Last updated: 1st September, 2026
This Privacy Policy explains how FoodBank360 ("we," "us," "our") collects, uses, and protects personal data. It applies to visitors to our website, prospective customers, and individuals at organisations that hold a FoodBank360 account ("Customers"). It applies whether you are based in the UK or elsewhere.
Important distinction: This Privacy Policy covers data where FoodBank360 acts as the data controller - meaning data about you as a website visitor, prospect, or Customer account-holder. If your organisation uses the FoodBank360 platform to manage referrals, beneficiaries, volunteers, or donors, that data is controlled by your organisation, not by us - we process it only as instructed by you, under our Data Processing Agreement. If you're a beneficiary, volunteer, or donor whose data has been entered into FoodBank360 by an organisation you're in contact with, please contact that organisation directly regarding your data - we are not able to respond to individual requests about that data ourselves, since we don't control it.
FoodBank360 is the data controller for the purposes described in this policy. Contact us at connect@foodbank360.com
| Purpose | Data Used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Responding to demo requests and enquiries | Name, email, phone, organisation, message | Legitimate interests (responding to your enquiry) / steps prior to a contract |
| Providing and administering your subscription | Account-holder details, billing information | Performance of a contract |
| Sending service-related communications (e.g. billing notices, platform updates) | Account-holder email | Performance of a contract / legitimate interests |
| Sending marketing communications (e.g. newsletters) | Email address | Consent (you can withdraw this at any time) |
| Website analytics and improvement | Technical/usage data | Consent (for non-essential cookies) / legitimate interests |
| Legal and regulatory compliance | As required | Legal obligation |
We use cookies and similar technologies, including Google Tag Manager, for site functionality and analytics. Full details, including how to manage your preferences, are in our Cookie Policy.
We do not sell personal data to third parties.
If you are contacting us or holding an account from outside the UK, your personal data may be transferred to and processed in the UK, and in other countries where our service providers operate, e.g. the United States, if using US-based tools. Where we transfer personal data outside the UK or EEA, we rely on appropriate safeguards, such as adequacy decisions or Standard Contractual Clauses / the UK International Data Transfer Addendum, as required by applicable data protection law.
We retain personal data only as long as necessary for the purposes described in this policy. This includes retaining some data for a set period after our relationship ends where legislation requires it - for example, UK tax and accounting rules generally require financial records to be kept for a minimum of six years.
We use technical and organisational measures, including encryption and access controls, appropriate to the data we hold. We use SSL/TLS encryption in transit, mask stored payment card details to the last four digits via your payment processor and restrict access to personal data to staff with a genuine business need. Those of our staff who process personal data do so only in an authorised manner and are subject to confidentiality obligations. We have procedures in place to respond to a suspected data security breach, and we will notify affected individuals and any applicable regulator where we are legally required to do so. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect personal data against unauthorised access, loss, or misuse.
UK residents: You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.
EU/EEA residents: You can complain to your local data protection supervisory authority.
Residents of other countries: Local data protection laws may give you additional or different rights; where applicable, we will honour requests consistent with those laws. Contact us using the details below and we will respond appropriately to your jurisdiction's requirements.
To exercise any of these rights, contact us at connect@foodbank360.com
Our website and Service are intended for use by adults acting on behalf of an organisation. We do not knowingly collect personal data directly from children through this website.
We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date, and notify Customers of material changes by email.
Questions or requests regarding this policy can be sent to connect@foodbank360.com.
Takes less than 2 minutes. Prefer to talk? Call 0115 786 0269.