Prototype privacy information · Version 13 August 2026
Privacy by purpose, not publicity.
Donor survey
The survey does not ask for your name, email, donation amount or the charities you support. We store your answers, completion timing and any source/campaign identifiers included in the link. Please do not include personal or sensitive information in free text. Because responses do not contain a participant identifier, we may be unable to locate or withdraw one response after submission.
Eligibility and analysis
We ask whether you are 18 or over, live in the UK and donated recently so the research can be analysed against its intended audience. We do not ask for your date of birth or address. Published findings will be aggregated.
Pilot interest
If you register interest, we store the contact details you submit so NINOFF can discuss research or a possible pilot with you. These details are stored separately from survey responses and are not published.
Technical data
The service uses a necessary, secure session cookie for form protection and administrator sign-in. Apache security logs can include an IP address, requested page and browser information. Application logs are retained for 14 days; the service does not use advertising trackers.
Retention
Survey free text is removed after six months and complete survey responses after 18 months. Pilot-interest details are removed after 12 months unless an active conversation or pilot provides a continuing reason to retain them. Automated retention checks run daily.
Financial transparency
Public demonstrator pages do not expose donor identities. A production service will keep internal financial records separate from information explicitly approved for publication.
Controller details still to be confirmed
NINOFF is an early product experiment and is not yet recruiting a paid research cohort. The responsible legal person or entity and a monitored privacy contact must be confirmed before that recruitment begins. This is an explicit launch blocker, not an omitted detail.