Legal
Privacy Policy
Last updated: September 2026
Impact, Learning and Advancement Foundation (ILA Foundation, we, us, our) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
Who we are
ILA Foundation is a charitable incorporated organisation registered in England and Wales (charity number 1215582). Our registered address is available on request. We are the data controller for personal data collected through this website and our services. You can contact us at info@ila-foundation.org.uk.
What data we collect
We may collect the following categories of personal data: your name and email address when you submit an enquiry or contact form; information you voluntarily provide about your studies (university, year of study, expected completion date) or professional background (job title, years of experience, skillsets) when relevant to your enquiry; payment information processed securely by Stripe when you make a donation (we do not store card details ourselves); and technical data such as IP address, browser type and pages visited, collected automatically via server logs and analytics.
Lawful basis for processing
We process your personal data on the following lawful bases: Legitimate interests to respond to your enquiry and administer our charitable activities; Contract to process donations and issue confirmations; Consent where you have explicitly agreed, for example to receive updates from us; Legal obligation where we are required to retain records for accounting or regulatory purposes.
How we use your data
We use your personal data to respond to enquiries and support requests; to process donations and send payment confirmations; to match students with mentors, coaches or other support; to improve our website and services; and to comply with our legal and regulatory obligations as a registered charity. We do not sell, rent or trade your personal data to third parties.
Third parties and data processors
We share data only with trusted processors who act on our behalf: Stripe (payment processing, see stripe.com/gb/privacy); GoDaddy (website hosting and contact form infrastructure); and analytics providers where applicable. All processors are contractually bound to handle your data securely and only for the purposes we specify.
How long we keep your data
We retain enquiry and contact data for up to two years from the date of last contact, unless a longer period is required by law. Donation records are retained for seven years in accordance with HMRC requirements. You may request deletion at any time (see Your Rights below).
Your rights
Under UK GDPR you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data where there is no lawful reason to retain it; object to or restrict processing; and data portability. To exercise any of these rights, please contact us at info@ila-foundation.org.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@ila-foundation.org.uk.