Privacy policy

All information shared with The Jolly Foundation is treated in compliance with the provisions of the Data Protection Act 2018. As a grant-making organisation, applicants for funding voluntarily provide information to facilitate our grant-making and to further our charitable activities. Such activities may involve the publication on our website of lists of award holders.

Privacy Notice for Applicants & Grantees About this document

This privacy notice explains how The Jolly Foundation (“we”, “our”, “us,” “the Foundation”) collects, uses and shares your personal data, and your rights in relation to the personal data we hold. This privacy notice concerns our processing of personal data of:

• applicants for grant funding
• grantees (i.e. those grantees who have been awarded grant funding)
• those who have received grant funding from the Foundation in the past
• visitors to

(together, “you“, “your“).

The Jolly Foundation (a company incorporated in England and Wales with company number 15818915, and registered charity number 1209791, and which is registered with the Information Commissioner’s Office with registration number TBD) is the data controller of your personal data and is subject to the General Data Protection Regulation (the “GDPR“) with effect from 25 May 2018.

How we collect your information

We may collect your personal data in a number of ways, for example:

• from the information you provide to us when you interact with us before making an application for grant funding;
• when you submit a formal application for an award;
• from third parties, for example partner organisations (including your previous or current institutions of study) and experts involved in the peer review process for assessing grant applications, in order to verify details about you and/or your application for an award, or to administer your grant once awarded;
• when you communicate with us by telephone, email or via our website, for example in order to make enquiries about an application or an award;
• in various other ways as you interact with us during your time as a grantee for the various purposes set out below.

Where you provide us with personal data relating to others (for example, where you are making an application for grant funding on behalf of someone else or where you nominate a reviewer to liaise with the Foundation about your application), we understand that you are authorised to provide that information to us, and that you have provided this Privacy Notice to them, as appropriate.

The types of information we collect

We may collect the following types of personal data about you (and anyone at your organisation who we need to carry out due diligence checks on, for example):

• contact and communications information, including:
• your contact details (including email addresses, telephone numbers and postal addresses);
• your communication preferences;
• records of communications and interactions we have had with you, including information provided through our website (e.g. in online RSVP forms for events) or via social media;
• biographical, educational and career information, including:
• your name, title and date of birth;
• details of your education, including academic achievements;
• details of your professional activities and employment, including professional achievements;
• lifestyle information and social circumstances, only where relevant to your application or award (for example details of your ‘life events’ such as birth or adoption of children) where this affects your receipt of grant funding from us);
• your interests and extra-curricular activities, where relevant to your application or award;
• information concerning your engagement with us;
• technical data relating to your use of our website, collected through the use of cookies. A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Read here for more information on our
• and any other information relevant to a grant funding application or award.

We may also collect sensitive personal data, including information concerning your health and medical conditions (e.g. disability and dietary needs), where this is necessary for the provision of an award to you.

If we lose touch with you over time, we may use external sources to ensure that our contact details for you are up to date, allowing us to continue to communicate with you about certain activities which may be of interest to you. If you do not wish the Foundation to do this for you, please contact us using the details at the bottom of this document.

We may also use external sources, such as information you have publicly shared on social media, for the purpose of our monitoring and evaluating how the Foundation’s grant funding awards have been used and will be best used in the future.  In collecting this information, we are not intending to process it as your personal data so much as in an aggregated form for the Foundation’s statistical purposes.

How we use your information

The purposes for which we may use personal data (including sensitive personal data) we collect during an applicant’s or grantee’s association with us are at the core designed to further our charitable objectives, which are to promote the employment opportunities and skills development of young people in the UK and overseas. We will do this by:

• reviewing applications for grant funding and assessing their relative merits, including by considering whether the application fits one of our current areas of funding, arranging visits to your premises (in some cases) and by consulting third party experts for peer review purposes as part of the Foundation’s grant application process;
• providing you with information about our awards and our activities and publishing case studies and news items about our grantees and their studies, work and other achievements on our website and in electronic and printed publications (which we may send to you by post, email and potentially by other means, depending on your communication preferences);
• maintaining an archive with records of previous grants and previously supported grantees
• conducting surveys, impact assessments and other research;
• internal administrative purposes and record-keeping, including the management of any feedback or complaints.

