Privacy Policy

2026 CoppaFeel! Privacy Policy

CoppaFeel! is the first breast cancer charity in the UK to solely create awareness amongst young people, with the aim of instilling the knowledge and tools they need to get to know their bodies. We like to talk about a serious message in a light-hearted way, empowering people to start healthy habits for life, so that everyone can have the best possible chance of surviving breast cancer.

Our community are important to us and we’re committed to protecting the personal information you give us. Please read this page to understand how we use and protect your data. If you’re looking to manage your cookies preferences, you can do so on our Cookie Settings page (or in the cookies preference centre which can be opened from the bottom right hand corner of any CoppaFeel! webpage).

The processing of your information is carried out by or on behalf of the data controller CoppaFeel!. When we refer to “we” or “us” on this page, we’re talking about: CoppaFeel!, which is a registered charity in England and Wales (1132366), and Scotland (SC045970) & a company limited by guarantee (06974733) and. CoppaFeel! Trading Ltd, which is our trading subsidiary (company number 10707836). CoppaFeel! is registered under the Data Protection Act 2018 (registration reference: ZA113845), as is CoppaFeel! Trading Ltd (ZA836425).

If you have any questions about this privacy policy or how we use your information please send an email to data@coppafeel.org. If we are unable to resolve any issues you may have or you would like to make a further complaint, you can contact the Information Commissioner’s Office by visiting http://www.ico.org.uk/ for further assistance.

We may revise this privacy policy from time to time. Any change will take effect once the revised privacy policy is available on this website.

Last updated July 2026

When do we collect your personal information?
We have legitimate interest to engage in activities which help us further our aims as a charity, but we will only collect and use your personal information where we have justification to under Data Protection law. We will collect your data for the following reasons:

CoppaFeel! news and updates: We love sharing the latest news from CoppaFeel! and talking about our work to spread the chest-checking message. If we’ve asked you for consent to contact you for this purpose, we will only send you information about our activities including health information, opportunities to help support us through volunteering, fundraising and events or news on our wider work to your email, phone or postal address (depending on the option you chose) if you’ve given us consent. We may sometimes send you news and updates by [email/text] if you have previously expressed interest in our charitable purposes or offered to support our work. You can change your communication preferences or opt-out of receiving these communications at any time here.

When you visit our website: When you visit our website we may collect technical information including the IP address of your computer (please see more information below on how we use cookies). This information is used to administer our site and for internal operations, including troubleshooting, testing, analysis of how our services are used and identifying trends in order to improve user experience. You can find more information about using our website in our terms of use.

When we process your financial transactions: We have a legal obligation to keep the data you give us when making financial transactions to process Gift Aid claims, to maintain records for audit purposes and to help prevent fraud.

We may receive your personal information from a third-party platform, such as Enthuse or Just Giving. Donations made via our website are processed by the Stripe payment platform who have their own privacy policy and terms.

Recruitment: For full details on how data is used during the recruitment process please see our Recruitment Privacy Policy.

To provide you with information, services or products you’ve requested: If you buy something from our shop or request awareness or fundraising materials via webforms on our website, we will use the personal information you give us to fulfil our contractual obligations and fulfil your request. We may also keep a record of these requests on our database.

Text reminders: We use the third party Firetext to send our text messages, who are subject to their own privacy policy. By providing your number you agree to us texting you once a month reminding you to check your boobs/pecs/chest. This is purely a reminder service and your number will not be used for any other purposes. For more information about this please email education@coppafeel.org.

Managing relationships with our volunteers and fundraisers: If you are volunteering or fundraising for us we have legitimate interest to use the personal information you’ve provided to manage our ongoing relationship with you. We might contact you with information on your event, fundraising tips, training hints, volunteer guidance or other relevant information that might be useful to you.

We also use third party platforms Rosterfy and Social Sync to help us manage our volunteer and community fundraising programmes. Working on behalf of CoppaFeel!, these platforms are subject to their own privacy policy and are under contractual obligations as data processors to only use your information as we instruct (data collection and storage). If you are required to use these platforms as part of your interaction with CoppaFeel! their T&Cs will be shared with you on first use.

