1. About the Foundation
The Measham Family Christian Foundation is a Charitable Incorporated Organisation (CIO) registered in England and Wales under charity number 1219105. The Foundation operatesunder the working name WellFound.

On 1 November 2026, the CIO took over the charitable activities of its predecessor, theunincorporated Measham Family Christian Foundation (registered charity number 1110434).

The Foundation works alongside communities in Guinea-Bissau and Sierra Leone toimprove access to safe drinking water, sanitation, food security and sustainable livelihoods.

We respect your privacy and are committed to protecting your personal information. Thispolicy explains how we collect, use, share and protect personal information, and your rightsunder UK data protection law.

The Measham Family Christian Foundation is the data controller for the personal informationcovered by this policy, except where another organisation is separately responsible.

You can contact us at:

The Measham Family Christian Foundation (WellFound)
Living Water House
309 Greenford Road
Greenford
UB6 8RE
United Kingdom

Email: contact@wellfound.org.uk
Telephone: +44 (0)20 7998 7376
Website: www.wellfound.org.uk

2. What personal information we collect
We collect personal information where it is reasonably necessary for our charitable activities,communications and administration.

Information you provide to us

Depending on how you interact with the Foundation, this may include:

1. Contact and enquiries: Your name, email address, telephone number and anyinformation you include when contacting us.

2. Newsletter subscriptions: Your name, email address and communicationpreferences.

3. Donations: Your name, contact details, donation amounts and dates, and Gift Aidinformation where applicable. Online payments are processed by Enthuse ratherthan directly through our website.

4. Volunteering and applications: Contact details, relevant experience, CVs,references and other information you choose to provide when enquiring about orapplying for opportunities with us.

5. Correspondence: Records of communications you have with the Foundation.

Information collected automatically

When you visit our website we may collect:

- Information about website visits, including pages viewed, how visitors reach thewebsite and how they interact with it.

- Technical information such as browser type, device information, approximategeographical location, IP addresses and cookie identifiers. Further information aboutwebsite analytics and cookies is provided in Sections 5 and 6.

We do not routinely request sensitive personal information through our website. Where suchinformation is necessary for a specific purpose, we apply appropriate additional safeguards.

3. How we use your personal information
The Foundation uses personal information only for legitimate charitable, administrative andcommunication purposes.

Under UK data protection law, we must have a lawful basis for using personal information.The basis depends on why we need the information.
‍

Where we rely on legitimate interests, these include operating the Foundation effectively,responding to people who contact us, maintaining relationships with supporters, improvingour communications and protecting our systems.

We consider whether these activities are reasonable and proportionate and take account ofthe rights and interests of the people concerned.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect thelawfulness of processing carried out before consent was withdrawn.

We do not sell personal information or use it for unrelated commercial marketing.

4. Donations and Gift Aid
Donations to the Foundation may be made through our website or by other arrangementsagreed directly with us.

Online donations are processed through Enthuse, a specialist charitable fundraisingplatform. Enthuse collects and processes payment information in accordance with its ownprivacy policy.

The Foundation receives and retains information necessary to record donations,acknowledge gifts, maintain appropriate financial records and meet our legal and regulatoryobligations. This may include donors' names, contact details, donation amounts and dates,and any relevant correspondence.

Where donors make a Gift Aid declaration, we collect and retain the information required toclaim Gift Aid from HM Revenue & Customs (HMRC). This information may be shared withHMRC where necessary.

We retain donation and Gift Aid records for the periods required by applicable law andHMRC rules.

Making a donation does not automatically subscribe you to our newsletter. We send our monthly newsletter to people who have subscribed to receive it.

We do not sell donor information or share it with third parties for their own marketing purposes.
‍
5. Newsletters and supporter communications
The Foundation sends a monthly email newsletter to supporters who have subscribed toreceive information about our charitable activities, community projects, achievements andopportunities to support our work.

We use Mailchimp, an email marketing service, to manage our mailing list and distributethese newsletters.

We provide Mailchimp with subscribers' email addresses and any other relevant contact information supplied when subscribing.

We only add people to our newsletter mailing list when they have requested to subscribe.Making a general enquiry does not automatically result in a subscription.

Every newsletter contains an unsubscribe link. Subscribers can stop receiving ourcommunications at any time by following that link or contacting us at contact@wellfound.org.uk.

We retain subscriber information while they remain subscribed. Limited information may beretained after unsubscribing where necessary to ensure their preferences continue to be respected.

6. Website analytics and cookies
Our website uses cookies and similar technologies to help it operate securely and tounderstand how visitors use it.

Cookies are small files stored on your device when you visit a website.

Essential cookies
Some cookies are necessary for the security and operation of our website. These mayinclude cookies used by our website hosting and security providers, including Cloudflare.These cookies do not require your consent where they are strictly necessary for the service.

Google Analytics

We use Google Analytics to understand how visitors use our website and identifyopportunities to improve it.This includes information about:

- The number of visits to our website.
- Which pages and articles are viewed.
- How visitors find our website.
- Approximate geographical location and technical information about devices andbrowsers.
- How visitors interact with the website.

Google Analytics uses cookies and other technologies to collect this information. Theresulting reports help us understand website usage and improve our communications.

We ask for your consent before using optional analytics cookies. You can accept or rejectthese cookies through our cookie preferences controls.

Embedded content

‍Some pages contain videos or other material provided by third parties, including YouTube.

