Charities should, as a matter of good practice, have a policy that outlines the way they collect, store and use people’s information and data. Such a policy will determine the approach that a charity takes to managing information and data, guide the practices of its staff and volunteers, and provide assurances to its donors, supporters and members. It is good practice for a charity to have this freely available on its website.

For tips on creating a privacy policy for your charity, see our guide for charities on Managing peoples information and data.