nfp.org.uk

Privacy notice

Last updated: 19 June 2026

1. Who we are

nfp.org.uk is operated by the team at bertie.fr (referred to in this notice as “we”, “us” or “the publisher”). For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller for personal data collected through this website.

You can contact us about this notice or about your personal data by emailing the address provided on bertie.fr.

2. What personal data we collect

When you request our checklist we collect:

  • Your name;
  • Your email address;
  • The name of the organisation you represent;
  • The date and time of submission.

We also collect a limited set of analytics data when you visit the site — see section 6 below.

3. Purpose and lawful basis

We use the information you provide to send you the requested checklist and, occasionally, related guidance we believe will be useful to people in similar roles. Our lawful basis for this processing is your consent, given when you submit the form. You may withdraw consent at any time by contacting us or using the unsubscribe link in any email we send.

4. Retention

We retain submitted contact details for as long as you remain a subscriber, and for a maximum of 24 months following your last interaction with us. After that period we delete or anonymise the record.

5. Processors and third parties

We rely on a small number of carefully selected processors to operate this site:

  • Notion Labs, Inc. — secure storage of submitted contact details, under a data processing agreement.
  • Umami Software, Inc. — privacy-friendly website analytics (see section 6).
  • Hosting provider — serves this website and processes standard server logs.

We do not sell personal data and we do not share it with third parties for their own marketing.

6. Analytics and cookies

We use Umami, a privacy-friendly analytics service that does not use cookies, does not track you across sites, and does not collect personal data. It records aggregated information such as the pages visited, referring site, and approximate country, in order to help us understand what content is useful.

Because no cookies or identifiers are set, this site does not require a cookie consent banner under PECR.

7. Your rights

Under UK GDPR you have the right to:

  • Request access to the personal data we hold about you;
  • Request correction of inaccurate or incomplete data;
  • Request erasure of your data;
  • Object to or restrict our processing;
  • Withdraw your consent at any time;
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. International transfers

Some of our processors are based outside the UK. Where this is the case, transfers are protected by appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

9. Changes

We may update this notice from time to time. Material changes will be reflected by an updated “last updated” date at the top of the page.