These services may use their own cookies or similar technologies. Where required, we will obtain your consent before enabling non-essential tracking associated with this content.
‍

Your cookie choices
When you visit our website, you can choose whether to accept or reject non-essentialcookies.

Your preferences are remembered, and you can change them at any time using the Cookie Settings link on our website.

You can also manage or delete cookies through your browser settings.

7. Other websites and embedded content
‍Our website contains links to other organisations and services, including fundraising platforms, social media and video providers.

Some pages may include embedded content, such as YouTube videos. These services maycollect information about visitors and use their own cookies or similar technologies. Whererequired, we will obtain your consent before enabling non-essential tracking associated withembedded content.

When you follow a link to an external website, that organisation's own privacy policy will apply to the personal information it collects.

We are not responsible for the privacy practices of external websites and encourage you toreview their policies where appropriate.

8. Who we share personal information with
The Foundation shares personal information with other organisations only where necessaryfor our charitable activities, administration, communications or legal obligations.These may include:
‍
 3TheMind — for website hosting, development, maintenance and the managementof website forms.
‍
 Microsoft 365 — for email, communications and information storage.
‍
 Mailchimp — for managing newsletter subscriptions and distributing our monthly newsletters.
‍
 Enthuse — for processing online donations and providing the Foundation with theinformation needed to record donations and administer Gift Aid.
‍
 Google Analytics and website security providers — for website measurement,security and related services, subject to the applicable privacy and cookie requirements.
‍
 Accountants, independent examiners and professional advisers — whereinformation is needed for accounting, legal, governance or other professionalpurposes.
‍
 HM Revenue & Customs, regulators and other public authorities — where disclosure is required or permitted by law.

We share only the information reasonably necessary for the relevant purpose.

Where organisations process personal information on our behalf, we require appropriate arrangements to protect that information and limit its use to authorised purposes.

Some organisations, including payment providers, may be independently responsible foraspects of their processing and operate under their own privacy policies.

9. International data transfers
Some of the service providers we use may process or store personal information outside theUnited Kingdom.

For example, Mailchimp, which we use to distribute our newsletters, processes subscriberinformation in the United States. Other technology providers may also process informationinternationally.

Where personal information is transferred outside the UK, we take steps to ensure that it isprotected in accordance with UK data protection law. This includes relying on recogniseddata protection arrangements or appropriate contractual safeguards where required.

The Foundation does not routinely share UK donors' or newsletter subscribers' personalcontact information with its teams or partner organisations in Guinea-Bissau or Sierra Leone.

10. How long we keep personal information

‍We keep personal information only for as long as reasonably necessary for the purposes forwhich it was collected, including meeting any legal, financial or regulatory obligations.

The length of time depends on the nature of the information, why we collected it and whether we have a legal or legitimate reason to retain it.For example:

 Donation, accounting and Gift Aid records are retained for the periods required byapplicable law and HMRC.

 Newsletter subscriber information is retained while a person remains subscribed. We may retain limited information after someone unsubscribes to ensure their wishes continue to be respected.

 Enquiries and correspondence are retained for as long as reasonably necessary todeal with the matter and any subsequent follow-up.

 Volunteer and application information is retained only for as long as necessary for the relevant purpose and any associated legal obligations.

When personal information is no longer required, we securely delete it or anonymise it, as appropriate.

11. Keeping personal information secure

‍The Foundation takes reasonable technical and organisational measures to protect personalinformation against unauthorised access, loss, misuse, alteration or inappropriate disclosure.
‍
We restrict access to personal information to those who need it for authorised purposes anduse appropriate security arrangements for the systems and services we operate.
‍
Where third-party service providers handle personal information on our behalf, we seekappropriate assurances about their security and data protection arrangements.

We take suspected personal data breaches seriously and will investigate and respond tothem in accordance with our legal obligations.

Although no system can guarantee absolute security, we endeavour to maintain appropriatesafeguards and review them as necessary.

12. Your data protection rights

‍Under UK data protection law, you have certain rights concerning the personal informationwe hold about you.

Depending on the circumstances, these include the right to:

 Access: Request a copy of the personal information we hold about you.

 Correction: Ask us to correct information that is inaccurate or incomplete.

 Deletion: Ask us to delete your personal information in certain circumstances.

 Restriction: Ask us to limit how we use your information in certain circumstances.

 Objection: Object to certain uses of your personal information, including processingbased on our legitimate interests.

 Data portability: Request a copy of certain information in a format that allows it to betransferred to another organisation.

 Withdraw consent: Where we rely on your consent, withdraw it at any time.

You can ask us to stop sending you marketing communications at any time. Every newsletter includes an unsubscribe link.

These rights are subject to certain conditions and legal exceptions. For example, we may need to retain some information to meet our legal obligations, even if you request its deletion.

To exercise your rights or ask a question about the personal information we hold, pleasecontact us at:

contact@wellfound.org.uk

We will consider and respond to your request in accordance with applicable data protection law.

13. Questions and complaints

‍If you have any questions or concerns about how the Foundation collects, uses or protectsyour personal information, please contact us at:

contact@wellfound.org.uk

We will take your concerns seriously, investigate any complaints and respond in accordancewith our legal obligations.

If you are dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Website: https://ico.org.uk

14. Changes to this policy

We review this Privacy Policy periodically and update it when necessary to reflect changesin our activities, the services we use or applicable data protection requirements.

The latest version will be available on our website and will show the date it was last updated.

Where changes materially affect how we use personal information, we will provide additional information or notice where required by law.