This can include laws outside your country of residence.
 To cooperate with law enforcement.
 For example, when we respond to valid legal processes such as search warrants, subpoenas or court orders or other similar law enforcement requests. This can include laws outside your country of residence.
 As part of BMF’s regular reporting activities under applicable laws.

The Consequences of Disclosing Your Personal Information
: Since we may share your personal information from time to time with third parties, as described in this Privacy Policy, your personal information may be collected, used, processed, stored or disclosed outside of your jurisdiction. For example the servers of our web hosting platform operated by Namecheap are located in the US. As such, your personal information may potentially be accessible to law enforcement and national security authorities of another jurisdiction. If you would like further information about our policies and practices regarding service providers located outside of your jurisdiction and further information about how these service providers, collect, use, disclose or store personal information, please contact our Privacy Team using the contact details in the “Contact Us” section below.
 By providing your personal information to us, you consent to our disclosure of this information to our affiliates, charitable partners, sponsors, service providers, and other third parties as described in this Privacy Policy, including those that may be located outside of your jurisdiction, for the purpose of processing your order or donation, marketing to you, providing services to us or to you, to facilitate our operations and for the other purposes of described in this Privacy Policy.

Sensitive Information
: Unless we request it, we ask that you not send us, and you not disclose, any sensitive personal information (e.g., social security numbers, social insurance numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Website or otherwise to us.

: “Other Information” is information that does not reveal your specific identity or does not directly relate to an identifiable individual. We and our third-party service providers may collect Other Information, such as:
 Browser and Device Information: Browser and device information, such as your IP address, device domain used to access our Website, the operating system on your device, your device settings, application IDs, the type and version of your browser, serve log files, crash data, and other unique device identifiers.

 Cookies and Other Tracking Technologies: This information includes, but is not limited to, information that is collected through cookies, pixel tags and other technologies, such as web beacons.

 Information about how you use the Website: This information includes, but is not limited to, the website you came from to access our Website, the page of our Website you entered and exited at, any page within our Website that is viewed by your IP address.

How We Collect Other Information
: We and our service providers collect Other Information in a variety of ways, including:
 Through your browser or your device: Certain information is collected by most browsers, such as your Media Access Control (MAC) address, device type (Windows or Mac), screen resolution, operating system version, Internet browser type and version and the type and version of a Website that you are using. We use this information to ensure that the Website functions properly.

 Through server log files: An Internet Protocol (IP) address is a number that is automatically assigned to your device from which you are accessing a Website by your Internet Service Provider and is identified and logged automatically in our server log files whenever you visit the Website, along with the time of the visit and the activity on the Website. We and our service providers use IP addresses for purposes such as calculating Website usage levels, helping diagnose server problems, administering the Website and determining your approximate geographic location.

 Using cookies: We and our service providers may use cookies, pixel tags, web beacons, and other similar technologies to, among other things, better serve you with more tailored information, facilitate your ongoing access to and use of the Website, and collect and store information about your use of the Website. For example, pixel tags and web beacons may be used to, among other things, track the actions of the Website’s users, measure the success of marketing campaigns and compile statistics about the Website’s usage and response rates. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to decline the use of cookies. To learn more about cookies, please visit If you choose to decline cookies, then some or all of the features, functionality and promotions available through the Website may not be available to you.
 Google Analytics: Google Analytics uses cookies and similar technologies to collect and analyze information about use of the Website and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices by going to, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at Our Website does not currently respond to browser-based do-not-track signals.
 Information about how you interact on the Website: We may collect information about how you interact on the Website. For example, some Website may utilize analytic tools to help us better serve you through improved services and revisions to the Website. This information may let us know which services and features you are using the most within the Website, as well as device type and hardware features, country and language of download, etc.

Collection, Uses and Disclosures of Other Information
: To the extent that any of the Other Information constitutes personal information in your jurisdiction, it will be treated in accordance with the purposes for our collection, use and disclosure of personal information as well as the personal information handling practices outlined in this Privacy Policy. Otherwise, we may use and disclose Other Information for any purpose, except where we are required not to do so under applicable law. We may also combine Other Information with personal information. If we do, we will treat the combined information as personal information as long as it is combined.

