Working draft — to be reviewed by counsel before launch.
Who we are. CharityVerify is operated by Kabware Services Ltd. We provide charity due-diligence services to professional advisory practices.
What we process. Account details for your practice's team (name, work email); charity application data your practice submits for verification; and data returned by the Charity Commission for England and Wales and Companies House — including trustee and officer names, which we process under legitimate interest for the purpose of due diligence.
AI-assisted research (Complete plan). If your practice is on our Complete plan and has this feature enabled, we use a third-party AI research provider to gather publicly available context on a charity — such as its website and social-media presence, adverse media, and a summary of its published annual reports. To do this we send the charity's name, registration number and the names of its trustees to that provider. We process this under legitimate interest for the purpose of due diligence, the same basis as the registry data above. The feature is advisory only — it never determines a verification outcome on its own — and can be turned off for your practice. Details of the providers we currently use are available on request at privacy@kabware.co.uk.
Retention. Verification records are retained for seven years in line with standard due-diligence obligations, then anonymised in place. Records are not deleted within the retention window — this preserves your practice's evidence trail.
Payments. Subscription payments are processed by Stripe. We never see or store card details.
Email. We send service emails (verification results, billing notices, account changes) from Kabware's Microsoft 365 tenant. We do not send marketing email without separate consent.
Your rights. You can request access to, correction of, or erasure of your personal data, subject to the retention obligations above. Contact privacy@kabware.co.uk.