Privacy Notice

PRIVACY NOTICE

SAT-7 UK Trust Ltd

Version 3  |  19th May 2026  |  Estimated reading time: 12 minutes

Thank you for your support. You are helping to provide the churches and Christians of the Middle East and North Africa (MENA) an opportunity to witness to Jesus Christ through inspirational, informative and educational satellite television and media services.

This Privacy Notice explains how SAT-7 UK Trust Ltd (“SAT-7 UK”, “we”, “us”, “our”) collects, uses, stores and protects your personal information, and what rights you have over the information we hold about you. We are the data controller for the purposes of UK data protection law.

Our promise to you

• Your privacy matters to us — we never share your information with other organisations for their own purposes.
• You are in control of how your information is used — you can change your preferences, or opt out from communications, at any time.
• We never sell your data.

Contents

1. About us
2. Information we collect about you
3. How we use your information
4. Information about children
5. Automated processing and profiling
6. When we share your information
7. How we keep your information safe
8. How long we keep your information
9. Your data rights
10. Contact us and complaints
11. Cookies
12. Changes to this notice

1. About us

SAT-7 UK Trust Ltd, through satellite television in the Middle East and North Africa, enables the Church in the region — isolated, often small and facing many restrictions — to make known the love of Christ, to teach and encourage believers, and to share a positive Christian vision for life and society. SAT-7 UK also seeks in the UK to raise awareness of the needs of the Church in the MENA region and to encourage our supporters in the United Kingdom to pray, engage and provide funding for this ministry.

SAT-7 UK Trust Ltd is a company registered in England and Wales (company number 3301736) and a registered charity in England and Wales (charity number 1060612). Our registered address is 3–4 New Road, Chippenham, Wiltshire, SN15 1EJ. We are registered with the Information Commissioner’s Office (ICO) as a data controller, registration number ZA520098.

Day-to-day responsibility for data protection at SAT-7 UK rests with our Supporter Services & Systems Manager, who acts as our Data Protection Lead.

You can contact us by:

• Phone: 01249 765865
• Email: respond@sat7uk.org
• Post: SAT-7 UK, 3–4 New Road, Chippenham, SN15 1EJ
• Using the contact form on our website.

2. Information we collect about you

Personal data is any information that can be used to identify you. We collect it in the following ways:

When you share information with us directly

For example, when you send us an email, make a donation, visit our website, subscribe to a mailing list, take part in an event, apply to work with us, volunteer for us, make a purchase through our shop, act as a referee, interact with us on social media, or have any face-to-face contact with us.

When you share information with us indirectly

For example, when you use a third party (such as an online fundraising platform, or one of our partners) to donate or update your contact details; or when you use social media or messaging services to communicate with us and your privacy settings reveal this information to us.

From public sources

We may also receive information about you from publicly available sources (for example, Companies House records) where we use this for wealth screening — see Section 5.

The kinds of information we collect

Depending on how you interact with us, this may include:

• Your name and preferred title.
• Your contact details: postal address, email address and phone number.
• Your date of birth — used to send you age-appropriate materials and for safeguarding at events.
• Your denomination or church.
• Records of correspondence with you.
• Details of events you have attended or resources we have sent you.

If you make or pledge a donation, we may also collect:

• Details of the gift.
• Bank account details (for direct debits and standing orders only — we do not store card details).
• Gift Aid declaration details.

If you visit our website, we may collect:

• The internet address of your computer.
• Device ID and device type.
• Location data.
• Details of pages visited and files downloaded.
• Cookies stored on your computer (see Section 11).

If you apply for a job or join us as a volunteer, we may also collect:

• Information about your religious beliefs.
• Information about your state of health.
• Information about any criminal record (where the role requires it).
• Personal details of your referees.

Special category data

Some categories of personal data are more sensitive — including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, and data concerning health. We only collect special category data where there is a clear reason to do so. For example, we may record the church you attend in order to keep you informed about appropriate events in your area, relying on UK GDPR Article 9(2)(a) (your explicit consent) or Article 9(2)(d) (processing by a not-for-profit body relating to its members and supporters). We never share special category data with any third party.

