Website Privacy Policy

Version 2.1, dated 2 June 2026

This Privacy Policy explains how Scooda collects, uses, and shares your personal information when you visit our website, interact with our online features, or use our services.

Please read this policy alongside any other privacy or fair processing notice we provide on specific occasions, so you are fully aware of how and why we use your data. This policy supplements those other notices and does not override them.

Our role under data protection law

Scooda’s role depends on the data in question.

Website visitors, enquirers, and customer users. For the personal data of people who visit our website, contact us, or are the staff and authorised users of our customer organisations, Scooda is the controller. This policy explains how we handle that data.

Donor and supporter data. For personal data that our charity customers upload to and manage through the platform, including their donors’ and supporters’ information, the charity is the controller and Scooda acts as a processor on the charity’s behalf under a Data Processing Agreement. If you are a donor or supporter of a charity that uses Scooda, that charity is responsible for your data. Please consult the charity’s own privacy notice. We process that data only on the charity’s documented instructions.

Insights data. For certain pseudonymised data derived from platform use, which we use to produce sector insights and improve our services, Scooda acts as an independent controller relying on its legitimate interests. We do not use this data to identify individuals.

Our Contact Details

Contact: Data Protection Lead

Address: Ground Floor South, Latitude, 5 Nelson Street, Bradford, England, BD1 5AX

Email: privacy@getscooda.com

Company information: Scooda Ltd (company number 15730069). Registered office: Ground Floor South, Latitude, 5 Nelson Street, Bradford, England, BD1 5AX.

You have the right to complain at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection. We would appreciate the chance to address your concerns first, so please contact us before approaching the ICO.

The personal information we collect

We may collect and process the following:

  • First and last name
  • Current occupation and organisation
  • Email address
  • Age
  • Location (up to a maximum of 100 metres)
    Scooda Ltd | Privacy Policy | Page 2 of 4
  • IP address
  • Browser type and version
  • Time zone setting and location
  • Browser plug-in types and versions
  • Operating system, platform, and other technology on the devices you use to access our
    website
  • Usage data about how you use our website, products, and services
  • Marketing and communications data, including your marketing preferences

We may also collect, use, and share aggregated data such as statistical or demographic data. Aggregated data may derive from your personal data but is not personal data in law, because it does not directly or indirectly identify you.

We do not collect information about your race or ethnicity, sex life, sexual orientation, political opinions, trade union membership, health, or genetic or biometric data. We do not collect information about criminal convictions or offences.

Children’s Data

Our services are not directed at children under the age of 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children. If we learn we have collected information from a child without the necessary parental consent, we will delete it as soon as possible.

How we collect your information and why

When you visit our website, we automatically collect information about your device. This includes your browser, IP address, time zone, and the cookies on your device at the time of access.

As you browse, we collect information about the pages you view and the features you use. We use cookies and similar technologies to gather this data. You can manage cookies in your browser settings, though disabling them may limit parts of our website.

Most other personal information is provided directly by you, for the purpose of using Scooda. Scooda is the all-in-one platform that gives charities the tools to manage their organisation and donors in one place.

Our lawful bases for processing

Under Article 6 of the UK GDPR, the lawful bases we rely on include:

  • Consent: when you give clear consent for us to process your data.
  • Contract: when we need to process your data to provide our services or perform a contract
    with you.
  • Legitimate interests: when processing is necessary for our legitimate interests, such as improving and developing our services, producing sector insights, fraud prevention, and analytics, provided your interests and fundamental rights do not override those interests.

What we do with your personal information

We only use your personal data as the law allows. Examples include:

Helping charities manage donor records, donations, and fundraising campaigns.

  • Providing insights into donor engagement and supporter trends.
  • Personalising dashboards and reporting tools.
  • Enabling secure communication between charities and their donors.
  • Sending notifications or updates on system improvements and new features.
  • Developing and improving our platform, and creating new products and services.

We may share anonymised or aggregated data with third parties to improve services or for compliance purposes.

International data transfers

We primarily store and process personal data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place. These may include transferring only to countries the UK recognises as providing adequate protection, or using the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Third-party processors

To provide our services, we share personal data with carefully selected third-party providers. They process your data only on our instructions and must keep it secure. Categories include:

  • Cloud hosting providers
  • Analytics providers
  • Communication and email delivery services
  • Payment processors
  • Security and monitoring services

Where we act as a processor for our charity customers, our current sub-processors are listed at getscooda.com/sub-processors.

Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects for individuals.

Security

We take your privacy seriously and apply appropriate technical and organisational measures, including encryption in transit and at rest, role-based access controls, and regular monitoring of our systems. If a personal data breach affects data we control, we will handle it in line with our legal obligations.

Marketing and communications

We may use your information to keep you updated about our services, for example through newsletters. You can opt out at any time using the unsubscribe link in our emails, or by contacting us directly.

Data retention

We keep your data for as long as you have an active relationship with us, and afterwards only as long as needed for the purposes we collected it or as the law requires. Retention periods differ by data type. For data we process on behalf of our charity customers, retention follows the customer’s instructions and the Data Processing Agreement.

Your data protection rights

Under data protection law, you have the right to: access; rectification; erasure; restriction of processing; objection to processing; and data portability.

You do not have to pay to exercise your rights. If you make a request, we have one month to respond. Please contact privacy@getscooda.com to make a request. If you are a donor or supporter of a charity that uses Scooda, please direct your request to that charity, as they control your data.

How to complain

If you have concerns about our use of your personal data, please contact privacy@getscooda.com.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number: 0303 123 1113

Website: www.ico.org.uk

Changes to this policy

We may update this policy from time to time to reflect changes to our services or legal requirements. We will publish the current version on our website with its version number and date. Please check back periodically for updates.