Privacy Policy

Last updated: 17 August 2026

1. Who We Are

This Privacy Notice explains how the Keith Duffy Foundation (“we”, “us” or “our”) collects and uses personal data when you visit our website, contact us, subscribe to our communications, make a donation, participate in fundraising activities or otherwise interact with us.

The Keith Duffy Foundation is the data controller in respect of personal data that we determine how and why to process.

Website: keithduffyfoundation.ie
Charity Registration Number: 568386
Registered/Correspondence Address:

1-2 MARINO MART

DUBLIN 3

FAIRVIEW,DUBLIN

FAIRVIEW, DUBLIN, IRELAND

Email: info@keithduffyfoundation.ie

Questions concerning this Privacy Notice or the use of your personal data can be sent to the email address above.

2. Data Protection Law

We process personal data in accordance with applicable data protection and privacy legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Data Protection Act 2018 and applicable Irish ePrivacy legislation.

3. Personal Data We Collect

The personal data we collect depends on how you interact with us.

When you contact us, we may collect your name, email address, telephone number where provided, the subject of your enquiry, the content of your message and any other information you choose to provide.

When you subscribe to a newsletter or other communications, we may collect your name, email address, communication preferences and information relating to your consent or subscription.

When you make a donation or take part in fundraising activity, we may receive information such as your name, contact information, donation or fundraising details, transaction information and information supplied through the relevant payment or fundraising platform. Payment-card information may be processed directly by our payment service provider and may not be received or stored by the Keith Duffy Foundation.

When you visit our website, we may process technical and usage information such as your IP address, browser and device type, operating system, referring website, pages viewed, approximate location derived from your IP address, dates and times of access and information collected through cookies or similar technologies.

When you interact with us through social media, we may receive information you make available through the relevant social network, such as your profile name or username, comments, messages and other information that you choose to provide.

4. How We Use Personal Data and Our Legal Bases

We use personal data only where we have an appropriate lawful basis for doing so.

We process enquiries and correspondence so that we can respond to people who contact us, administer our activities and maintain appropriate records. Depending on the circumstances, this processing is based on our legitimate interests in operating and administering the Foundation, taking steps at your request, or another applicable lawful basis.

We process donation and fundraising information to administer donations, fundraising activities and events, maintain financial and administrative records, provide appropriate acknowledgements and comply with our legal, accounting and regulatory obligations. Depending on the particular processing activity, our lawful basis may be the performance of an agreement, compliance with a legal obligation or our legitimate interests in administering and supporting the Foundation’s charitable work.

Where you have subscribed to newsletters or electronic marketing communications, we will use your contact details to send those communications where we have obtained the required consent or are otherwise lawfully permitted to do so. You can unsubscribe at any time.

We may process technical and security information where necessary for the operation, protection and security of our website and IT systems. This is generally based on our legitimate interests in maintaining a secure and functioning website.

Where analytics, advertising or other non-essential cookies or tracking technologies require consent, we rely on your consent. Please see our Cookie Policy and cookie-preference controls for further information.

We will not use your personal data for a materially different purpose without first ensuring that we have an appropriate lawful basis and providing any additional information required by law.

5. Donations, Fundraising and Payment Providers

Donations and fundraising services may be provided partly through third-party platforms.

The Keith Duffy Foundation currently uses or may use payment and fundraising providers such as Payzone, Eventmaster or other providers from time to time.

When you follow a link to a third-party donation or fundraising platform, that provider may collect personal data directly from you under its own privacy notice. The Foundation may subsequently receive donation, fundraiser, participant or transaction information from the provider where necessary to administer the donation or fundraising activity.

We recommend that you review the privacy information supplied by the relevant platform before providing personal data.

6. Email Communications and Newsletters

If you subscribe to our newsletter or other electronic communications, we may use an email-service provider to assist us in sending and managing those communications.

Where consent is the basis for these communications, you may withdraw your consent at any time. Marketing emails will also contain an unsubscribe mechanism where required.

We will retain appropriate information about subscriptions, unsubscribes and consent where necessary to demonstrate and respect your communication preferences.

7. Cookies and Analytics

Our website may use cookies and similar technologies.

Cookies that are strictly necessary for the operation or security of the website may be used where permitted without consent.

Analytics, advertising and other non-essential cookies or tracking technologies will be used only where we have obtained any consent required by applicable law.

If Google Analytics or another analytics provider is enabled on the website, information such as device information, IP-derived information and details about how visitors use the website may be processed for website measurement and improvement purposes.

More detailed and current information about the particular cookies and tracking technologies in use, their purposes, providers and duration should be provided in our Cookie Policy and cookie-preference centre.

You may change or withdraw your cookie choices using the cookie settings made available through the website.

8. Social Media and Embedded Content

Our website may contain links to social-media platforms and may contain content embedded from third-party websites, such as videos, images, maps or social-media content.

When you interact with an embedded service or social-media feature, the relevant third party may collect information about your device, browser and interaction and may use cookies or similar technologies.

