Privacy Notice

At Bonnie Clayton Consulting, we’re committed to protecting and respecting your privacy.

This Privacy Notice describes how and why Bonnie Clayton Consulting uses your personal information, how we protect your privacy when doing so and your rights and choices regarding this information. We aim to be clear and transparent when we process your information so you can easily understand what we will do with it.

Who are we?

Bonnie Clayton Consulting is a fundraising consultancy and professional fundraisers, so we use personal information on a day-to-day basis in order to operate. Our use of personal information allows us to make the world a better place, by the facilitation of commercial/fundraising partnerships between corporate partners/funding bodies and our Charity and not for profit Clients.

Records of individuals are kept only where they are the named representative of an organisation or business [corporate subscribers].

We are committed to attaining high standards and so we subscribe to the Institute of Fundraising’s and Association of Fundraising Consultants Codes of Conduct.

Any questions regarding this policy and our privacy practices should be sent by email via our contact page or by writing to us at 17 River View, Enfield, Middlesex EN2 6PX. Alternatively, you can telephone 07970 988636.

This Privacy Notice applies to information we collect when:

  • You visit our website
  • You interact with us on Social Media
  • You enquire about our services
  • You use our services
  • You participate in one of our Client’s events
  • You support or express an interest in supporting one of our Clients
  • You work with us (Job applicants, current and former employees and associates)
  • Undertaking fundraising research, using databases such as the Directory of Social Change Guides to Giving or through information in the public domain
  • Using information passed by independent event organisers or our Clients
  • You make a complaint or query

Visiting our website

Like many companies, we automatically collect the following information:

  • technical information, including the type of device you’re using, the IP address, browser and operating system being used to connect your computer to the internet. This information may be used to improve the services we offer.
  • information about your visit to this website, for example we collect information about pages you visit and how you navigate the website, i.e. length of visits to certain pages, articles you viewed and searched for, referral sources (e.g. how you arrived at our website).

We collect and use your personal information by using cookies on our website. See our Cookie Policy for more information.


The security of your Personal Information is important to us but remember that no method of transmission over the Internet is 100% secure. Whilst we endeavour to protect your Personal Information by using commercially acceptable means, we can not guarantee its absolute security.

Links to other websites

This privacy notice does not cover the links within this site to other websites. We encourage you to read the privacy notices on the other websites you visit.

Social Media

When you interact with us on social media platforms such as LinkedIn and Twitter we may obtain information about you (for example, when you publicly tag us in an event photo). The information we receive will depend on the privacy preferences you have set on those types of platforms.

Public Information

We may supplement information about you with information from publicly available sources such as annual reviews, corporate websites, public social media accounts, the electoral register and Companies House in order to create a fuller understanding of your interests and support. For more information, please see the section on ‘Building Profiles’ below.

What type of information is collected from you?

When you interact with us on behalf of your organisation, the personal information we collect, store and use might include:

  • your name and contact details at the organisation you represent (including the postal address of the organisation you represent, work email address, telephone number, your organisation’s name and your job position);
  • information about your activities on our website and about the device used to access it, for instance your IP address and geographical location;
  • any other personal information shared with us.

We do not usually collect sensitive data about you.

How and why is your information used?

We may use your information for a number of different purposes, which may include:

  • providing you with the services, products or information you asked for;
  • to initiate and complete commercial and fundraising transactions with you, or the entity that you represent;
  • keeping a record of your relationship with us and/or our clients;
  • conducting analysis and market research to better understand how we can improve our services, products or information;
  • to enhance, modify, personalise or otherwise improve our services/

communications for the benefit of our clients;

  • checking for updated contact details against third party sources so we can stay in touch if you move;
  • notifying you of changes to our services;
  • to provide you with information that you have requested or which we think may be relevant to a subject in which you/your organisation has demonstrated an interest. These may include information about our client’s campaigns, fundraising appeals and activities and promotions of goods and services.

What is the legal basis for processing your personal data?

Data protection law requires us to rely on one or more lawful grounds to process your personal information. We consider the following grounds to be relevant:

  • Most of our data is processed because it is necessary for our legitimate interests.
  • We may also process data where we are entering into a contract with you or performing our obligations under it.
  • Where you have provided specific consent to us so that we may use your personal information in a certain way, such as to send you marketing information by email, text and/or telephone.
  • Where it is necessary to comply with a legal or regulatory obligation to which we are subject, for example where we are ordered by a court or regulatory authority like the Charity Commission or Fundraising Regulator.

How long is your information kept for?

We keep your information for no longer than is necessary for the purposes it was collected for. The length of time we retain your personal information for is determined by operational and legal considerations. For example, it is current good practice to keep financial records for a minimum period of 7 years to support HMRC audits.

In general, we will endeavour to keep data only for as long as we need it. This means that we may delete it when it is no longer needed.

We review our retention periods on a regular basis.

Who has access to your information?

