Privacy Policy

Data protection is about protecting people’s privacy. This is the purpose of data protection in any organisation, and is at the heart of data protection law, including the new General Data Protection Regulation (GDPR) that came into force in May 2018.

Lucky Hedgehog Rescue (aka LHR, ‘we’) is committed to protecting and respecting your privacy.

This Policy explains when and why we collect personal information about people who visit our website, and Rescue, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this Policy.

Any questions regarding this Policy and our privacy practices should be sent by email to

The Founder & Lead is Lucy Felgate-Baumberg (aka LFB).

LHR, is a registered Community Interest Company (aka C.I.C.), number 14085854, registered address is Paddock Cottage, Grimston Lane, Grimston, HU11 4QE.

LHR rescues, rears and rehabilitates sick, injured and orphaned wild British Hedgehogs, (Erinaceus Europaeus).

LHR strives to involve communities in the learning and experiences of Hedgehogs through giving educational talks and slide shows, inviting adults to volunteer at the rescue and offering under 18’s the opportunity to volunteer, take their Duke of Edinburgh, and Work Experience.

We obtain information about you when you use our website or receive or download and complete a paper application form , for example, when you contact us about our products and services, make a donation, take out an adoption, make a purchase of goods through our online shop or fill in an application form. In order to perform any of these options you will be required to disclose personal data through one of our online or offline forms.

The personal information we collect might include your name, salutation, address, email address, postal address, telephone number, IP address. If you are kind enough to support our work online financially, your information will be taken by one of our third-party payment processors, all of whom specialise in the secure online capture and processing of financial transactions. The companies we use to process these transactions are as follows:

  • Lloyds for one-off Credit card/Debit card transactions,
  • PayPal for one-off payments online payments/donations,
  • Peoples Fundraising, Charity Saver, MyGivingCircle, GiveAsYouLive, Easyfundraising, AmazonWishlist.

We may use your information to:

process a donation, membership or adoption that you have made; • process online shop orders that you have submitted;

  • process another one of our services.
  • to carry out our obligations arising from any contracts entered into by you and us;
  • seek your views or comments on the services we provide;
  • notify you of changes to our services;
  • send you communications which you have requested and that may be of interest to you. These may include information about campaigns, appeals, other fundraising activities;
  • send you a newsletter to keep you up to date with our life-saving work.
  • process a work/volunteering/student placement application.

We are legally required to hold some types of information to fulfil our statutory obligations (for example the collection of Gift Aid). We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us.

We will never sell or rent your information to third parties.

Please be reassured that we will not release your information to third parties beyond the LHR network unless we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime or for emergency services should you require them whilst attending LHR. When you use our secure online payment pages, the transaction will be processed by one of our third-party payment processors, who specialise in the secure online capture and processing of payments.

You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us about the vital work we do then you can select your choices by ticking the relevant boxes situated on the form on which we collect your information.

We will not contact you for marketing purposes by email, phone, text message or by post unless you have given your prior consent. We will not contact you for marketing purposes if you have indicated that you do not wish to be contacted. You can change your marketing preferences at any time by contacting us by email at

You have the right to ask for a copy of the information we hold about you. This is called a Subject Access Request. If you wish to make a Subject Access Request please email us at Please note that we will require information on what you want to see as well as proof of your identity so Subject Access Requests must be made by post with the relevant supporting information following your initial email.

For further information see Information Commissioner’s guidance: Information Commissioner’s Office (ICO)

You may ask us to rectify information you think is inaccurate, and you may also ask us to remove information which is inaccurate. When you inform us of this, we will correct our records accordingly. If you would like us to stop using your personal data for this purpose, or if you would like to exercise any of your rights please Contact Us. We will act in accordance with your instructions as soon as reasonably possible.

If you make a payment or donation to us we will need to share your information with one of our payment processors. By paying via one of our payment processors you agree to accept their terms and conditions for the use of their services, including their privacy policy. We suggest that you read their privacy policy when using their service as we are not responsible for data you share with them. Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

In addition, if you link to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that third-party site.

We are committed to protecting the privacy of the young people that volunteer with us, fundraise for us, attend events, visit our rescue or engage on our website. Where necessary we will obtain the consent of a parent or guardian in order to collect and use personal data of children.

If you are a child and would like to get involved, please ensure that we have the consent from a parent or guardian before providing your personal information to us.

All under 18’s must attend with an adult, one child per adult.

We will retain your personal data as long as is necessary in connection with its original purpose unless a valid business reason exists which means we need to retain personal data for longer.

Website Users plus inappropriate website content

If you post or send any content that we believe to be inappropriate, offensive or in breach of any laws, make defamatory statements on our forums or social media pages, we may use your personal information to inform relevant third parties such as your internet provider or law enforcement agencies.


LUCKY HEDGEHOG RESCUE C.I.C. (aka LHR) wants to include all communities possible for adult volunteering duties, but also to provide placements for Duke of Edinburgh, Work

Experience, Voluntary work and events for under 18’s, minors as well as for adults.

To do this, we need health information about all applicants/attendees so that we can look after them well, and full consent and contact details for parents of under 18’s, so that they can attend and we are able to contact them in an emergency. All under 18’s must be accompanied by an adult, one adult per child.All information is stored and seen by one person, the Founder & Lead, Lucy Felgate-Baumberg (aka LFB); and only in the event of an emergency, Emergency services will be given access to an individual’s information for the care of the patient. Once the placement or event is over, all information is carefully deleted from our computer system and telephone list, and any paper versions are shredded. If an attendee requires a reference from us for future employment, this must be requested long before they leave LHR. If an individual has requested us to keep them informed of other activities, they must complete the provided indication areas on their application form and their information will continue to be stored. Should they wish us to remove their data from our records, they can do so by emailing Lucy at


LHR has additional contact methods for adult volunteers through WhatsApp groups. The Volunteers in these groups have the ability and can leave their contact group at any time; we use these groups as a quicker method to approach for help from their designated groups. Their details are only kept on LFB’s phone and computer and used only by LFB.


All emails of enquiry for events and/or placements are stored on LFB’s computer and only accessed by LFB. This is done so that we can keep up with your enquiries without confusion. When an applicant is no longer interested in their chosen enquiry, they must email LFB at for their removal from our system. The list will on occasion be updated and any enquiries over 3 months old will be deleted.

All enquiries may also request to be placed upon our email notification system for updates newsletters and events, instead or as well as.

We will endeavour not to have data breaches. In the event of a data breach, we will endeavour to rectify the breach by getting any lost or shared data back. We will evaluate our processes and understand how to avoid it happening again. Serious data breaches which may risk someone’s personal rights or freedoms will be reported to the Information Commissioner’s Office within 72 hours, and to the individual concerned.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. It is possible to switch off cookies by setting your browser preferences. Turning cookies off may result in a loss of some functionality when using our website.

We keep this Policy under regular review.  This Policy was last updated in February 2023.


× How can we help you?