1. Data Controller

FEMYSO Foundation
[ADDRESS TO BE ADDED]
United Kingdom
Email: privacy@femysofoundation.org
Phone: +44 20 1234 5678

TODO: Add complete contact details and legal entity information.

2. What We Collect

We collect the following types of personal information:

• Contact Information: Name, email address, phone number, organization
• Application Data: Grant application details, project information
• Communication Records: Messages sent through our contact forms
• Technical Data: IP addresses, browser information, cookies

TODO: Complete list of all data collected across the website and services.

3. Lawful Bases for Processing

We process personal data under the following lawful bases:

• Consent: When you provide explicit consent (forms, communications)
• Legitimate Interests: For our charitable activities and communications
• Legal Obligation: To comply with charity law and regulations

TODO: Detailed mapping of processing activities to lawful bases.

4. Data Retention

We retain personal data for the following periods:

• Contact Form Data: 3 years from submission
• Grant Applications: 7 years for successful applications, 2 years for unsuccessful
• Communications: As long as necessary for ongoing relationships
• Financial Records: 7 years as required by UK law

TODO: Review retention periods with legal counsel and charity requirements.

5. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (subject to charity record-keeping requirements)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

To exercise these rights, contact us at privacy@femysofoundation.org.

TODO: Add specific procedures for handling rights requests.

6. Contact Information

For privacy-related questions or to exercise your rights:
Email: privacy@femysofoundation.org
Address: [TO BE ADDED]

TODO: Add Data Protection Officer details if applicable.

7. Cookies

We use essential cookies for website functionality and analytics cookies to improve our services. You can control cookie preferences in your browser settings.

TODO: Add comprehensive cookie policy with specific cookie details.

8. Third-Party Processors

We work with the following third-party processors:

• Email Services: [TO BE SPECIFIED]
• Analytics: Google Analytics (if used)
• Hosting: [TO BE SPECIFIED]
• Payment Processing: [TO BE SPECIFIED]

TODO: List all third-party processors with their roles and safeguards.

9. International Data Transfers

We may transfer data to third countries with adequate protection or appropriate safeguards. Details of specific transfers are available on request.

TODO: Specify any international transfers and their safeguards.

10. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113

11. Transparency Statement

As a registered charity, we are committed to transparency. Our annual reports and financial statements are available at [CHARITY COMMISSION LINK TO BE ADDED].

TODO: Add links to charity commission records and annual reports.

12. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated through our website and, where appropriate, by email.

13. Terms of Use

TODO: Add terms of use covering website usage, intellectual property, disclaimers, and limitation of liability.