Brief:
with the deadline for GDPR (25th May 2018) looming, Action for Children needed a Privacy Policy that covered all bases, in terms of how they handle the personal information of public audiences (supporters, donors, fundraisers, volunteers, campaigners, service users), and the rights of the individuals whose information is kept.
Research was undertaken on the general GDPR guidelines, ICO policies, and how other charities were rolling out GDPR notifications and policies.
The full Privacy Policy was researched and written across two months, with the input of several senior stakeholders, including the Managing Director, Fundraising Director, Director of Comms, Director of Policy, and Head of Insight and CRM.