: It is important to us that we collect, use or disclose your personal information where we have your consent to do so. Depending on the sensitivity of the personal information, your consent may be implied, deemed (using an opt-out mechanism) or express. We may collect, use or disclose your personal information without your knowledge or consent where we are permitted or required to do so by applicable law or regulatory requirements.
 Typically, we will seek your consent at the time that we collect your personal information. In certain circumstances, your consent may be obtained after collection but prior to our use or disclosure of your personal information. If we plan to use or disclose your personal information for a purpose not previously identified (either in this Privacy Policy or separately), we will endeavour to advise you of that purpose before such use or disclosure.
 You may change or withdraw your consent at any time, subject to legal or contractual obligations and reasonable notice, by contacting our Privacy Team using the contact information set out in the “Contact Us” section below. All communications with respect to such withdrawal or variation of consent should be in writing and addressed to our Privacy Team. If you withdraw or vary your consent, we may not be able to provide you with the communications and/or services you request through our Website. For example, if you would like to receive our newsletter, but are not willing to provide your email address, we will not be able to fulfil your request.
 Unless you advise us otherwise, through the access and use of our Website, services and communications, you have consented to the collection, use and disclosure of your personal information as explained in this Privacy Policy.

SECURITY: We seek to use reasonable physical, technical and administrative measures to protect personal information under our control. These safeguards are designed to prevent your personal information from loss and unauthorised access, collection, use, disclosure, copying, modification, disposal or destruction. Unfortunately, no data transmission over the Internet or data security system can be guaranteed to be 100% secure.
 The security of your personal information is important to us. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contact Us” section below.

CHILDREN: The Website is not directed to children and we do not knowingly collect, use or disclose personal information from children through the Website, except where in compliance with applicable laws.

: Your personal information may be stored and processed in any country where we have facilities or in which we engage service providers and, by using the Website, you understand that you are transferring your information to countries outside of your country of residence, which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security agencies in those other countries may be entitled to access your personal information.

 If you have any questions regarding the storage of your personal information, please contact our Privacy Team using the information included in the “Contact Us” section below.

 You can ask to access the personal information that we have received from or possess about you. If you want to review, verify or correct your personal information, please contact our Privacy Team. Please note that any such communication must be in writing.
 When requesting access to your personal information, please note that we may request specific information from you to enable us to confirm your identity and right to access, as well as to search for and provide you with the personal information that we hold about you. We may charge you a fee to access your personal information; however, we will advise you of any fee in advance. If you require assistance in preparing your request, please contact our Privacy Team.
 Your right to access the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide some or all of the personal information that we hold about you. In addition, the personal information may have been destroyed, erased or made anonymous in accordance with our record retention obligations and practices. In the event that we cannot provide you with access to your personal information, we will endeavour to inform you of the reasons why, subject to any legal or regulatory restrictions.

: We give you choices regarding our use and disclosure of your personal information for marketing purposes. If required under the laws for your jurisdiction, you will be provided with an opportunity to opt-in to receiving news, updates, marketing and promotional communications from BMF and its partners. You may opt of receiving news, updates, marketing and promotional communications from us and/or our partners at any time.
 You may also opt-out from:
 Receiving push notifications from us – if you do not want to receive push notifications from us, you may opt out using your device settings.
 Our sharing of your personal information with third parties for their marketing purposes – if you prefer that we not share your personal information on a going-forward basis with third parties for their marketing purposes, you may opt-out from such sharing by emailing us at
 We will try to comply with your request(s) as soon as reasonably practicable, and in all cases, within the time period prescribed under applicable laws. Please note that, if you opt-out from receiving marketing-related messages from us, we may still send administrative messages to you.

How you can access, change or delete your Personal information
: If you would like to request to review, correct, update, suppress, restrict or delete personal information that you have previously provided to us, object to the collection, use, disclosure or other processing of your personal information, or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may contact our Privacy Team using the information included in the “Contact Us” section below. We will respond to your request consistent with applicable laws.
 In your request, please make clear what personal information you would like to have changed or removed, or whether you would like to have your personal information suppressed from our database. For your protection, we may only implement requests with respect to the personal information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.

: We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include, but are not limited to: (1) the length of time we have an ongoing relationship with you and provide the Website to you (for example, for as long as you have an account with us or keep using the Website, as applicable); and (2) whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them).

: Any interpretation associated with this Privacy Policy will be made by our Privacy Team. This Privacy Policy includes examples but is not intended to be restricted in its application to such examples; therefore, where the word “including” is used, it shall mean “including without limitation”.
 This Privacy Policy does not create or confer upon any individual any rights, or impose upon SMF any rights or obligations outside of, or in addition to, any rights or obligations imposed by applicable laws. Should there be, in a specific case, any inconsistency between this Privacy Policy and applicable laws, this Privacy Policy shall be interpreted, in respect of that case, to give effect to, and comply with, such privacy laws.