3. How we use your information

By law we must have a “lawful basis” to process your personal data. Depending on the activity, our lawful basis is one of: your consent; performance of a contract with you; compliance with a legal obligation; protection of vital interests; or our legitimate interests as a charity. The table below sets out what we use your data for and our lawful basis for doing so.

Our lawful basis by marketing channel

Different channels of direct marketing are governed by different rules under UK data protection law and the Privacy and Electronic Communications Regulations (PECR). The basis we rely on depends on the channel:

• Post — our legitimate interests as a charity, balanced against your rights and freedoms. You have the right to object at any time and we will stop.
• Phone — our legitimate interests for numbers that are not registered with the Telephone Preference Service (TPS). For TPS-registered numbers, we contact you only with your explicit consent. You can opt out at any time.
• Email and SMS — your consent. We do not currently send marketing emails or texts on a legitimate-interests basis. If at any time we do so under the PECR “soft opt-in” (which is only available where you have purchased goods or services from us, such as through our shop or for paid events), we will give you a clear opt-out in every message.

Where we rely on legitimate interests, we have weighed our interests as a charity raising funds for the Church in the MENA region against your rights and freedoms. We believe our supporters share our interest in this work and expect us to tell them about new opportunities to contribute. You have the right to object at any time — see Section 9.

4. Information about children

We do not knowingly collect personal data from anyone under the age of 16. If you are under 16 and would like to join our mailing list, make a donation, or share personal information with us, please ask a parent or guardian to do so on your behalf. We set this threshold higher than the UK legal minimum (which is 13 for some online services) to provide an additional level of protection for young people.

5. Automated processing and profiling

Some of the ways we manage our supporter communications involve automated processing of your personal data. We are open about this and you have the right to object — see Section 9.

Dataro — supporter analytics

We use Dataro, a specialist supporter-analytics platform, to help us decide which supporters are most likely to be interested in a particular appeal, communication or campaign. Dataro analyses your previous engagement with SAT-7 UK (for example, your donation history and how you have responded to past communications) and produces a score that helps us send you more relevant communications and fewer irrelevant ones. This is a form of profiling.

The recommendation itself is generated automatically by Dataro. Before a mailing goes out, our Supporter Services team applies a number of checks to the recommended list — most importantly, removing anyone who has not given valid consent to be contacted by that channel, or who has opted out of marketing. These checks do not involve a person reviewing every individual recommendation; they apply rules across the whole list.

We do not consider that a decision to include you in (or exclude you from) a particular fundraising mailing has legal or similarly significant effects on you, so Article 22 of the UK GDPR (which restricts decisions made solely by automated means with significant effects) does not apply. You do, however, always have the absolute right to object to receiving direct marketing — see Section 9 — and you can also ask us to stop using Dataro or similar profiling in connection with your data.

Wealth screening

Sometimes called “supporter research”, this is the practice of using publicly available information (for example, Companies House filings or data from trusted research providers) to identify supporters who may be in a position to partner with our work in a greater capacity. We do this so that any request for funds we make to you is appropriate and does not cause offence. You can opt out of this processing at any time by contacting us.

Social media advertising

We use social media audience tools (such as Facebook’s Custom and Lookalike Audiences and Google Ads) to display advertisements to existing supporters and to people who share similar interests. Whether you see these adverts depends on your settings on each platform. See the platforms’ own privacy policies (Meta, X, Google, LinkedIn) for how to manage your preferences.

6. When we share your information

Your privacy is important to us. We never share your information with other organisations for their own purposes. We do, however, share limited information with trusted suppliers and partners who help us deliver our work. In every case, we share only what is necessary, we have a written data-sharing agreement in place, and the supplier may only use the data for the agreed purpose.