The basis for processing your information and how we use it

We may process your personal data because it is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. In this respect, we use your personal data for the following:

• to interact with you before you make an application for one of our awards (for example, to send answer any questions you have about an award);
• when you submit a formal application for an award, in order to assess your eligibility for that award;
• if you are successful in your application, to provide you with an award in accordance with all relevant terms and conditions (and, in this respect, we may process your personal data in connection with any checks to ensure that you are complying with the conditions of your award);
• to deal with any concerns or feedback you may have;
• for any other purpose for which you provide us with your personal data in connection with an application or award, including when you interact with us in accordance with the terms and conditions applicable to the use of our website.

We may also process your personal data because it is necessary for our or a third party’s legitimate interests. Our “legitimate interests” include our charitable objectives as briefly summarised above.  In this respect, we may use your personal data for the following:

• to monitor and evaluate the performance and effectiveness of our awards;
• to seek advice on our rights and obligations, such as where we require our own legal advice;
• to keep you informed (by letter, telephone, email and other electronic means) of information, stories and news which may be of interest to you. (If you do not wish to receive such information, or if you wish to receive this information only by certain means of communication, please let us know now or at any time in the future, and your details will be removed from our mailing list or your communication preferences will be updated, as applicable.)

We may also process your personal data for our compliance with our legal obligations. In this respect, we may use your personal data for the following:

• to meet our compliance and regulatory obligations;
• for the prevention and detection of crime;
• in order to assist with investigations (including criminal investigations) carried out by the police and other competent authorities.

We may also process your personal data where:

• it is necessary to protect your or another person’s vital interests (in very limited circumstances, essentially where this is a matter of life or death);
• it is necessary for the establishment, exercise or defence of legal claims (for example, to protect and defend our rights or property, and/or the rights or property of our grantees and partner organisations);
• we have your specific or, where necessary, explicit consent to do so.

Sharing your information with others

For the purposes referred to in this privacy notice and relying on the bases for processing as set out above, we may share your personal data with certain third parties. We may disclose limited personal data to a variety of recipients including:

• to our partner organisations where necessary for the assessment of your application or administration of your award, and afterwards where we seek to keep in touch with you or keep track of your work as a grant recipient;
• third party reviewers and experts nominated by you (or selected by us) for peer review purposes;
• our employees, agents and contractors where there is a legitimate reason for their receiving the information, including third parties where we have engaged them to process data on our behalf as part of administering the award application process;
• internal and external auditors;
• when the Foundation is legally required to do so (by a court, government body, law enforcement agency or other authority of competent jurisdiction), for example by the Charity Commission.

International data transfers

As a matter of course, since the Foundation’s grant-making activities are UK based and grants are primarily available to charities in the UK, we do not transfer your personal data outside of the European Economic Area. We may, however, transfer your personal data around the world on an ad hoc basis, for example where this is necessary for interaction with you, and you are located outside of the EEA, or for the purposes of peer review. In such circumstances, we will consider whether any additional measures are required in order to give adequate protection for the information, such as the redaction of personal data when it is transferred outside of the EEA.

How long your information is kept

Certain personal data relating to unsuccessful applicants is deleted within two years of the end of the application process, except that a record of the applicant’s name, proposed project title, partner organisation with whom they are affiliated, and progress through the application process is retained indefinitely in the Foundation’s archive for statistical / research purposes.

For successful applicants (grantees), subject to any other notices that we may provide to you, we may retain your personal data indefinitely after you have finished complying with all the terms and conditions applicable to your award.

We will retain grant applicants’ personal data in order to support your relationship with the Foundation. However, if you wish to, please let us know and we will delete your personal data (except for a skeletal record of your award details, for archiving purposes).

Your rights

Under the GDPR, with effect from 25 May 2018, you have the following rights in relation to our processing of your personal data.  Please note that these rights are not absolute, and we may be entitled (or required) to refuse requests where exceptions apply.

• to obtain access to, and copies of, the personal data that we hold about you;
• to require us to correct the personal data we hold about you if it is incorrect;
• to require us to erase your personal data in certain circumstances;
• to require us to restrict our data processing activities in certain circumstances;
• to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on you;
• to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller; and
• where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal.

Note: If you have given your consent and you wish to withdraw it, please contact us using the contact details below.  Please note that where our processing of your personal data relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services.

If you are not satisfied with how we are processing your personal data, you can raise a concern with the Information Commissioner. You can also find out more about your rights under data protection legislation from the Information Commissioner’s Office (ICO).

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Contact us

If you have any queries about this privacy notice or how we process your personal data, or if you wish to exercise any of your rights under applicable law, you may contact our us by email: [email protected] .