Where such technologies are not strictly necessary, embedded tracking content should be activated only in accordance with your cookie choices where consent is required.

Your interactions with third-party platforms are also subject to the privacy terms of those providers.

9. Sharing Personal Data

We may share personal data where necessary with organisations that help us operate the Foundation and provide our services. These may include website-hosting and IT providers, professional advisers, email and communications providers, payment and fundraising platforms, event-service providers, analytics providers and other suppliers acting on our behalf.

Some of these organisations process personal data as our data processors and are permitted to process it only in accordance with our instructions and applicable data-protection requirements. Other organisations may act as separate or joint data controllers where they determine their own purposes and means of processing.

We may also disclose personal data where required by law or where reasonably necessary to establish, exercise or defend legal rights, prevent fraud or protect the rights, property or safety of the Foundation or others.

We do not sell personal data.

10. International Transfers

Some of the service providers we use may process personal data outside Ireland or the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we will ensure that an appropriate transfer mechanism or safeguard required by data-protection law is in place where necessary. This may include an adequacy decision adopted by the European Commission or approved Standard Contractual Clauses and any additional safeguards considered necessary.

11. Special Category and Sensitive Information

Because of the charitable activities of the Keith Duffy Foundation, people may sometimes voluntarily provide information relating to health, disability or other sensitive circumstances.

Where we need to process special-category personal data, we will do so only where an appropriate basis under Article 9 GDPR and any other applicable legal requirements have been satisfied.

We ask website users not to provide unnecessary medical, health or similarly sensitive information through general contact forms or email.

Where the Foundation operates a specific beneficiary, grant or support application process that requires sensitive information, additional privacy information may be provided for that process.

12. Children’s Personal Data

The Foundation’s work supports children, young people and families, but our general website is not intended to collect personal information directly from children unnecessarily.

Where we need to process personal data relating to a child in connection with our charitable activities, fundraising, events, publicity or support activities, we will take particular care to ensure that the processing has an appropriate legal basis and that suitable safeguards are applied.

Where consent from a parent or legal guardian is required, we will take reasonable steps to obtain and record that consent.

13. Photographs, Videos and Stories

The Foundation may publish photographs, videos, testimonials or stories relating to fundraising events, supporters, beneficiaries and our charitable work.

Where identifiable individuals are featured, we will ensure that there is an appropriate lawful basis for the particular use. Additional consent and safeguards may be required where children or sensitive personal information are involved.

If you have a concern about an image, video or story in which you appear, please contact us at info@keithduffyfoundation.ie.

14. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, regulatory and reporting requirements.

Different retention periods apply to different categories of information.

Contact enquiries will normally be retained only for as long as necessary to deal with the enquiry and any reasonably related follow-up.

Newsletter and marketing information will normally be retained while you remain subscribed, together with any information that we need to retain to record an unsubscribe or withdrawal of consent.

Donation, fundraising, financial and tax-related records may need to be retained for longer periods where required for accounting, audit, tax, charity-governance or other legal purposes.

Website analytics and cookie-related information will be retained in accordance with the periods specified in our Cookie Policy and the settings of the relevant service.

We periodically review information that we hold and securely delete or anonymise personal data when it is no longer required.

15. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

No website, internet transmission or electronic-storage system can be guaranteed to be completely secure, but we regularly consider appropriate measures having regard to the nature and risk of the personal data we process.

16. Your Data Protection Rights

Depending on the circumstances, GDPR gives you rights including the right to obtain information about our processing of your personal data, obtain access to your personal data, have inaccurate information corrected, request erasure, request restriction of processing, object to certain processing and receive certain personal data in a portable format.

Where processing is based on your consent, you also have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

You have an absolute right to object to the processing of your personal data for direct-marketing purposes.

These rights are subject to certain conditions and exceptions under applicable law.

To exercise a data-protection right, please contact info@keithduffyfoundation.ie. We may need to request information necessary to confirm your identity before acting on a request.

We aim to respond to valid requests within the time limits required by applicable data-protection law.

17. Complaints

If you have a concern about how we use your personal data, we encourage you to contact us first so that we can try to resolve it.

You also have the right to make a complaint to the Data Protection Commission, Ireland’s supervisory authority for data protection.

Information about exercising this right and contacting the Data Protection Commission is available through the Commission’s official website.

18. Automated Decision-Making

Unless we specifically tell you otherwise, the Keith Duffy Foundation does not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.

19. Third-Party Websites

Our website may contain links to external websites or services.

The Keith Duffy Foundation is not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the relevant third party’s privacy information before providing personal data.

20. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our activities, technology, service providers or legal requirements.

When we make changes, we will publish the revised version on our website and update the “Last updated” date at the top of this notice.

Where a change materially affects how we use personal data, we will take additional steps to notify affected individuals where required.

21. Contact Us

For privacy questions, requests or concerns, please contact:

Keith Duffy Foundation
1-2 MARINO MART

DUBLIN 3

FAIRVIEW,DUBLIN

FAIRVIEW, DUBLIN, IRELAND
Email: info@keithduffyfoundation.ie