Privacy Policy

Magic Moments for Autistic Kids is a registered charity in England and Wales (Charity No. 1093679). We are the data controller for the personal data we collect about you. Our fundraising contact is Patricia Ebbs.

You can contact us at any time regarding your personal data by emailing mm4ak@hotmail.com or by visiting our website at magicmomentsforautistickids.org.

We may collect the following categories of personal data:

• Identity data: Your full name, and where relevant, your age or date of birth (for age verification purposes in relation to the raffle).
• Contact data: Your email address and, where provided, your telephone number and postal address.
• Financial data: Payment information processed securely through our payment provider. We do not store your full card details.
• Transaction data: Details of donations made and raffle tickets purchased.
• Communications data: Any messages or correspondence you send to us via our contact form or by email.

We use your personal data for the following purposes:

• To process your raffle entry or donation and send confirmation to you.
• To verify your eligibility to participate in the raffle (aged 18+, GB resident).
• To notify raffle winners and arrange prize delivery.
• To respond to your enquiries and correspondence.
• To comply with our legal and regulatory obligations as a registered charity.
• To send you updates about our work, where you have given us your consent to do so.

We process your personal data on the following legal bases under UK GDPR:

• Contract performance: Processing is necessary to carry out the raffle entry or donation agreement with you.
• Legal obligation: Processing is required to comply with our obligations as a registered charity and lottery promoter under applicable law.
• Legitimate interests: Processing is necessary for our legitimate interests as a charity, including safeguarding our operations and communicating with supporters.
• Consent: Where we send you marketing communications, we will do so only with your explicit consent, which you may withdraw at any time.

We will never sell your personal data to third parties. We may share your data with trusted third parties only where necessary, including:

• Our payment processing provider, for the purpose of completing your transaction.
• Regulatory bodies, including the Charity Commission and the Fundraising Regulator, where we are legally required to report.
• Professional advisors (such as accountants or solicitors) where required for the proper administration of the charity.

All third parties we work with are required to handle your data securely and only for the purposes for which it is shared.

We retain your personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with our legal obligations.

Raffle entry data is retained for a minimum of 7 years following the draw date to comply with lottery regulations and charity accounting requirements. Donation records are retained for a minimum of 7 years in accordance with Gift Aid and accounting obligations. Contact form enquiries are retained for 2 years unless an ongoing relationship requires longer retention.

When data is no longer required, it is deleted or anonymised securely.

Under UK GDPR, you have the following rights in relation to your personal data:

• The right to access a copy of your personal data.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure ("right to be forgotten"), subject to legal retention requirements.
• The right to restrict or object to processing in certain circumstances.
• The right to data portability, where processing is based on consent or contract.
• The right to withdraw consent at any time, where processing is consent-based.

To exercise any of these rights, please contact us at mm4ak@hotmail.com. We will respond to all valid requests within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website may use cookies and similar technologies to ensure it functions correctly and to improve your experience. Where cookies are used, we will seek your consent in accordance with the Privacy and Electronic Communications Regulations (PECR).

[COOKIES DETAIL — Insert full details of the cookies used on the site, including their names, purposes, and durations. If analytics or third-party cookies are used, this must be disclosed clearly.]

If you have any questions about this Privacy Policy or how we handle your personal data, please contact: