top of page
RPA-logo-compact-reversed_2000w.png
Talk to us
YOUR DATA

Privacy Policy

Effective date: 21 September 2026.

This site and domain https://www.researchphilanthropyadvisors.com/ is owned and operated by Novantu Ltd, a company registered in England and Wales (company number 13692783), with its registered office at 61 Bridge Street, Kington, England, HR5 3DJ. Novantu Ltd is the data controller for all personal data collected through this Site, including enquiries submitted through the contact form, and can be contacted at: help@dawidpotgieter.com

Research Philanthropy Advisors is a collaborative of independent consultants. It is not a company or partnership. Each engagement is contracted with the consultant’s own business, named in the engagement letter. In this Privacy Policy, "we", "us" and "our" mean Novantu Ltd, as operator of this Site. This policy explains how we handle your data, and when it may be shared with members of the collaborative.

Purpose

The purpose of this privacy policy (this "Privacy Policy") is to inform users of our Site of the following:

  1. The personal data we will collect;

  2. Use of collected data;

  3. Who has access to the data collected;

  4. The rights of Site users; and

  5. The Site's cookie policy.

GDPR

For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the "GDPR"). For users in the United Kingdom, we adhere to the UK GDPR and the Data Protection Act 2018. Our use of cookies and similar technologies is also governed by the Privacy and Electronic Communications Regulations 2003 ("PECR"), as amended by the Data (Use and Access) Act 2025.

​

We have not appointed a Data Protection Officer as we do not fall within the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.

Consent

Using this Site does not by itself constitute consent to our processing of your personal data. Where we rely on consent, we ask for it separately and specifically — for non-essential cookies, through our cookie banner.

​

  • When the legal basis for us processing your personal data is that you have provided your consent to that processing, you may withdraw your consent at any time. If you withdraw your consent, it will not make processing which we completed before you withdrew your consent unlawful.

  • You can withdraw your consent by: reopening the cookie banner using the privacy icon displayed on every page, or by emailing us at help@dawidpotgieter.com. Withdrawing is as straightforward as giving consent.

Legal Basis for Processing

We collect and process personal data about users only when we have a legal basis for doing so under Article 6 of the UK GDPR or the EU GDPR, as applicable.

We rely on the following legal bases to collect and process the personal data of users:

  • Consent — for non-essential cookies, including analytics. You give this through our cookie banner and can withdraw it at any time.

  • Legitimate interests — where you contact us through our enquiry form, we process your details in order to respond to you, and may share them with the member of the collaborative best placed to help. Our legitimate interest is in replying to someone who has asked to hear about the services offered by members of the collaborative.

  • Performance of a contract, or steps taken at your request prior to entering into a contract — where an enquiry develops into a working relationship with Novantu Ltd.

Personal Data We Collect

Data Collected Automatically
When you visit and use our Site, we may automatically collect and store the following information, where you have consented to analytics cookies:

  1. IP address;

  2. Location;

  3. Hardware and software details;

  4. Clicked links;

  5. Content viewed.

If you decline non-essential cookies, we do not collect any of the above beyond what is strictly necessary to serve the Site securely.​

 

Data Collected in a Non-Automatic Way
We may also collect the following data when you perform certain functions on our Site:

  1. First and last name; 

  2. Email address;

  3. Phone number, if you choose to provide it; and

  4. The content of your message.

 

This data may be collected using the following methods:

  • Contact Form.

​First name, email address and message are required so that we can reply; last name and phone number are optional. Providing any of these is voluntary. You are not under any statutory or contractual obligation to provide them, but we cannot reply to your enquiry without a way to contact you.​

How We Use Personal Data

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.

​

The data we collect automatically is used for the following purposes:

  • Understanding how visitors use the Site so that we can improve it. We do not use this data for advertising, we do not combine it with any other source, and we do not sell it.

The information you send through the contact form is used to respond to your enquiry and to find the right member of the collaborative to help. We do not add enquirers to any mailing list.​

​

Who We Share Personal Data With

  • Members of the Collaborative: Research Philanthropy Advisors is a collaborative of independent consultants, each operating through their own business. If you send us an enquiry, we may share it with the member or members of the collaborative best placed to respond, and only as much of it as they need. Each member is a separate business and is responsible for your information once they receive it. If you go on to work with one of them, that engagement is contracted with their own business, named in the engagement letter, and their own privacy notice will apply. If we think someone outside the collaborative could help you better, we will ask you before passing on your details. Some members of the collaborative are based in the United States and Canada. See International Data Transfers below.

 

Third Parties
We may share user data with the following third parties:

  • Wix.com Ltd, which hosts this Site and processes data on our behalf, including contact form submissions and site analytics.

  • Usercentrics GmbH, based in Germany, which provides our cookie consent banner. It processes limited technical data in order to record and honour your cookie choices, and keeps a record of those choices so that we can demonstrate your consent.

