TRUST FRAMEWORK

Privacy Policy

This document forms part of the Switch4Good Trust Framework and explains how we operate in this area.

These Terms apply to your use of the website operated by Switch4Good Limited (Company No. 17000412), registered in England and Wales with its registered office at First Floor, 5 High Street, Westbury-On-Trym, Bristol, United Kingdom, BS9 3BY.

Information We Collect

We collect only the information necessary to provide our services and improve your experience:

  • Contact Information: Name, email address, phone number
  • Transaction Data: Switching history, provider choices, cause selections
  • Device Information: IP address, browser type, device type, usage patterns
  • Communication Data: Messages, support requests, feedback

Outbound click tracking

When you click through to a provider, we record the click — which provider and when — so any resulting commission can be directed to your chosen cause. For fraud prevention and troubleshooting we also briefly log technical details (your browser's user-agent and the page you came from). These technical details are automatically deleted after 90 days, and are never shared with third parties or included in any export.

Suggestions and feedback

When you send us an idea through our suggestions page we store what you write, the date you sent it, and an anonymous visitor token kept in a cookie. That token lets us count one reaction per visitor and lets you change your mind later. It is not your name, your email or your account, and we do not use it to work out who you are.

A suggestion is only published after a moderator approves it. Once approved it appears on the public roadmap with your words as you wrote them, so please do not include personal details you would not want shown in public. We keep suggestions while the roadmap entry is still relevant, and we will remove yours if you ask us to.

How We Use Your Information

Your information is used for legitimate purposes:

  • Process your switches and direct contributions to causes
  • Provide customer support and respond to inquiries
  • Send transactional emails and updates
  • Improve our platform and personalise your experience
  • Comply with legal obligations and prevent fraud

We use automated tools to sort the messages you send us and route them to the right person. A person reads and replies to every message; nothing is sent automatically.

Your Rights Under GDPR & UK Data Protection Law

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request corrections to inaccurate data
  • Right to Erasure: Request deletion of your data (subject to legal requirements)
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to certain types of processing

To exercise any of these rights or for data protection inquiries, contact our Data Protection Officer at dataprotection@switch4good.co.uk.

Data Sharing

We never sell your personal information. We share data only with trusted partners necessary to provide our services:

  • Payment Processors: To process your transactions securely
  • Partner Providers: To complete your switches
  • Cause Organizations: To direct your contributions
  • Service Providers: For hosting, analytics, and support

All partners are bound by strict confidentiality agreements and are only permitted to use your data for the specific purpose we've shared it for.

When a supporter chooses a school or charity that hasn't joined, we may contact that organisation at its published address to invite it to register.

Data Security

We implement industry-leading security measures to protect your data:

  • End-to-end encryption for all sensitive data
  • PCI DSS compliance for payment processing
  • Regular security audits and penetration testing
  • Strict access controls and employee training

Spam protection on our contact form

Our contact form uses hCaptcha, provided by Intuition Machines, Inc. (USA), to stop spam. It processes your IP address and browser details for that purpose only.

Choose a cause and switch.

Pick a cause and switch a service you already pay for — about three minutes, at the same price you’d pay direct.

Version1.5
Last Updated5 October 2026
Next Review27 January 2027
Version history & changelog6 entries

How We Use Your Information: messages sent to us are sorted and routed by automated tools; a person reads and replies to every message. Wording approved by Robert 2026-10-05.

Data Sharing: we may contact a school or charity a supporter has chosen, at its published address, to invite it to register (cause outreach). Wording approved by Dan Bates 2026-09-27.

Added the contact form's spam protection (hCaptcha, Intuition Machines, Inc., USA): what it processes and why. Wording approved by Dan Bates 2026-09-23.

Added the Suggestions and feedback section (visitor token, moderation, publication and retention of suggestions). Content went live 2026-07-19 when migration 20260719170000 applied on merge; that file carried a "do not apply without approval" header which the merge==apply pipeline cannot honour, so the content ran ahead of its sign-off. Dan approved v1.2 on 2026-08-20 and this entry records that approval. The gap between going live and approval is part of the record, not smoothed over.

Added outbound click-tracking disclosure (TRK-001 D6): what we log on click-through, 90-day automatic deletion of technical details (user-agent and referrer), and that these are never shared with third parties or included in any export.

Initial publication of policy as part of Trust Framework v1.0 launch.

Exercise Your Data Rights

Under UK GDPR you have the right to access, correct, or delete your personal data, object to processing, or request a portable copy of your data. To submit a Data Subject Access Request (DSAR) or any other data rights request:

We will acknowledge your request within 3 working days and respond within 28 days — inside the one calendar month UK GDPR Art. 12 allows. If your request requires identity verification we may ask for additional information.

To unsubscribe from marketing emails, click the unsubscribe link in any email we send, or email dataprotection@switch4good.co.uk with “Unsubscribe” in the subject line.