Privacy notice
Last updated 14 May 2026.
This notice explains how Charity Register UK handles personal data. Most of the records we display are about charities as organisations, but trustee names are the personal data of identifiable individuals, so UK GDPR applies to those.
1. Who we are
Charity Register UK is operated by Digital Signet, a sole-trader business based in the United Kingdom. For the purposes of UK GDPR we are the data controller for personal data processed on this site.
Contact: [email protected]
We are not the Charity Commission. The official UK charity register is at register-of-charities.charitycommission.gov.uk.
2. The charity records we display
The records on this site (charities, their finances, addresses, classifications) describe registered charities as organisations, not natural persons. Most of UK GDPR does not bite on charity-level data because a charity is a legal entity, not a living individual.
However, two pieces of personal data appear publicly on the charity register: trustee names and (occasionally) trustees' declared appointment dates. Trustees are individuals, so this is personal data within the meaning of UK GDPR. We address that in section 3 below.
3. Why we publish trustee names
We rely on two complementary legal bases under UK GDPR Article 6:
- Public task (Article 6(1)(e)). The Charities Act 2011, sections 34 to 37, requires the Charity Commission to maintain and publish the register of charities, including the names of charity trustees. Mirroring and presenting that public register supports the statutory transparency aim.
- Legitimate interests (Article 6(1)(f)). There is a substantial public interest in being able to identify who is responsible for running a regulated charity - donors, regulators, journalists, beneficiaries, and other charities all have legitimate reasons to look this up. We have weighed that interest against trustees' reasonable expectations and assessed it as proportionate.
Trustees can reasonably expect their names to appear in a public register because they have agreed to take on a regulated public role.
4. Trustees' right to seek removal from this site
If you are listed as a trustee and you have specific concerns about your name appearing on this site (for example, safety concerns or evidence that the Commission's record is out of date because your appointment has ended), email [email protected].
We will respond within 28 days. We may:
- Mark your trustee page as non-indexable so it no longer appears in search engines, while keeping the underlying data in our database so that the next daily refresh from the Charity Commission stays consistent.
- Where the Commission's public record is the source of the inaccuracy, direct you to update it with the Charity Commission directly - we sync from that record automatically.
- In limited cases (active safeguarding concern, evidence of fraud / impersonation), suppress the page entirely.
5. Cookies and tracking
Google Analytics 4. We use Google Analytics 4 to understand which pages are popular and how the site is performing. GA4 sets two first-party cookies (_ga, _ga_QQKW84V2VR) which contain a randomly generated client identifier, used to distinguish unique sessions. We have enabled IP-anonymisation, so the last octet of your IP is dropped before Google stores any data. We do not use Google Signals, ad personalisation, or remarketing audiences. Data is processed under our legitimate interest (Article 6(1)(f) UK GDPR) in understanding site usage at an aggregate level. You can opt out by installing the official Google Analytics opt-out browser add-on or by blocking googletagmanager.com in your browser settings.
Cloudflare. Cloudflare sits in front of the site for DDoS protection, caching, and TLS termination. Cloudflare may set operational cookies (e.g. __cf_bm bot-management) that do not personally identify you and are not used for tracking.
No advertising or third-party trackers. We do not run advertising on this site, do not embed third-party social widgets, and do not sell or share visitor data with brokers.
6. What we collect about visitors
- Server access logs. IP address and user-agent, retained for up to 30 days for security and abuse detection.
- Aggregate analytics via Google Analytics 4 with IP-anonymisation enabled (see section 5).
We do not use advertising cookies, do not sell visitor data, and do not build behavioural profiles of identified individuals.
7. Visitor and trustee rights
Under UK GDPR you have the standard data-subject rights regarding the personal data we hold about you:
- Right of access (Art. 15) - ask us what we hold
- Right to rectification (Art. 16) - correct inaccurate data
- Right to erasure (Art. 17) - see section 4 for the trustee-specific process
- Right to object (Art. 21) - ask us to stop processing
- Right to complain to the ICO at ico.org.uk or 0303 123 1113
Email [email protected] to exercise any of these.
8. Where the data comes from
All charity data shown on this site is sourced directly from:
- The Charity Commission bulk register download (daily JSON ZIPs)
This data is made available by the Charity Commission under the Open Government Licence v3.0, which permits free use including for commercial purposes.
The Charity Commission, as the publisher of this dataset, is the data controller for the source record. We are a downstream republisher.
9. Changes to this notice
We may update this notice from time to time. The “last updated” date at the top of this page will change accordingly.