We are asked by client charities/not for profit organisations to identify or research organisations who may be interested in donating to, supporting or working in partnership with our clients. In this regard, we act as a data processor and we may also use sub-contractors to deliver this work. This typically involves identifying the person/persons responsible for Corporate Social Responsibility/sponsorship/marketing in an organisation by reviewing publicly available information (i.e. put into the public domain) and producing a report. It is not sold to other organisations.

We are happy to hear from people who do not wish to be the subject of any research that we undertake, so that they can opt out of any future research. The grounds for processing this data are that it is in our legitimate interest to do so as part of our business relating to fundraising research.

Third Party Service Providers

We work with associates to deliver services to our Charity Clients.

We may also employ other companies and individuals to perform functions on our behalf, to provide us with technical, payment or delivery services, business partners and accountants. These third-party service providers have access to personal information needed to perform their functions but may not use it for other purposes. Further, they must process the personal information in accordance with this Privacy Notice and as permitted by applicable data protection laws.

Transferring your information outside of Europe

Bonnie Clayton Consulting is a UK-domiciled organisation whose primary offices are in the UK.

If we should transfer your information outside of the EEA, we will take steps to ensure that appropriate security measures are taken to ensure that your privacy rights continue to be protected as outlined in this policy.

Marketing Communications


We will only send you marketing communications by email, text and telephone if you have explicitly provided your prior consent. You may opt out of our marketing communications at any time by clicking the unsubscribe link at the end of our marketing emails.


We may send you marketing communications by post unless you have told us that you would prefer not to hear from us.

Your choices

If you do not want to receive direct marketing communications from us then you can select your choices by ticking the relevant boxes situated on the form used to collect your information.

We’re committed to putting you in control of your data so you’re free to change your marketing preferences (including to tell us that you don’t want to be contacted for marketing purposes) at any time using contact page, or by telephone: 07970 988636 or post: 17 River View, Enfield, Middlesex EN2 6PX

We will not use your personal information for marketing purposes if you have indicated that you do not wish to be contacted and will retain your details on a suppression list to help ensure that we do not continue to contact you. However, we may still need to contact you for administrative purposes.

Fundraising Communications

We communicate with Corporate Subscribers on the basis of legitimate interest and have drawn on the whitepaper produced by the Institute of Fundraising and the Fundraising Regulator to create our policies.  A copy of the paper on GDPR and Charitable Fundraising:  Spotlight on corporate fundraising may be downloaded from the Institute of Fundraising website here.

Building Profiles

We may analyse your personal information to create a profile of your interests and preferences so that we can tailor and target our communications in a way that is timely and relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. This allows us to be more focused, efficient and cost effective with our resources and also reduces the risk of someone receiving information they may find inappropriate or irrelevant.

We’re committed to putting you in control of your data so you’re free to opt out of your information being used in this way at any time by contacting us via our contact page

Your Rights

You have the following rights in relation to your personal information:

  • the right to be informed about how your personal information is being used;
  • the right to access the personal information we hold about you;
  • the right to request the correction of inaccurate personal information we hold about you;
  • the right to request the erasure of your personal information in certain limited circumstances;
  • the right to restrict processing of your personal information where certain requirements are met;
  • the right to object to the processing of your personal information;
  • the right to request that we transfer elements of your data either to you or another service provider; and
  • the right to object to certain automated decision-making processes using your personal information.

Whilst this privacy notice sets out a general summary of your legal rights in respect of personal information, this is a very complex area of law. More information about your legal rights can be found on the Information Commissioner’s website at

To exercise any of the above rights, or if you have any questions relating to your rights, please contact us by using the details set out in the “How to contact us” section below.

If you are unhappy with the way we are using your personal information you can also complain to the UK Information Commissioner’s Office. We are here to help and encourage you to contact us to resolve your complaint first.

Keeping your information safe

When you give us personal information, we take steps to ensure that appropriate technical and organisational controls are in place to protect it.

Non-sensitive details (your email address etc.) are transmitted normally over the internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.

We undertake regular reviews of who has access to information that we hold to ensure that your info is only accessible by appropriately trained staff, volunteers and contractors.

Keeping your information up to date

We take reasonable steps to ensure your information is accurate and up to date.

Where possible we use publicly available sources to identify deceased records or whether you have changed address.

We really appreciate it if you let us know when your contact details change.

Disclosure of personal information

In most circumstances, we will not disclose personal data without consent, unless we are relying on our legitimate interest (for example, to carry out fundraising research), or where the law requires it. However, when we investigate a complaint, for example, we may need to share personal information with the organisation concerned and with other relevant bodies.

Changes to this privacy notice

We may update this privacy notice from time to time. When we change this notice in a material way, we will update the version date at the bottom of this page.

ICO Registration

We are registered with the Information Commissioner’s Office and our entry can be found on the ICO’s website.

How to contact us

Any questions regarding this policy and our privacy practices should be sent by email via our contact page or by writing to us at 17 River View, Enfield, Middlesex EN2 6PX. Alternatively, you can telephone 07970 988636.