Privacy Policy

Last updated: 4 March 2026

1. Introduction

UK-China Transparency is committed to protecting the privacy, dignity, and security of everyone who interacts with it. As a UK based human rights and transparency charity, we recognise the particular importance of safeguarding personal information – especially where individuals may face risks due to their work, identity, or circumstances.

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other applicable laws.

2. Who We Are

Name: UK-China Transparency
Charity number: 1021902
Registered address: 110 Sotheby Road, London
Contact email for privacy matters: info@ukctransparency.org

We are the “data controller” for the purposes of data protection law.

3. What Personal Data We Collect

We collect and process different types of personal data depending on how you engage with us. This may include:

3.1 Information you provide directly

• Contact details (name, email address, phone number, postal address)
• Donation information (amount, Gift Aid status, payment method)
• Communications with us (emails, event registrations, enquiries)
• Professional details (organisation, role, areas of expertise)
• Consent preferences

3.2 Sensitive or high risk information

In the course of our work, we may receive information that is particularly sensitive, such as:

• Political opinions
• Information relating to human rights abuses
• Testimonies or case details
• Identity information of individuals at risk

We only process such data where strictly necessary, with explicit consent, or under another lawful basis permitted by UK GDPR.

3.3 Automatically collected information

When you visit our website, we may collect:

• IP address
• Browser type and device information
• Pages visited and interaction data
• Cookies (see Section 10)

4. How We Use Personal Data

We use personal data to:

• Communicate with supporters, partners, and stakeholders
• Deliver our research, advocacy, and transparency work
• Manage donations, Gift Aid claims, and financial records
• Organise events, briefings, and campaigns
• Maintain the security and integrity of our systems
• Comply with legal obligations and regulatory requirements

We never sell personal data and never use it for profiling that could put individuals at risk.

5. Our Legal Bases for Processing

We rely on one or more of the following legal bases:

• Consent – when you opt in to receive updates or provide information voluntarily
• Legitimate interests – for activities necessary to pursue our charitable mission, provided they do not override your rights
• Legal obligation – for financial, regulatory, or safeguarding requirements
• Vital interests – where processing is necessary to protect someone’s life or safety
• Public interest – for research and advocacy relating to human rights

6. How We Protect Your Data

Given the nature of our work, we apply enhanced security measures, including:

• Encrypted storage and secure servers
• Strict access controls and role based permissions
• Secure communication channels where appropriate
• Regular security reviews and staff training

Where data is particularly sensitive, we apply additional safeguards and minimise retention.

7. Sharing Your Data

We may share personal data with:

• Trusted service providers (e.g., email platforms, payment processors)
• Regulators such as the Charity Commission or HMRC (e.g., for Gift Aid)
• Partners or collaborators, but only with explicit consent or where legally required

We do not share data with governments, corporations, or third parties in ways that could compromise the safety or privacy of individuals.

If data is transferred outside the UK, we ensure appropriate safeguards are in place.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements.

Sensitive information is retained for the minimum period necessary and securely deleted when no longer required.

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (“the right to be forgotten”)
• Object to or restrict processing
• Withdraw consent at any time
• Request data portability

To exercise any of these rights, contact us at info@ukctransparency.org. We will respond within one month, unless the request is complex.

10. Cookies and Website Analytics

Our website uses cookies to improve functionality and understand how visitors use our site. You can manage or disable cookies through your browser settings. A separate Cookie Policy provides further detail here.

11. Children’s Data

We do not knowingly collect personal data from children under 16 without parental or guardian consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the date of the most recent update clearly shown.

13. Contact Us

If you have questions, concerns, or complaints about how we handle personal data, please contact:

Data Protection Lead
UK-China Transparency
info@ukctransparency.org

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).