: You may lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available
 For the purposes of the EU’s General Data Protection Regulation (“GDPR”) The Bobby Mill Foundation are data controller(s). This section of the privacy policy includes information that is specific to how we process the personal data of supporters and donors that are based in the UK and EU.
 Our Legal basis for Using Data: Data controllers need a lawful basis to collect and use your personal data under EU data protection law. The law allows for six ways to process personal data (and additional ways for sensitive personal data). Three of these are relevant to the types of processing that the BMF carries out. This includes information that is processed on the basis of:
 A person’s consent;
 Processing that is necessary for compliance with a legal obligation, such as processing a donation; and
 BMF’s legitimate interests.
 Personal data may be legally collected and used if it is necessary for a legitimate interest of the organisation using the data, as long as that interest is not overridden by the privacy rights of the individual whose data is being used. BMF’s legitimate interests include the legitimate interests that are outlined in the section entitled “Why We Collect Personal information” above.  
 If you would like to change our use of your personal data in this manner, please get in touch with us using the details in the “Contact Us” section below.
 How Long We Retain Data: We will keep your personal data for no longer than is necessary for the purposes for which it is processed, in accordance with our internal policies. The length of time that data will be kept may depend on the reasons for which we are processing the data and on the applicable laws or regulations that the information falls under such as financial regulations, statutory limitation periods or any contractual obligation we might have.
 If you request to receive no further contact from us, we will keep some basic information about you on our suppression list in order to avoid sending you unwanted materials in the future.
 Transfers Outside of the EEA As BMF is based in the United Kingdom any personal data that you provide to us via the Website will be transferred to and held in the UK. Data transfers that are made from the EEA to BMF in the UK will be conducted securely and in accordance with applicable laws.

 Your Rights: You have a number of rights under EU data protection legislation. These include:
 Right of Access: You have the right know what information we hold about you and to ask, in writing, to see your records. We will supply any information you ask for that we hold about you as soon as possible, but this may take up to 30 days. We will not charge you for this. You will be asked for proof of identity as the person dealing with your request may not be the staff member you have met before. We need to be sure we are only releasing your personal data to you. This is called a data subject access and can be done by writing to us using the “Contact Us” details.
 Right to be Informed: You have the right to be informed how your personal data will be used. This policy as well as any additional information or notice that is provided to you either at the time you provided your details, or otherwise, is intended to provide you with this information.
 Right to Withdraw Consent: Where we process your data on the basis of your consent (for example, to send you marketing emails) you can withdraw that consent at any time. To do this, or to discuss this right further with us, please contact us using the details in the “Contact Us” section below.
 Right to Object: You also have a right to object to us processing data where we are relying on it being within our legitimate interests to do so (for example, to send you direct marketing by post). To do this, or to discuss this right further with us, please contact us using the details in the “Contact Us” section below.
 Right to Restrict Processing: In certain situations, you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
 Right of Erasure: In some cases, you have the right to be forgotten (i.e. to have your personal data deleted from our database). Where you have requested that we do not send you marketing materials we will need to keep some limited information in order to ensure that you are not contacted in the future.
 Right of Rectification: If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated. To update your records please get in touch with us using the details in the “Contact Us” section below.
 Right to Data Portability: Where we are processing your personal data because you have given us your consent to do so, you have the right to request that the data is transferred from one service provider to another.
 Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing of your personal information which produces legal or similarly significant effects on you, unless such a decision (a) is necessary to enter into/perform a contract between you and us/another organisation, (b) is authorised by EU or Member State law to which the BMF is subject (as long as that law offers you sufficient protection); or (c) is based on your explicit consent.
 If you would like to exercise any of these rights, please get in touch with us using the details in the “Contact Us” section below. If you are unhappy with the way in which we have handled your personal data, please contact us using the details below. You are also entitled to make a complaint to the data protection regulator within your EU member state, for example, the Information Commissioner’s Office in the UK.

: If you have any questions about this Privacy Policy or concerns about how we manage your personal information, please contact our Privacy Team by telephone, in writing or by e-mail. We will endeavour to answer your questions and advise you of any steps taken to address the issues raised by you.
 If you have any questions about this Privacy Policy or concerns about how we manage your personal information, please contact our Privacy Team by telephone, in writing or by e-mail. We will endeavour to answer your questions and advise you of any steps taken to address the issues raised by you.