1. About us
A The British Charitable Foundation (“FBB”) respects your privacy and is committed to protecting the personal data processed in its activities and digital channels. For the purposes of Law No. 13.709/2018 (General Personal Data Protection Law — LGPD), the FBB acts as the data controller when it determines the purposes and means of such processing.
Review required before final publication: Please enter the full company name, CNPJ, official address, and the name or channel of the person responsible for Data processing and a dedicated email address for data subjects’ enquiries.
2. What personal data do we process?
The data processed depends on how you interact with FBB and may include:
- Contact: name, email address, telephone number, subject and message content.
- Donations: name, andemail, telephone number, CPF, date of birth, gender, frequency, amount, payment method and, where required for a boleto, address.
- Communications: email and registration to receive news and institutional information.
- Browsing: IP address, date and time of access, technical browser information and cookie preferences, when applicable.
- Exercise of rights: – data required to verify identity and fulfil requests relating to the LGPD.
A FBB endeavours to collect only data that is adequate, relevant and necessary for each purpose. Card details and security codes must not be stored by FBB; where there is integration with a payment provider, such data must be processed directly by a specialist provider.
3. Purposes and legal bases legal
The data may be used for:
- responding to enquiries, questions and requests;
- to record and manage donation intentions or transactions;
- to comply with legal, regulatory, tax and accountability obligations;
- to send corporate communications where authorised or where there is another applicable legal basis;
- to prevent fraud, abuse and security incidents;
- to maintain the operation, security and improvement of the website;
- to fulfil data subjects’ rights and to defend our rights in administrative or legal proceedings.
Depending on the context, the processing may be based on consent, compliance with a legal or regulatory obligation, the fulfilment of procedures relating to a data subject’s request, the regular exercise of rights, the protection of life, legitimate interest or another ground provided for in the LGPD. Where consent If this is the basis used, it may be revoked through a free and simplified procedure.
Legal review required: Map each actual FBB transaction and confirm its legal basis, retention period, operator and any international transfer. Consent should not be automatically adopted where another legal basis is appropriate.
4. Sharing and operators
FBB may share data strictly necessary with suppliers that support its operations, such as hosting, email, technology, security, customer service, accounting, auditing and payment processing, always in accordance with instructions and safeguards compatible with the LGPD.
The postcode-based address completion feature uses the ViaCEP service. External links and embedded resources may be subject to the policies of the respective providers. Data may also be shared where required by law, by order of a competent authority, or to protect the rights of FBB and third parties.
Prior to the final version of this policy, FBB must maintain an up-to-date inventory of suppliers, storage locations and any international transfers.
5. Cookies and similar technologies
Cookies are small files stored on your device to enable functionality, remember preferences or gather information about how you use a website. FBB may use:
- Essential cookies: – essential for security, functionality and features requested by the user.
- Preference cookies: remember choices made whilst browsing.
- Tracking cookies: help us understand the website’s performance and usage.
- Marketing cookies: used for advertising and campaign measurement, should they be implemented.
Cookies that are not strictly necessary should only be enabled following a free and informed choice. Visitors must be able to accept, reject or manage categories and change their decision at a later date. The actual list of cookies, providers, purposes and durations will be made available in the preferences panel.
6. Security and retention
A FBB implements technical and administrative measures designed to protect data against unauthorised access, loss, alteration, disclosure or improper destruction. No environment is entirely immune to risks, but controls must be continuously reviewed and improved.
The data will be retained for as long as is necessary to fulfil the stated purposes, to comply with legal and regulatory obligations, to the normal exercise of rights, and in accordance with the timeframes set out in the internal retention policy. Thereafter, it must be deleted, anonymised or retained only in the circumstances permitted by the LGPD.
7. Data subjects’ rights
Under the LGPD, you may request, where applicable:
- confirmation that your personal data is being processed and access to data;
- correction of incomplete, inaccurate or out-of-date data;
- anonymisation, blocking or deletion of unnecessary data or data processed in breach of regulations;
- portability, subject to the applicable rules;
- information on data sharing and on the possibility of withdrawing consent;
- withdrawal of consent and erasure of data processed on that basis, subject to the legal grounds for conservation;
- objection to processing carried out in breach of the LGPD;
- review of decisions made solely on the basis of automated processing, where applicable.
To protect the account holder, FBB may request reasonable information to confirm their identity before complying with the request. The exercise of rights is free of charge.
Children and adolescents
The website is not intended for the deliberate collection of children’s data. Where an activity involves children or young people, the FBB must act in their best interests and comply with the specific requirements of the applicable legislation.
8. Contact and data protection officer
Enquiries regarding privacy and data protection may be directed to the channel below:
Privacy channel: [INSERIR E-MAIL/CANAL OFICIAL]
Person in charge: [INSERIR NOME OU IDENTIFICAÇÃO E CONTATO]
Address: R. Ferreira de Araújo, 741 — 1st floor — Pinheiros — São Paulo/SP [CONFIRMAR]
If you feel that your request has not been dealt with appropriately, you may also lodge a complaint with the National Data Protection Authority (ANPD), in accordance with the relevant procedures applicable.
9. Changes to this policy
This policy may be updated to reflect legal, regulatory, technological or operational changes. Relevant changes will be communicated in an appropriate manner and, where processing is based on consent, the data subject will be given the opportunity to reassess their consent.
Base version: 21 July 2026. Status: draft subject to legal validation and institutional.