Privacy notice
Efficient Fundraising Collective Ltd
Effective date: November 4, 2026
Who we are
Efficient Fundraising Collective Ltd (“EFC”, “we”, “us”) is a fundraising operations and strategy consultancy. We are registered in England and Wales, company number 13994262, at Unit 4, The Cottages, Deva Centre, Trinity Way, Manchester M3 7BE. We are registered with the Information Commissioner’s Office (ICO), registration number ZB572355.
Alex Hyde-Parker and Paul Weighand, our Directors, are responsible for data protection.
For anything about this notice or your personal data, email privacy@efficient-fundraising.org or write to us at the address above. We are not required to appoint a Data Protection Officer and have not done so.
Who this notice covers
This notice explains how we use personal data when we decide how and why it is used. That includes people who:
-
work for our clients or prospective clients
-
contact us or use our website
-
work with us as associates, suppliers or partners
If you are a supporter, donor or contact of one of our clients
We may process your data while delivering a project for that organisation, such as a CRM review, a reporting build, data analysis, predictive modelling or prospect research. When we do, we act only on the organisation’s instructions under a written agreement, and their privacy notice applies. Please contact that organisation about your data. If you contact us instead, we will pass your request to them promptly.
What we collect and where it comes from
-
Contact and role details: name, job title, organisation, work email, phone number and address.
-
Relationship records: meetings, emails, calls, proposals, and the services we have discussed or delivered.
-
Billing and contract details: contracts, invoices, purchase orders and payment records.
-
Associate details: contact details, bank details for payment, contracts and work records.
-
Website data: what you send us through our contact form, and cookie data where you allow it.
Most of this comes from you, by email, phone, Teams, Zoom, in person or through our website. For prospective clients, we also collect work contact details from public sources: organisation websites, LinkedIn, the Charity Commission register, Companies House and sector directories.
Why we use it and our lawful basis
Delivering our services, managing projects and communicating with client contacts – contract, or legitimate interests where the contract is with your employer.
Invoicing, accounting, VAT and tax records – legal obligation.
Contacting people at prospective client organisations about services relevant to their role – legitimate interests (developing our business). Every message tells you how to opt out, and you can object at any time.
Engaging and paying associates – contract and legal obligation.
Responding to enquiries – legitimate interests.
Running our website securely and, with consent, understanding how it is used – legitimate interests; consent for non-essential cookies.
Meeting legal, regulatory and insurance requirements – legal obligation.
We do not send newsletters or marketing mailings. We do not sell personal data, and we do not make decisions about people using automated means.
Who we share it with
We share personal data only where needed, with:
-
our associates, who deliver projects with us under written data protection and confidentiality terms
-
service providers who process data for us: Microsoft (email, Teams, SharePoint and Power BI), Beacon CRM (our client records, proposals and financial transactions) and Wix (our website)
-
professional advisers, such as our accountants, lawyers and insurers
-
HMRC and other authorities where the law requires it
International transfers
Some of our service providers may process data outside the UK, including in the European Economic Area and the United States. Where they do, we rely on UK adequacy regulations (including the UK-US Data Bridge for certified US companies) or the ICO’s International Data Transfer Agreement or Addendum.
How long we keep it
Why we use it and our lawful basis
Delivering our services, managing projects and communicating with client contacts – contract, or legitimate interests where the contract is with your employer.
Invoicing, accounting, VAT and tax records – legal obligation.
Contacting people at prospective client organisations about services relevant to their role – legitimate interests (developing our business). Every message tells you how to opt out, and you can object at any time.
Engaging and paying associates – contract and legal obligation.
Responding to enquiries – legitimate interests.
Running our website securely and, with consent, understanding how it is used – legitimate interests; consent for non-essential cookies.
Meeting legal, regulatory and insurance requirements – legal obligation.
Keeping it secure
EFC holds Cyber Essentials Plus certification, which includes an independent technical audit of our systems.
We use multi-factor authentication and encryption, and access to client project data is limited to the people working on that project.
Your rights
You have the right to:
-
ask for a copy of your personal data
-
have inaccurate data corrected
-
have your data deleted
-
restrict how we use it
-
object to our use of it, including an absolute right to stop direct marketing
-
receive data you gave us in a reusable format, where we rely on contract or consent
-
withdraw consent at any time, where we rely on it
To use any of these rights, email info@efficient-fundraising.org. We will respond within one month, and may ask you to confirm your identity first.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first at privacy@efficient-fundraising.org. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome.
You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Cookies
Our website runs on Wix. It uses cookies that are needed for the site to work. With your consent, it also uses cookies that help us understand how visitors use the site. You can change your choice at any time through the cookie banner.
Changes to this notice
This version took effect on 4 November 2026 and replaces our privacy policy of 6 April 2022.
We review this notice at least once a year.
