Privacy Notice

1. Who we are

The Charity is registered in England and Wales (number 1201304) and is a company limited by guarantee and registered in England and Wales (number 13918024).

The Charity’s objectives are:

The advancement of education for the public benefit by advancing knowledge and improving skills in financial capacities and capabilities, in particular but not exclusively through the provision of grants and promotion of research and dissemination of such research.

2. Your data privacy

The Charity is a data controller, for the purposes of UK GDPR and committed to protecting the rights of individuals in line with data protection legislation.

This Privacy Notice was created in view of the requirements of the UK General Data Protection Regulation (‘UK GDPR’) and all other relevant privacy legislation. We may change this policy from time to time to reflect changes in the law or in the provision of our services.

The Charity has an appointed *Data Protection Representative who can be contacted by email via Chair@CISIFutureFoundation.onmicrosoft.com

3. What information we may collect about you

We process a limited amount of personal information which is outlined below.

Type

Description

Personal and Contact

Name, date of birth, gender, your address, and contact details for your Directors and/or Trustees and/or senior management

Identification

Copies of photographic legal identification documents for your Directors and/or Trustees and/or senior management to support grant applications.

Socio-Economic

Details of any financial interest held by your Directors and/or Trustees and/or senior management that may present a Conflict of Interest with your grant application.

National Identifier

A reference given to your Directors and/or Trustees and/or senior management by a regulated body to identify who you are, such as a Charity number.

 

4. Why we collect personal information

In order to fulfil our legal and regulatory obligations, and for us to conduct appropriate due diligence for recipients of our grants, we require you to provide personal information to allow us to:

  • Verify the identities of your Directors and/or Trustees and/or senior management;
  • Identify and query any
  • Conflicts of Interest there may be in your grant application;
  • Provide updates relating to your grant applications;
  • Provide granted funds upon the success of an application.

Failure to provide required information may mean that we cannot appropriately scrutinise your grant application and may result in your application being rejected.

5. Where we collect personal information from

We may collect information about you from these sources:

Data you give to us:

  • When you make contact with us by email;
  • When you talk to us on the phone
  • When you complete a grant application form;
  • In surveys.

Data that is publicly available:

  • Data relating to your entity that is available on Companies House or the Register of Charities;
  • Information that is available through your entity’s website;
  • Information that is made available through social media;
  • Information that has been published in physical or digital media

6. How we use your personal information

  • We may use personal information to:
  • To validate your registered entity;
  • To evaluate your registered entity in the interest of due diligence;
  • To validate the information provided by you about your registered entity;
  • To validate the information provided by you about your registered entity’s Directors and/or Trustees and/or senior management;
  • To contact you to query, progress, and deliver a decision upon your grant application.

We do not carry out automated decision-making or profiling.

7. Our legal bases for using your personal information

  • Where it is in our legitimate interests to do so;
  • To comply with our legal obligations;
  • With your consent.

8. Who we share your personal information with

  • Capstone, our outsourced grant manager, acting as a data processor, in order to process grant applications and respond to any queries that you may raise;
  • Companies you ask us to share your data with;
  • Our legal advisors, accountants, email provider and other appointed consultants working with the Charity;
  • Any relevant Regulator, where there is a lawful basis to do so.

9. International data transfers

The Charity operates internationally, therefore we may transfer information to countries outside the United Kingdom for the purposes described in this policy where necessary, relevant and proportionate.

Where we are required to do so in order to fulfil our objectives, we will ensure that such transfers are conducted in a lawful and transparent manner and that such transfers are essential for provision of our services and fulfilment of our objectives.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or International Data Transfer Agreements (IDTAs).

10. Marketing

We may, with your consent, publish case studies with limited personal data of your Directors and/or Trustees and/or senior management on our website and/or the CISI’s website and social media presence in describing the awarding of grants to your firm.

In addition to UK data privacy laws, marketing communications are additionally subject to the Privacy and Electronic Communications Regulations (PECR).

11. How long we keep your personal information

We will keep your personal information for the duration of the application process and thereafter. We normally retain grant application records for up to 6 years following the decision, unless a longer period is required by law. Following the outcome of your grant application, we may keep your data for one of these reasons:

  • To respond to any questions or complaints;
  • To maintain records according to rules and regulations that apply to us.

We may keep your data if we cannot delete it for legal or regulatory reasons, and we may also keep it for statistical purposes. If we do, we will make sure that your privacy is protected and your data is only used for those purposes.

12. Information security

All systems and services upon which personal data is stored are owned and operated by the Charity, and subject to strict access controls.

We have ensured that there are appropriate technical and organisational measures to safeguard the personal information we collect in connection with our services.

13. Your rights under data protection laws

As a data subject you have certain rights under data protection laws:

  • The right to be informed
  • The right to request access to your personal information
  • The right to have your personal information corrected
  • The right to object to certain processing of your personal information
  • The right to restrict processing of your personal information
  • The right to have your personal information erased
  • The right to move, copy or transfer your personal information
  • Rights in relation to automated decision-making.

Please note that under certain circumstances, your right to have your personal information erased may be limited.

We ask that you keep us informed if your personal information changes during your relationship with us.

14. How to get a copy of your personal information

You can access the personal information we hold on you by emailing Chair@CISIFutureFoundation.onmicrosoft.com or by writing to us at this address:

Data Protection Representative
UK Financial Literacy Foundation 
Amelia House,
Crescent Road,
Worthing,
United Kingdom,
BN11 1RL

If you have any queries about the Charity and Data Protection, please feel free to contact the Data Protection Representative.

You also have the right to contact the Information Commissioner’s Office (see ico.co.uk).

*Data Protection Representative: Responsible as the point of contact for internal and external queries relating to data protection and for facilitating any and all necessary compliance with data protection legislation.

Last reviewed by the Board: 16/02/2026

Next review due: 16/02/2029