Event photographs and videos: If you attend an event as our volunteer or fundraiser, we may use photographs and video footage that you share with us for promotional purposes, including on websites, social media, printed materials and other media. We have legitimate interest to promote and document the fundraiser event. The photographs and video footage you provide us with may also be shared with third-party partners.

When share your story with us: Young people are much more likely to feel empowered by stories of other young people who have been affected by breast cancer, so we offer the opportunity for you to share your real story or experience. Your story may be used in impact reporting, media interviews or funding opportunities but we won’t share identifiable details – including recording or photography – without your consent.

Surveys and research: We may ask you to complete surveys that we use for research purposes, as part of our legitimate interest to understand more about how people interact with our services and what they would like us to do more of. When we conduct any research we always apply proportionate ethical review and safeguarding measures and will clearly explain to you what data we collect, why, how long we keep it, and your rights. We will always respect your rights when we’re relying on legitimate interest to use your data and consider the impact it will have on you. When reporting our findings we prefer to use pseudonymised or anonymised data.

Email correspondence: If you contact us, we will use the information you give to us to handle your request, enquiry or complaint. We may also keep a record of the correspondence on our database.

Legal and Regulatory Obligations: Sometimes we’re bound by law to process your data (for example, to comply with finance and tax laws), and sometimes we might need to use your data to ensure we meet our regulatory requirements as a charity (for example, to make reports to the Charity Commission).

The Self-Checkout: CoppaFeel!’s Self-Checkout is a web app designed to provide you with personalised information about getting to know your chest. It offers breast awareness information and guides you through the stages to getting comfortable checking your chest.

We work with a third-party technology company called Milk and Tweed to provide access to the Self-Checkout. Milk and Tweed are responsible for maintaining the Self-Checkout, making sure the webapp works, and ensuring that the personal data you share is kept safe. The Self-Checkout is hosted in the UK and your personal information won’t leave the UK.

The Self-Checkout uses cookies and similar technologies to help the web app to function and to collect information to help us adapt and improve the Self-Checkout to make the experience of using it better – we ask for your consent to use these when you first use the self-checkout. You can find more information about cookies below.

When you use the Self-Checkout you will be asked to provide some information about your personal circumstances, such as whether you are pregnant. We use this personal data to provide you with information that is relevant to you within the web app. We do not make a record of your answers, we never link the information to your personal profile or to any other information that could be used to identify you.

You can ask CoppaFeel! to delete the personal data you’ve given us via the Self-Checkout at any time by contacting data@coppafeel.org.

If you sign up to receive email reminders through the Self-Checkout we will ask you to give us your name and the email address that you would like us to send the reminders to. We will only use your email address for this purpose. We use the third-party MailChimp to send our emails, who are subject to their own privacy policy. You can unsubscribe at any time by clicking the unsubscribe link on any reminder email.

If you sign up to receive text message reminders, we will ask you to give us your mobile phone number so we can send the reminders. We use the third-party Firetext to send our text messages, who are subject to their own privacy policy. We will only use your mobile phone number for this purpose. You can unsubscribe from receiving reminders at any time by replying to any reminder text with STOP.

If you ask us to set a reminder in the calendar on your phone, an Internet Calendar Scheduling (ICS) file will be downloaded and automatically uploaded to your calendar. ICS files are a type of file most email and calendar programmes use to enable you to publish and share calendar information on the web and over email, but we will not ask you for any personal data or download any software onto your phone or desktop. You can delete the reminder this from your calendar at any time.

You can also choose to share content to your social media profiles through the Self-Checkout. If you choose to do this, the third-party social media provider will be responsible for how your personal data is used. We always recommend that you have a look at the social media provider’s own privacy policy before sharing your personal data on their site.

What about sensitive information?
We recognise the value in encouraging a diverse range of perspectives, skills, experience and knowledge at CoppaFeel!. Our charity is committed to the positive promotion of equality, diversity and inclusion in our staff, volunteer programmes and projects.

