Altura FundraisingBack to home

Privacy Policy

Last updated: 17 February 2026

1. Data Controller

Altura Media Ltd ("we", "us", "our") operates the Altura Fundraising platform at alturamedia.site. We are the data controller responsible for personal data collected through this platform. We are registered in England and Wales under company number 16752254, VAT registration number 505643406.

Registered office: 86-90 Paul Street, London, Greater London, England, EC2A 4NE.

Data Protection Officer: Zoltán Pallay-Farkas
Email: pallayfarkaszoltan@gmail.com

2. Scope and Legal Basis

This Privacy Policy applies to all personal data collected through the Altura Fundraising platform, including the main website at alturamedia.site, embeddable donation widgets hosted on third-party websites, and the foundation administration dashboard. We comply with both the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR, Regulation 2016/679) as applicable.

We process personal data only where we have a lawful basis: performance of a contract, compliance with a legal obligation, our legitimate interests, or your consent.

3. Information We Collect

3.1 Donor Data

When you make a donation through our platform or an embedded widget, we may collect:

  • Contact data: Name and email address (if provided by you or required by the foundation).
  • Transaction data: Donation amount, currency, date, and payment method used. Payment card details are processed directly by Stripe and are never stored on our servers.
  • Technical data: IP address, browser type, and device information, collected automatically by our hosting infrastructure.

3.2 Foundation Data

When a foundation registers on our platform, we collect:

  • Organisation data: Foundation name, registration number, tax number, registered address, and website URL.
  • Representative data: Name, date of birth, home address, and government-issued ID of the authorised representative, as required by Stripe for identity verification (KYC).
  • Financial data: Bank account details (IBAN) for receiving fund transfers.
  • Communication data: Emails and correspondence during onboarding and ongoing support.

4. How We Use Your Data

  • Contract performance: To process donations, transfer funds to foundations, manage foundation accounts, and provide platform services.
  • Legitimate interests: To prevent fraud, maintain platform security, generate anonymised analytics, and improve the platform.
  • Legal obligation: To comply with tax, accounting, anti-money laundering, and regulatory requirements.
  • Consent: To send marketing or fundraising communications where you have opted in.

5. Third-Party Processors

We share data only with trusted third-party processors necessary for platform operation:

  • Stripe (Stripe Payments Europe, Ltd.) - Payment processing and Stripe Connect for foundation payouts. Stripe handles all card data directly and is PCI DSS Level 1 certified. Foundation representative data is processed by Stripe for KYC verification. See Stripe's Privacy Policy.
  • Vercel Inc. - Platform hosting and deployment. See Vercel's Privacy Policy.
  • Cloudflare, Inc. - DNS management and CDN. See Cloudflare's Privacy Policy.

We do not sell, rent, or trade personal data to any third party. Data is shared with processors only to the extent necessary for them to perform their services.

When you make a donation, the receiving foundation may have access to your name and email address (if provided) through their Stripe dashboard, for the purpose of issuing donation receipts or acknowledgements.

6. International Data Transfers

Some of our third-party processors operate in the United States. Where personal data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place, including EU-US Data Privacy Framework certification, Standard Contractual Clauses (SCCs), and adequacy decisions issued by the UK Secretary of State or European Commission.

7. Data Retention

  • Donation transaction records: 7 years from the date of the transaction, as required by HMRC and applicable tax regulations.
  • Foundation account data: For the duration of the service agreement, plus 12 months after termination.
  • Donor contact data: Retained only for as long as necessary to process the donation and provide a receipt, unless the donor opts in to further communications.
  • KYC verification data: Processed and retained by Stripe in accordance with their data retention policies and applicable regulations.

8. Cookies

This platform uses only essential cookies strictly necessary for the site and payment processing to function. These do not require consent under UK GDPR or the Privacy and Electronic Communications Regulations (PECR).

We do not use analytics, advertising, or tracking cookies. If we introduce non-essential cookies in the future, we will implement a consent mechanism and update this policy.

9. Your Rights

Under UK GDPR and EU GDPR, you have the right to: access your personal data, rectify inaccurate data, request erasure, restrict processing, data portability, object to processing, and withdraw consent at any time.

To exercise any of these rights, email us at pallayfarkaszoltan@gmail.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data, including SSL/TLS encryption across all domains and subdomains, PCI DSS-compliant payment processing via Stripe, secure hosting on Vercel, and Cloudflare DDoS protection. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered foundations via email. The "last updated" date at the top indicates when this policy was most recently revised.

12. Contact and Complaints

Data Protection Officer: Zoltán Pallay-Farkas
Altura Media Ltd
86-90 Paul Street, London, EC2A 4NE, United Kingdom
Email: pallayfarkaszoltan@gmail.com

UK residents: You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

EU/EEA residents: You may lodge a complaint with your local supervisory authority. For Hungarian residents, this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) at naih.hu.