Data controller and contact details

For data collected under this privacy notice, the Board of Trustees of Small Steps Foundation (“SSF”) is the Data Controller (as the term is defined in the EU General Data Protection Regulations (Regulation (EU) 2016/679). b

SSF’s Data Controller can be contacted at:

Small Steps Foundation, 25 Southdown Crescent, Cheadle Hulme, Cheadle, SK8 6EQ

Small Steps Foundation is a UK registered charity No. 1138643

Ugandan International NGO Registration No. 9016.s5914/9487

Data Sharing

In addition to the primary purposes, we are also legally obliged to share certain data with other public bodies (such as the Charity Commission) and will do so where the law requires this.

Transfers outside the European Economic Area

SSF is managed by Trustees who are based in both the UK and Uganda. Data is therefore kept on computers in both countries. Safeguarding is in place through the use of passwords and secure third party suppliers for online donations (secure payment information is never accepted by email or post).

Your Rights

 You can object or withdraw your consent to the use of your personal data at any time. This may mean however, that we are no longer able to provide you with a particular service or communication where the information processing is an integral part of the service. We will tell you if this is likely to be the case. Subject to some legal exceptions, you have the right:

  • To access the data we hold about you and to know what we are doing with it
  • To have any inaccuracies corrected*
  • To have your personal data erased*
  • To place a restriction on our processing of your data*
  • To object to processing*
  • To request your data to be ported (data portability)*

*These rights will come into force on 25 May 2018.

If you want to learn more about these rights, please see the Information Commissioner’s Office (ICO) website


If you are unhappy with the way we have processed your personal data you have the right to complain to the Information Commissioner’s Office (ICO), but we ask that you raise the issue with us first.

For information about reporting a concern to the ICO see their website: