Skip to main content

Privacy Policy

Last updated: 18 September 2026

This Privacy Policy explains how Voltaire Philanthropy Ltd collects, uses, and protects personal data.

We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), as amended by the Data (Use and Access) Act 2025, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Voltaire Philanthropy Ltd ("Voltaire", "we", "us", "our") is the data controller for personal data we collect when you visit our website or use our services. We trade as Voltaire and Voltaire Philanthropy.

Registered office: 71-75 Shelton Street, London WC2H 9JQ
Company number: 16504225
ICO registration: ZB923843 (26 June 2025 to 25 June 2027)

This policy covers personal data we collect from individuals directly, and personal data we receive from organisations, in the course of philanthropic advisory and related services.

2. The data we collect

Personal information

We may collect and process:

  • Name, job title, and contact details
  • Professional background and organisation information
  • Details relevant to philanthropic planning, giving preferences, or engagement history
  • Communication records, meeting notes, and feedback

Technical information

  • IP address, browser type, device identifiers, pages visited, and time on page
  • Cookies and similar technologies, as set out in our Cookies Notice

Special category data

We do not ask for special category data as a condition of using our website or services. You may choose to disclose sensitive information, for example religious or philosophical beliefs connected to causes you support. If that happens, we process it only where we have a valid Article 9 condition, usually your explicit consent. We apply additional safeguards to any such data.

Data about other people

If you give us personal data about other people (for example trustees, family members, or beneficiaries), you must have a lawful basis for doing so and those people should know how their data may be used.

3. How we collect data

We collect personal data:

  • Directly from you, including through contact forms, meetings, and service instructions
  • From your organisation or advisers, where they are authorised to share it
  • From publicly available sources and trusted due diligence providers
  • Automatically, through cookies and analytics tools on our website

4. How we use personal data and our lawful bases

PurposeLawful basis
Provide philanthropic advisory and related administrative servicesContract (Article 6(1)(b)), or steps you ask us to take before a contract
Manage the client relationship and keep engagement recordsContract; legitimate interests in running and documenting the engagement
Due diligence, risk, and compliance checksLegitimate interests; legal obligation where the law requires the check
Website operation, security, and troubleshootingLegitimate interests in a secure, working site
Analytics to understand how the site is usedConsent, where required
Newsletters, insights, and event invitationsConsent, or another PECR-permitted ground where it applies
Respond to enquiries, complaints, and rights requestsLegal obligation; legitimate interests in handling correspondence fairly
Establish, exercise, or defend legal claimsLegitimate interests; legal obligation where relevant

Where we rely on legitimate interests, we consider whether the processing is necessary and whether it would be unexpected or unduly intrusive.

5. Marketing preferences

We only send newsletters or similar updates where the law allows. You can withdraw consent or opt out at any time by using the unsubscribe link or emailing privacy@voltairephilanthropy.co.uk. Opting out does not stop service-related messages we need to send you.

6. Sharing your data

We may share personal data with:

  • Trusted service providers, such as hosting, email, CRM, analytics, and IT support
  • Professional advisers and consultants working on your matter
  • Donor-advised fund sponsors, charities, or corporate partners, at your request
  • Identity verification or compliance partners, where required
  • Regulators, law enforcement, or courts, where the law requires it

We do not sell personal data.

7. International transfers

If personal data is transferred outside the UK, we put appropriate safeguards in place. These may include:

  • A UK adequacy decision
  • The UK International Data Transfer Agreement (IDTA), or the Addendum to the EU Standard Contractual Clauses
  • Other lawful transfer tools permitted under UK GDPR

We keep records of those transfers.

8. Retention

We keep personal data only for as long as we need it for the purposes in this policy, unless a longer period is required by law.

Data typeTypical retention period
Client files and compliance records7 years from the end of the engagement
Marketing and prospect records2 years from the last meaningful interaction, or until you opt out
Cookie and analytics dataAccording to your browser settings or consent preferences

We may keep data for longer if we need it to establish, exercise, or defend legal claims.

9. Security

We use technical and organisational measures appropriate to the risk, including:

  • Role-based access controls
  • Encryption in transit and, where appropriate, at rest
  • Secure system configuration
  • Periodic security reviews and testing

No method of transmission or storage is completely secure. We review and improve our controls over time.

10. Cookies

Our website uses:

  • Essential cookies, needed for the site to work
  • Analytics cookies, used with your consent where the law requires it

You can change your choices through the cookie banner or your browser settings. See our Cookies Notice for detail.

11. Controller and processor roles

We act as a data controller when we decide why and how personal data is processed, including in most advisory engagements and for our own website and marketing.

We may act as a processor when we handle personal data only on a client's documented instructions. In those cases we put appropriate processing terms and safeguards in place.

12. Children

Our website and services are not intended for children. We do not knowingly collect personal data from anyone under 16.

13. Your rights

Under UK data protection law you can:

  • Access your personal data and obtain a copy
  • Correct inaccurate or incomplete data
  • Ask us to erase data in certain circumstances
  • Restrict or object to certain processing
  • Receive data you provided to us in a portable format, where that right applies
  • Withdraw consent at any time, where we rely on consent
  • Complain to us about how we use your personal data
  • Complain to the Information Commissioner's Office (ICO)

To exercise your rights, email privacy@voltairephilanthropy.co.uk. We may need to confirm your identity before we act.

We will respond to rights requests within the time allowed by law. The time usually starts when we have enough information to identify you and understand the request.

14. Complaints about our use of personal data

If you are unhappy with how we have used your personal data, email privacy@voltairephilanthropy.co.uk with the subject line "Data Protection Complaint". That email is our electronic complaints channel.

We will acknowledge your complaint within 30 days and respond without undue delay.

You can also complain to the ICO:

  • ico.org.uk
  • 0303 123 1113

15. Third-party links

Our website may include links to other sites. Those sites have their own privacy policies. We are not responsible for their content or their data practices.

16. Changes to this policy

We may update this Privacy Policy from time to time. We will publish changes on this page with a new date. If a change is material, we will email active clients.

17. Contact us

Email: privacy@voltairephilanthropy.co.uk
Address: Voltaire Philanthropy Ltd, 71-75 Shelton Street, London WC2H 9JQ
ICO registration: ZB923843

If you have questions about how we handle personal data, use the details above.