We use necessary cookies that allow our site to work. We also set optional cookies that help us improve our website.

For more information about the types of cookies we use, and to manage your preferences, visit our Cookies policy here.

Cookie settings

Privacy Policy

Updated on the 31st October 2025

Ovarian Cancer Action is committed to using your data ethically and openly to deliver our goal – a world where no woman dies of ovarian cancer.  In the UK only 1 in 3 women live more than 10 years after diagnosis and we need lifesaving research breakthroughs to change this. We couldn’t save lives without your involvement and support. 

We will only communicate with you in the way you want us to, and we will never share, swap or sell your data to third parties for the purposes of their own marketing.

This policy explains what data we collect and what we do with the information you either share with us or is provided to us by third parties and publicly available sources. It also explains your data protection rights under UK GDPR.

If you have any questions about this privacy policy and how we use your information, then you can get in touch in the following ways:

Email: info@ovarian.org.uk

Phone: 020 7380 1730

Post: Ovarian Cancer Action, 483 Green Lanes, London, N13 4BS

1. Why we use your information 

We use your personal data when we have a lawful basis under UK GDPR and it helps us to work in a more efficient and cost-effective way, whether this is raising money, providing a service or [charity activities related].

  • Legitimate interests – we may use contact information you have provided to us to communicate with you in order to carry out our charitable aims and objectives.
  • Consent – if you have specifically consented to us communicating with you.
  • Legal obligation – we are legally obliged to keep records of certain information, including but not limited to financial information about any payment you have made to us, and Gift Aid declarations and claims relating to donations.
  • Contractual necessity – for example event bookings and contracts with third parties relating to our work.

We will always provide details of how to opt-out of any communication including contact details on postal mailings and unsubscribe link on emails.

2. The information we collect 

Some examples of the types of information we collect from you are below (this is not an exhaustive list).

  • Basic contact data such as your name, address, email, mobile number, social media handles.
  • Demographics including date of birth, postcode.
  • Financial data on donations and/or registration fees you pay us, Gift Aid declarations and claimed Gift Aid details.
  • Health data (special category data, collected with consent): e.g., if you choose to share information with us about your health.
  • Engagement data including website interactions, email opens and click behaviour.
  • Third-party or publicly available info: e.g., electoral register, Companies House, social media, as allowed under UK GDPR for profiling.
  • Additional information we may occasionally ask you for such as surveys about how you would like us to communicate with you, why you support us, your areas of interest around Ovarian cancer and our work and stories you choose to share with us.

3. How we use your information

We will use your information to inform our work, personalise your communications, fulfil your requests, support you and tell you about our work.

  • Stewardship such as communicating with you about our research and fundraising, thanking you for your support and sharing news.
  • Fundraising, research and campaigns which can include sharing your data with third parties in order to gain insight into our supporters and help find new supporters interested in our work.  We may also use your data to help direct our marketing to the best audiences.
  • Marketing and communications are sent with your consent or under legitimate interest and can include emails, post, telephone calls, electronic mobile phone messaging, and social media targeting. We may share data with advertising platforms (e.g., Facebook but in encrypted format).
  • Supporter insight and service improvement means combining internal and publicly available data for enrichment and personalization
  • Research and external collaboration including sharing data (under GDPR compliance) with researchers, institutions, or partners, always under contractual or ethical safeguards.
  • Legal and/or administrative obligations includes Gift Aid, audits, regulatory compliance and query/complaint handling.
  • Website and service administration – we collect data on cookies, website performance and technical monitoring to improve our work.

4. ThirdParty information sharing 

We are a small team and use external third-party services to provide expertise.  We will always have a data agreement with any third-party that protects you and your personal information.

  • Service providers and processors such as mailing platforms, database providers, consultants, agencies—strictly bound by contracts to act only under our instructions.
  • Insight and data providers to enrich our understanding under legitimate interest.
  • Advertising platforms data is shared in encrypted or anonymized form for audience targeting.
  • Research partners: for anonymised or pseudonymised research projects with clear purpose and safeguards.
  • Regulatory bodies such as HMRC, ICO, Fundraising Regulator and law enforcement, where legally required.
  • Successor organisations: if Ovarian Cancer Action merges or transfers operations, your data may be transferred under similar terms.
  • Individual and Organisational research to learn about our supporters in order to inform our communications and relationship with you.
  • International transfers - If we transfer data outside the UK (e.g., to cloud providers), we ensure GDPR-compliant safeguards such as Adequacy, Standard Contractual Clauses, or other approved mechanisms.

We never sell, swap or rent personal data for third-party marketing.

5. Data retention

We retain your information no longer than necessary, typically up to 7 years post-supporter activity, unless longer storage is justified (such as legal obligations and legacy gifts)

6. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data and receive a copy.
  • Rectify inaccurate or incomplete data.
  • Erase data (“right to be forgotten”) in certain circumstances. Please note that this right is superseded by our legal obligations in some cases.  For example, we are required to retain details of donations made to us for 7 years.
  • Restrict processing – usually used during a dispute or discussion with us.
  • Object to processing under legitimate interests or for marketing.
  • Data portability where applicable.
  • Withdraw consent at any time

To exercise these rights, contact us via the details above. You may lodge a complaint with the ICO or Fundraising Regulator if dissatisfied.

We work hard to ensure that our communications with you are welcome and will always stop contact when you ask us to.

7. Cookies & Digital Tracking

Our website uses cookies and tracking tools (e.g., Google Analytics) to monitor usage, personalise content, and enable targeted advertising in compliance with relevant regulations. You can change your cookie preference at any time via our online Cookie Policy - https://ovarian.org.uk/cookies/

8. Safeguarding your personal information

We will always protect your personal information with the following processes:

  • Secure storage systems.
  • Encrypted communications and transfers (SSL, TLS).
  • Access controls and regular security assessments.
  • Processor contracts enforcing GDPR standards.
  • Measures aligned with our policies and procedures.

9. Changes to this policy

We may update this policy. When changes are significant, we'll notify you via email or prominent notice. Last updated: 31st October 2025


Ovarian Cancer Action

Registered charity no. 1109743 (England & Wales) and SC043478 (Scotland).
Company Limited by guarantee no. 5403443.