Privacy Policy

Home Privacy Policy

Privacy Policy

MHW Foundation 

Last updated: January 2026


1. Introduction

MHW Foundation (“the Foundation”, “we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


2. Who we are

MHW Foundation is a UK Registered Charity established to improve access to mental health and individual Support.

Website: https://new.designerasraf.com

Email: info@mhw-foundation.org

For the purposes of data protection law, we are the Data Controller.


3. Personal data we collect

We may collect and process the following categories of personal data:

a) Information you provide directly

  • Name

  • Email address

  • Telephone number

  • Organisation name and role (where relevant)

  • Information submitted via contact, referral, or enquiry forms

  • Communications sent to us by email or other channels

b) Service related information

Where applicable and with appropriate consent, this may include limited personal information required to facilitate access to support services or community programmes.

We do not collect or store detailed clinical records.

c) Donation and financial information

  • Donation amounts

  • Transaction references

We do not store card or bank details. Payments are handled securely by third-party payment providers.

d) Website and technical data

  • IP address

  • Browser type and version

  • Pages visited and time spent on the site

This data is collected for security and performance monitoring only.


4. Special category data

Where necessary for our charitable purposes, we may process limited special category data (e.g. information relating to mental health or wellbeing).

Such data is processed only where:

  • Explicit consent has been provided, or

  • Processing is necessary for reasons of substantial public interest, or

  • Processing is required to provide requested support services

Additional safeguards are applied to this data.


5. How we use your data

We use personal data for the following purposes:

  • Responding to enquiries and communications

  • Managing referrals and access to support services

  • Administering charitable programmes and donations

  • Working with partners to deliver social impact

  • Compliance with legal, regulatory, and safeguarding obligations

  • Improving our website and services

We do not use personal data for unsolicited marketing.


6. Lawful basis for processing

Under UK GDPR, we rely on one or more of the following lawful bases:

  • Consent – where you have actively agreed

  • Legitimate interests – to operate and deliver our charitable objectives

  • Legal obligation – to meet statutory or regulatory requirements

  • Public task / substantial public interest – where applicable to our mission


7. Sharing your data

We may share personal data only where necessary with:

  • Partner organisations supporting programme delivery

  • Therapy or support service providers

  • Logistics or distribution partners (for donated goods or equipment)

  • Regulatory or statutory authorities where required by law

All third parties are required to handle data securely and lawfully.

We do not sell personal data.


8. International transfers

Personal data is primarily stored and processed within the UK.

Where data is transferred outside the UK, appropriate safeguards (such as adequacy decisions or contractual protections) will be in place.


9. Data retention

We retain personal data only for as long as necessary for the purpose it was collected, including:

  • Legal and regulatory requirements

  • Audit and reporting obligations

  • Safeguarding and accountability

Data is reviewed regularly and securely deleted when no longer required.


10. Cookies

Our website uses essential cookies and limited analytics cookies to ensure functionality and improve user experience.

You can manage or disable cookies through your browser settings.


11. Data security

We implement appropriate technical and organisational measures to protect personal data against:

  • Unauthorised access

  • Loss or destruction

  • Misuse or disclosure

Access to personal data is restricted to authorised individuals only.


12. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data (where applicable)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time (where processing is consent-based)

Requests can be made by contacting us using the details below.


13. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk


14. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on our website.


15. Contact details

For all data protection enquiries:

MHW Foundation 

Email: info@mhw-foundation.org