In order to monitor our progress in this area we may collect personal information of people who engage with our work (such as volunteers, job applicants, event attendees, project participants) using our Equal Opportunities Monitoring form. Some of the personal information that you may share with us may be very sensitive, including what is legally known as special categories of personal data. This personal information could be relating to your racial or ethnic origin, your health, religious or sexual orientation, sex life, political opinions, religious or philosophical beliefs. We lawfully collect this data as it is of substantial public interest. Submitting this data is entirely optional, is anonymous and is in no way linked to any application you have made. Staff at CoppaFeel! have had training on how to responsibly look after special category data.

Who do we share your personal information with?

We will only share your personal information with third parties:

in the ways we have described in this privacy policy;
when we are legally required to; or

when we appoint third parties to work on our behalf when we have a legal basis to do so and they are under contractual obligations as data processors to only use your information as we instruct and for no other purposes.

Examples of how we may share your data:

Regulatory bodies and/or law enforcement authorities to comply with a regulatory requirement, for example, making returns to HMRC or reports to the Charity Commission; as part of the transfer of our assets, for example if CoppaFeel! merges or collaborates (on a temporary or permanent basis) with another organisation.
Health and safety or law enforcement authorities when we believe an individual may be in danger.
Financial providers or fundraising websites assisting us with processing transactions.
Professional advisers and service providers such as accountant, auditors, HR and/or legal advisors.
Companies who deliver services on our behalf such as our text reminders, Self-Checkout, fulfilment of good, distribution of awareness and fundraising materials.
IT and other technical support companies to administer services and enforce any terms and conditions or agreements that may apply.
We use Meta’s Facebook Pixel and the Conversions API. If you are registered with a Facebook service, Facebook Pixel and Conversions API track information about your visits to our website or interactions with our ads to enable us to display relevant CoppaFeel! related advertising to you on other websites. This data is encrypted and not used for any other purposes. You can read more information about how your data is used under Cookies below.
Third party agencies sometimes help us to establish the most valuable audiences for our fundraising, education and advertising campaigns. We may use your information to analyse the demographic of people we are reaching with our information, services and products, as we have a legitimate interest to understand more about how people interact with us. We can use this identify people with similar characteristics to you that we can spread our message to in the future.

If you prefer that we do not share your information with third-party platforms, you can contact us by email on data@coppafeel.org or post at CoppaFeel!, Unit 4 Bickels Yard, 151-153 Bermondsey Street, London, SE1 3HA or by adjusting your settings on social media, apps, and advanced TV platforms.

How do we look after your personal information?

We take looking after your personal information seriously and take measures to protect your data against unlawful access and accidental loss or damage. These measures include:

Regular training for the CoppaFeel! team on responsible data handling
When necessary, disposing of or deleting your personal information in a secure way
Working with our IT providers to ensure they maintain appropriate IT security
Sometimes third parties that work on our behalf process information outside the UK, in countries that may not be subject to the same Data Protection laws. In these instances, we assess the adequacy of their data protect standards and if necessary, ensure there is a contract in place that requires them to handle your personal information in line with UK privacy regulations. We are committed to looking after your personal information, do get in touch with us on data@coppafeel.org if you would like to know more about how we look after your data.

How long do we keep your personal information for?

We don’t keep your personal information for longer than needed. Generally, the required retention period for any personal information will be 7 years from the date of us receiving that personal information. Sometimes legal obligations mean we have to keep data for longer (for example, in the event that legal proceedings apply to the personal information), or we’re legally required to delete information after a shorter retention period.

Where you have given consent for us to have your personal information, such as to receive email updates of our latest news we shall continue to use it for that purpose for two years from the last date on which you have interacted with us, at which point we will ask you again if you wish to continue your consent. If at that point you do not respond we will cease to use your personal information for that purpose.

We run a data cleanse of our text reminder service subscriber list twice per year (June and December) and remove subscribers whose messages have consistently been undelivered for the previous 6 month period. If you are unsubscribed due to this but later want to re-subscribe, you can do so at any time.

