Privacy Policy

Last updated: September 2026

NGO Business Services Ltd respects your privacy and is committed to protecting your personal information. This privacy policy explains what information we collect through our website, why we use it, who may have access to it and what rights you have.

Who we are

NGO Business Services Ltd provides Salesforce and related technology services exclusively to non-profit organisations.

NGO Business Services Ltd is the controller of personal information collected through this website for the purposes of UK data protection law.

Company number: 12258167

In this privacy policy, references to “NGO Business Services”, “we”, “us” and “our” mean NGO Business Services Ltd.

If you have any questions about this policy or how we use your personal information, please contact us at support@ngoserv.com.

Information you provide to us

If you contact us through our website, we ask for:

  • your name;
  • your organisation;
  • your email address;
  • the type of enquiry, if you choose to provide this; and
  • the information you include in your message.

You may also provide personal information when you communicate with us subsequently by email.

Please avoid including sensitive personal information in an enquiry unless it is necessary for us to deal with your request.

How we use your information

We use information submitted through our website to:

  • receive, review and respond to your enquiry;
  • communicate with you about the services or assistance you have asked about; and
  • take steps towards providing services to you or your organisation where appropriate.

We do not add people who contact us through the website to a marketing mailing list simply because they have made an enquiry.

We do not currently use information collected through the website for advertising or profiling, and we do not make solely automated decisions about website visitors that have legal or similarly significant effects.

Our lawful basis for using your information

Our lawful basis depends on the nature of your enquiry.

Where you contact us about potentially obtaining services, we may need to process your information in order to take steps at your request before entering into a contract.

For other enquiries, we rely on our legitimate interests in communicating with people who contact our business, responding to enquiries and operating our business effectively.

Where we rely on legitimate interests, we consider those interests alongside your rights and reasonable expectations.

What happens when you submit our contact form

Our website is hosted by IONOS and uses WordPress.

Our Contact Us form is provided using WPForms. When you submit the form, the information is processed by WordPress and WPForms so that the submission can be validated and an email notification created.

Ordinary contact-form submissions are not stored as WPForms entries in our WordPress website, and WPForms’ Lite Connect entry-backup service is disabled.

The resulting enquiry is sent using Google Workspace and stored in our shared support@ngoserv.com mailbox. We normally respond to enquiries directly by email.

We do not routinely copy website enquiries into Salesforce or another customer relationship management system.

Who has access to your information

Access to website enquiries is limited to authorised members of the NGO Business Services team who need it for their work.

Our team works internationally, so authorised team members may access our business systems and email while working outside the UK. We apply appropriate security measures to protect personal information accessed through our systems.

We also use service providers to operate the website and our communications, including:

  • IONOS, which provides our website hosting; and
  • Google Workspace, which provides our business email service and is used to transmit, receive and store website enquiries.

These providers process personal information in providing services to us and operate under their respective data-processing arrangements.

We do not sell personal information to third parties.

International processing

Some of the service providers we use operate internationally and personal information may therefore be processed outside the UK.

Where a transfer of personal information outside the UK is subject to UK data protection restrictions, we rely on appropriate arrangements provided by our service providers, such as applicable adequacy regulations or contractual safeguards.

You can contact us at support@ngoserv.com if you would like further information about the safeguards applicable to your personal information.

How long we keep enquiries

If an enquiry does not result in an ongoing client relationship, we normally retain the associated correspondence for up to two years after our last meaningful contact. It is then deleted unless there is a legitimate reason or legal requirement to retain it for longer.

If an enquiry develops into a client relationship, relevant correspondence may form part of our business or client records and may be retained for the period applicable to those records.

Website hosting and technical information

When you visit our website, our hosting provider, IONOS, may process technical information needed to deliver, secure and operate the website.

This can include information such as your IP address, the page or file requested, the referring page, browser and operating-system information, device type and the time of access.

IONOS states that IP addresses used for its web-hosting visitor data are anonymised when collected and that the resulting visitor data is retained for eight weeks.

We use this technical processing for the secure and reliable operation of the website rather than to identify individual visitors.

Cookies and analytics

We do not currently use Google Analytics, advertising pixels or similar technologies to track visitors for advertising, profiling or marketing purposes.

Our current public website has not been found to set non-essential analytics or advertising cookies, and we therefore do not currently ask visitors to accept such cookies.

Some technologies that are strictly necessary for the operation, security or functionality of the website may be used without consent where permitted by law.

We will review this position if we introduce analytics, embedded third-party content, advertising, marketing technology or other functionality that changes how cookies or similar technologies are used.

Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

Information submitted through the website is transmitted using HTTPS, and access to our business systems and email is restricted to authorised users.

No internet service can be guaranteed to be completely secure, but we take reasonable measures appropriate to the information we process and the services we provide.

Your data protection rights

Depending on the circumstances, UK data protection law gives you rights over your personal information. These may include the right to:

  • ask us for a copy of personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your personal information in certain circumstances;
  • ask us to restrict how we use your information in certain circumstances;
  • object to processing based on legitimate interests; and
  • receive or transfer certain personal information where the right to data portability applies.

You have the right to object to processing based on our legitimate interests. If you object, we will consider your request in accordance with applicable data protection law.

Not every right applies in every circumstance.

To exercise your rights, or to ask us anything about how we use your personal information, contact support@ngoserv.com.

Complaints

If you have a concern about how we use your personal information, please contact us first so that we have an opportunity to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Information about making a complaint is available from the ICO website.

Changes to this policy

We may update this privacy policy when our website, services or the way we process personal information changes.

The date at the top of this page shows when the policy was last updated.