Legal
Privacy notice
CauseWork is a UK service that matches skilled volunteers with charities and community groups. This notice says what we hold about you, why, where it lives and what you can do about it.
Last updated 7 September 2026.
Who we are
- CauseWork is run from the United Kingdom and reached at info@causework.co.uk.
- Before accounts open this notice will name the registered data controller and its ICO registration number.
- We are the controller for the data described here. Organisations you contact become controllers of what you send them.
What we collect
- Account: your name and email address, held by our sign-in provider, Clerk.
- Volunteer profile: display name, postcode, town, what you write about yourself, skills, causes, availability, and optionally a LinkedIn or portfolio address and a CV.
- Organisation profile: the organisation’s details, regulator number, address and the contact’s email address.
- Roles, applications, questions and messages you send through the service, and whether an organisation placed you.
- Vetting records: the automatic rule results, the review decision and note, and a short machine-generated assessment of your submission.
- Technical data: server logs with IP addresses for security, and cookieless page analytics.
Why we use it
- To run the service you asked for: checking that organisations and volunteers meet the published criteria, showing roles, carrying applications and messages between the two sides, and emailing you about them. Legal basis: performance of a contract with you.
- To keep the service safe and lawful: preventing spam, fraud and misuse, and keeping an audit of vetting decisions. Legal basis: legitimate interests.
- To email you weekly about roles or volunteers matching a search you saved, only while that setting is on. Legal basis: consent, withdrawn from your account at any time.
- We do not sell data, and we do not use it for advertising.
Where it lives
- We choose providers that support our obligations under UK data protection law. Data is stored or processed in the UK, the European Union, or the United States under the UK–US Data Bridge or other approved safeguards.
- Profiles, roles, messages and CVs are stored in Convex in the European Union (Ireland).
- Sign-in and account data are held by Clerk, which certifies to the EU-US Data Privacy Framework and its UK Extension.
- Email is sent by Resend from its European region; Resend is also certified under the Framework and the UK Extension.
- Postcodes are looked up through postcodes.io (a UK service) to find distances; only the postcode is sent.
- AI helps check submitted profiles and roles against our criteria. We make every reasonable effort to remove personal information before any text is sent to an AI provider. AI providers are not permitted to use personal information for training.
- The website is hosted by Vercel.
Who sees what
- Volunteers: your public profile, if you chose to be findable, is visible to approved organisations that have a live role. Your email address is never shown to them.
- When you apply or reply, the organisation sees your profile, your messages and your CV if you attached one.
- Organisations: your approved profile and live roles are public on the website and in our partner feed.
- CauseWork staff see everything needed to vet and support the service.
- We disclose data to authorities only where the law requires it.
How long we keep it
- Your profile, conversations and placements stay until you delete them from your account, which removes them at once.
- Vetting records are kept for two years after the last decision, so that a refusal can be reviewed and abuse traced.
- Roles that close stay visible to the organisation that posted them until deleted.
- Server logs are kept for 30 days.
Your rights
- You can see, correct and delete your data from your account at any time; a delete button on your account page removes the profile and everything hanging off it.
- You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to move it, by emailing info@causework.co.uk. We answer within one month.
- You can complain to the Information Commissioner’s Office at ico.org.uk.