Cookies and similar technologies

We use cookies on our website to help us understand what our users’ interests and preferences are to ensure the website is as user friendly as possible. A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser and us to track the use of our website. You can read more about the cookies we use on our website, what they do and control which ones you receive on our Cookie Settings page.

We also use similar technologies, such as the Facebook Pixel and the Conversions API to enable us to display relevant CoppaFeel! related advertising to you on other websites. When you consent to this use of cookies, Facebook receives information about your visits to our website or interactions with our ads if you are registered with a Facebook service. By using the Facebook Pixel, we can track the effectiveness of our Facebook ads and gather statistical and market research data. Meta’s processing of this data is governed by their data policy, and you can find more information in the Facebook help area.

We may also utilize Facebook’s “Custom Audience” program to better tailor our advertising by understanding our supporters on Facebook. This involves locally hashing and encrypting the data of people who have consented to statistics cookies (you can manage your cookies preferences on our Cookie Settings page). This data is then matched between our internal database system and Facebook Business Manager – Facebook doesn’t receive your actual contact information, the matching is done using unidentifiable codes. Facebook deletes all data after the matching process. For more details, please refer to Meta’s Privacy Policy and Custom Audience page.

If you’re looking to manage your cookies preferences you can toggle our optional cookies on or off in the preference centre found by clicking on the ‘C’ icon in the bottom right hand corner of any CoppaFeel! Webpage. More information about these optional cookies can be found on our Cookies Settings page.

If you decide cookies aren’t for you at all, you can prevent the setting of cookies by adjusting the settings in your browser (see your browser help for how to do this). Be aware that disabling cookies is likely to affect the functionality of this website and others. If you don’t want to disable cookies but would like to manage how they’re used, our cookie settings page provides additional ways to control what cookies you receive on our site.

International Data Transfers

Where personal data is transferred outside the UK, we put in place appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and we perform transfer risk assessments where required.

Links

Our websites may include links to websites run by other organisations. CoppaFeel! is not responsible for the privacy practices of these other websites so please do read their privacy policies carefully.

Your rights: How you can access, correct or delete your personal data

For more information or to exercise any of the rights below please contact us by emailing data@coppafeel.org or by post at CoppaFeel!, Unit 4 Bickels Yard, 151-153 Bermondsey Street, London, SE1 3HA.

Under UK Data Protection law you have the following rights:

You have a right to know about how we use and protect your personal information, (as set out in this policy).
You have the right to access to the personal information that we hold about you by making a ‘subject access request’. Please be aware that you may be asked to provide proof of identification.
You have the right to ask us to correct inaccurate data or incomplete data we hold on you. You may do so on our website here or by contacting us by email data@coppafeel.org or by post at CoppaFeel!, Unit 4 Bickels Yard, 151-153 Bermondsey Street, London, SE1 3HA.
You can unsubscribe from our text reminder service at any time by texting ‘COPSTOP’ to 82228 or entering your mobile number at www.sto.pm/coppafeel/ and your personal information will be deleted.
You always have the right to unsubscribe from any service where we rely on your consent for holding your personal information.
If you have given your consent to us processing your personal information for any other purpose, you have the right to withdraw your consent at any time. To withdraw your consent, you can contact us at data@coppafeel.org or CoppaFeel!, Unit 4 Bickels Yard, 151-153 Bermondsey Street, London, SE1 3HA.

In certain circumstances you also have the following rights:

You have the right to restrict or suspend our use of your personal information and the right to object to your personal information being processed in certain ways.
You have the right to ask us to delete your personal information. Unless we have reasonable grounds to refuse to delete your personal information, we will securely delete the data in question within one month. The personal information may continue to exist in certain backups, but we will take steps to ensure that we honour your wishes and treat it as deleted.

You have the right to ask us to transfer your personal information to another person or organisation. If you are unhappy with how we handle your personal data, you have the right to raise a complaint with us.

You can view our complaints policy here https://coppafeel.org/complaints-and-feedback-policy/

The ICO can be contacted on:

The Commissioner’s Office (ICO): 

Information Commissioner’s Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

Telephone: 0303 123 1113 

Website:  https://www.ico.org.uk