Other Disclosures

We will not sell or share your data with other third parties, except in the following cases:

  • If the law requires it;

  • If it is required for any legal proceeding;

  • To prove or protect our legal rights; and

  • To buyers or potential buyers of Novantu Ltd in the event that we seek to sell Novantu Ltd.

​

If you follow hyperlinks from our Site to another Site, please note that we are not responsible for and have no control over their privacy policies and practices.

​

How Long We Store Personal Data

We keep enquiry correspondence for 24 months from our last contact with you, unless the enquiry develops into a working relationship. Where an enquiry leads to an engagement with Novantu Ltd, we keep records for the duration of that work and for 6 years afterwards, to meet our tax and professional record-keeping obligations. Where it leads to an engagement with another member of the collaborative, that member’s own retention periods apply. Analytics data is retained in aggregate form by our hosting provider in line with its published retention periods.

​

How We Protect Your Personal Data
In order to protect your security, we use industry standard browser encryption and store all of our data on servers in secure facilities. All data is only accessible to those working for or with Novantu Ltd who need access to it, and to members of the collaborative in the circumstances described above.

​

While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

​

International Data Transfers
We transfer user personal data to the following countries:

  • Israel, where our hosting provider, Wix, first processes it; and onward to Wix group companies and Wix’s sub-processors in other countries, including the United States. Wix publishes a current list of these at https://support.wix.com/en/article/list-of-wixs-sub-processors.

  • The United States and Canada, where some members of the collaborative are based, if we share your enquiry with them as described in "Who We Share Personal Data With".

​

When we transfer user personal data we will protect that data as described in this Privacy Policy and comply with applicable legal requirements for transferring personal data internationally.

​

If you are located in the United Kingdom or the European Union, we will only transfer your personal data if:

The country your personal data is being transferred to has been deemed to have adequate data protection by the European Commission or, if you are in the United Kingdom, by the United Kingdom adequacy regulations; or

We have implemented appropriate safeguards in respect of the transfer. For example, the recipient is a party to binding corporate rules, or we have entered into standard EU or United Kingdom data protection contractual clauses with the recipient.

Your Rights as a User

Under the UK GDPR, you have the following rights:

  • Right to be informed;

  • Right of access;

  • Right to rectification;

  • Right to erasure;

  • Right to restrict processing;

  • Right to data portability; and

  • Right to object.

​

How to Access, Modify, Delete, or Challenge the Data Collected
If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, if you would like your data to be deleted or modified in any way, or if you would like to exercise any of your other rights under the UK GDPR, please contact us here:

​

How to Opt-Out of Data Collection, Use or Disclosure
In addition to the method(s) described in the How to Access, Modify, Delete, or Challenge the Data Collected section, we provide the following specific opt-out methods for the forms of collection, use, or disclosure of your personal data specified below:

  • ​All optional data collection. You can opt-out through the cookie banner, which you can reopen at any time using the privacy icon displayed on every page.

Cookie Policy

A cookie is a small file, stored on a user's hard drive by a website. Its purpose is to collect data relating to the user's browsing habits. You can also block or delete cookies in your browser settings, though doing so may affect how this Site works.

​

We use the following types of cookies on our Site:

​

  1. Strictly necessary cookies and storage. These are set automatically by our hosting provider, Wix, when the Site first loads, before you make any choice, and cannot be switched off. Wix classifies them as essential. They are: hs, XSRF-TOKEN, server-session-bind and client-session-bind, which protect the Site and its forms against attack and expire when you close your browser; svSession, a persistent cookie lasting around 13 months, which Wix uses to identify visitor sessions; and fedops.logger.sessionId, an identifier held in your browser’s local storage that Wix uses to detect technical faults.

  2. Functional cookies: Our cookie banner, provided by Usercentrics, stores your cookie choices in your browser’s local storage, and Wix records the same choice in a cookie (consent-policy) lasting up to 12 months, so that we do not ask you again on every visit. Both are used solely for this purpose.

  3. Analytical cookies: We use Wix Analytics to understand how visitors use the Site — which pages are viewed, how visitors arrive, and approximately where in the world they are — so that we can improve it. These, including Wix’s bSession cookie, are set only if you agree to them. Wix processes this information on our behalf as our data processor, under a data processing agreement that restricts its use to providing services to us.

​​

​We do not use targeting or advertising cookies on this Site, and we do not permit third parties to use cookies on this Site for their own advertising purposes. Our cookie banner uses our consent provider’s standard wording, which refers to advertising; we do not use any advertising or targeting technologies, and no services are assigned to the Marketing category.

Modifications

This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the "Effective Date" at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.

Complaints

Contact Information
Novantu Ltd, 61 Bridge Street, Kington, England, HR5 3DJ. Email: help@dawidpotgieter.com
 

If you have any complaints about how we process your personal data, please contact us through the contact methods listed in the Contact Information section so that we can, where possible, resolve the issue. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk.

bottom of page