Examples include sharing your information with:

• Mailing partners (such as Yeomans and EPLS) to send our postal mailings.
• Our customer relationship management (CRM) provider (Blackbaud) to store your data securely and manage our communications.
• Data analysts (such as Dataro) to help us identify which supporters are most likely to be interested in particular appeals.
• Email providers (such as Dotdigital) to send our emails.
• Search engines (such as Google) to deliver relevant adverts.
• Social media networks (Facebook, X, Instagram, YouTube/Google, LinkedIn and WhatsApp) — and third-party intermediaries such as Arkyard — to deliver adverts. If you do not want this, please email respond@sat7uk.org to opt out.
• Payment processors (such as Stripe, Committed Giving and PayPal) and Blackbaud to receive donations.
• Independent research organisations, with your consent, to collect feedback on our performance.
• HM Revenue & Customs, to reclaim Gift Aid on your gifts.
• Training providers, where you have applied for a role or provided a reference.
• Telephone fundraising agencies (such as NTT) to contact you by phone — you can opt out at any time.
• SAT-7 International Trust, where you have donated for a specific purpose that they administer.

We may exceptionally need to share your information to comply with legal obligations or in an emergency.

7. How we keep your information safe

Security

We take security seriously. Our computer network is protected and monitored. Access to your information is restricted to staff whose role requires it and who have received data protection training. We do not store credit or debit card details — these are passed securely to trusted payment processors. We hold bank account details only for collecting direct debits and standing orders.

International transfers

Most of your data stays in the United Kingdom. Some of our suppliers may, however, transfer or store your data outside the UK — for example, where a cloud platform uses servers in another country. Where data is transferred outside the UK, we make sure that one of the safeguards required by UK GDPR is in place — typically the UK International Data Transfer Agreement (UK IDTA) or the EU Standard Contractual Clauses with the UK Addendum, plus any additional measures needed to protect your data. You can ask us for more information about these safeguards using the contact details in Section 10.

8. How long we keep your information

We keep your personal data only for as long as we need it for the purpose it was collected, and for any periods required by law. For example, we keep records of donations to meet HMRC requirements, but we keep medical information for an overseas trip only until the trip is complete.

Our general policy is to remove personal information from our database after 10 years of no incoming contact, unless you have been a donor, member, employee or volunteer; have asked us not to contact you; or have indicated you will leave a legacy. We may keep limited information for longer to administer legacies. When personal information is no longer needed, we delete or dispose of it securely.

9. Your data rights

Under the UK GDPR and the Data Protection Act 2018 you have a number of rights over the personal data we hold about you.

You also have the right to withdraw consent at any time.

Where we are using your data because you gave us consent, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of anything we did with your data before you withdrew it.

How to use your rights

Contact us using the details in Section 10. We will normally respond within one calendar month of receiving your request. If your request is complex or you have made several requests, we may need a further two months — we will let you know within the first month if so. There is no charge for making a request. We may ask you to confirm your identity if there is reasonable doubt about who you are, and we will ask for the minimum information needed to do so.

10. Contact us and complaints

To exercise a right, ask us a question, update your preferences or make a complaint, please contact us:

Complaining to us

If you are unhappy with how we have handled your personal data, please tell us first using the contact details above or following our Complaints Policy (available on our website). We will always try to resolve concerns directly.

Complaining to the regulator

You also have the right to complain to the Information Commissioner’s Office (ICO) at any time — you do not have to come to us first:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Cookies

Our website uses cookies — small files stored by a website on your computer. We use some cookies for essential security and payment functions, and others (including from third-party providers) to understand how the site is used and to improve it. You can choose which non-essential cookies to allow when you first visit. You can also change your browser settings to disallow cookies or delete cookies already on your computer.

For full details, please see our separate Cookies Policy at sat7uk.org/terms-and-conditions/cookie-policy.

12. Changes to this notice

This notice was last updated on 19th May 2026. We may update it from time to time to reflect changes in our processes, the law, or ICO guidance. The current version is always available on our website. If we make significant changes, we will let you know.