Privacy Policy
Last updated: 18 September 2026
This Privacy Policy explains how Voltaire Philanthropy Ltd collects, uses, and protects personal data.
We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), as amended by the Data (Use and Access) Act 2025, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
Voltaire Philanthropy Ltd ("Voltaire", "we", "us", "our") is the data controller for personal data we collect when you visit our website or use our services. We trade as Voltaire and Voltaire Philanthropy.
Registered office: 71-75 Shelton Street, London WC2H 9JQ
Company number: 16504225
ICO registration: ZB923843 (26 June 2025 to 25 June 2027)
This policy covers personal data we collect from individuals directly, and personal data we receive from organisations, in the course of philanthropic advisory and related services.
2. The data we collect
Personal information
We may collect and process:
- Name, job title, and contact details
- Professional background and organisation information
- Details relevant to philanthropic planning, giving preferences, or engagement history
- Communication records, meeting notes, and feedback
Technical information
- IP address, browser type, device identifiers, pages visited, and time on page
- Cookies and similar technologies, as set out in our Cookies Notice
Special category data
We do not ask for special category data as a condition of using our website or services. You may choose to disclose sensitive information, for example religious or philosophical beliefs connected to causes you support. If that happens, we process it only where we have a valid Article 9 condition, usually your explicit consent. We apply additional safeguards to any such data.
Data about other people
If you give us personal data about other people (for example trustees, family members, or beneficiaries), you must have a lawful basis for doing so and those people should know how their data may be used.
3. How we collect data
We collect personal data:
- Directly from you, including through contact forms, meetings, and service instructions
- From your organisation or advisers, where they are authorised to share it
- From publicly available sources and trusted due diligence providers
- Automatically, through cookies and analytics tools on our website
4. How we use personal data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Provide philanthropic advisory and related administrative services | Contract (Article 6(1)(b)), or steps you ask us to take before a contract |
| Manage the client relationship and keep engagement records | Contract; legitimate interests in running and documenting the engagement |
| Due diligence, risk, and compliance checks | Legitimate interests; legal obligation where the law requires the check |
| Website operation, security, and troubleshooting | Legitimate interests in a secure, working site |
| Analytics to understand how the site is used | Consent, where required |
| Newsletters, insights, and event invitations | Consent, or another PECR-permitted ground where it applies |
| Respond to enquiries, complaints, and rights requests | Legal obligation; legitimate interests in handling correspondence fairly |
| Establish, exercise, or defend legal claims | Legitimate interests; legal obligation where relevant |
Where we rely on legitimate interests, we consider whether the processing is necessary and whether it would be unexpected or unduly intrusive.
5. Marketing preferences
We only send newsletters or similar updates where the law allows. You can withdraw consent or opt out at any time by using the unsubscribe link or emailing privacy@voltairephilanthropy.co.uk. Opting out does not stop service-related messages we need to send you.
6. Sharing your data
We may share personal data with:
- Trusted service providers, such as hosting, email, CRM, analytics, and IT support
- Professional advisers and consultants working on your matter
- Donor-advised fund sponsors, charities, or corporate partners, at your request
- Identity verification or compliance partners, where required
- Regulators, law enforcement, or courts, where the law requires it
We do not sell personal data.
7. International transfers
If personal data is transferred outside the UK, we put appropriate safeguards in place. These may include:
- A UK adequacy decision
- The UK International Data Transfer Agreement (IDTA), or the Addendum to the EU Standard Contractual Clauses
- Other lawful transfer tools permitted under UK GDPR
We keep records of those transfers.
8. Retention
We keep personal data only for as long as we need it for the purposes in this policy, unless a longer period is required by law.
| Data type | Typical retention period |
|---|---|
| Client files and compliance records | 7 years from the end of the engagement |
| Marketing and prospect records | 2 years from the last meaningful interaction, or until you opt out |
| Cookie and analytics data | According to your browser settings or consent preferences |
We may keep data for longer if we need it to establish, exercise, or defend legal claims.
9. Security
We use technical and organisational measures appropriate to the risk, including:
- Role-based access controls
- Encryption in transit and, where appropriate, at rest
- Secure system configuration
- Periodic security reviews and testing
No method of transmission or storage is completely secure. We review and improve our controls over time.
10. Cookies
Our website uses:
- Essential cookies, needed for the site to work
- Analytics cookies, used with your consent where the law requires it
You can change your choices through the cookie banner or your browser settings. See our Cookies Notice for detail.
11. Controller and processor roles
We act as a data controller when we decide why and how personal data is processed, including in most advisory engagements and for our own website and marketing.
We may act as a processor when we handle personal data only on a client's documented instructions. In those cases we put appropriate processing terms and safeguards in place.
12. Children
Our website and services are not intended for children. We do not knowingly collect personal data from anyone under 16.
13. Your rights
Under UK data protection law you can:
- Access your personal data and obtain a copy
- Correct inaccurate or incomplete data
- Ask us to erase data in certain circumstances
- Restrict or object to certain processing
- Receive data you provided to us in a portable format, where that right applies
- Withdraw consent at any time, where we rely on consent
- Complain to us about how we use your personal data
- Complain to the Information Commissioner's Office (ICO)
To exercise your rights, email privacy@voltairephilanthropy.co.uk. We may need to confirm your identity before we act.
We will respond to rights requests within the time allowed by law. The time usually starts when we have enough information to identify you and understand the request.
14. Complaints about our use of personal data
If you are unhappy with how we have used your personal data, email privacy@voltairephilanthropy.co.uk with the subject line "Data Protection Complaint". That email is our electronic complaints channel.
We will acknowledge your complaint within 30 days and respond without undue delay.
You can also complain to the ICO:
- ico.org.uk
- 0303 123 1113
15. Third-party links
Our website may include links to other sites. Those sites have their own privacy policies. We are not responsible for their content or their data practices.
16. Changes to this policy
We may update this Privacy Policy from time to time. We will publish changes on this page with a new date. If a change is material, we will email active clients.
17. Contact us
Email: privacy@voltairephilanthropy.co.uk
Address: Voltaire Philanthropy Ltd, 71-75 Shelton Street, London WC2H 9JQ
ICO registration: ZB923843
If you have questions about how we handle personal data, use the details above.
