Legal Changelog

Documented how the kiosk recognises returning donors by phone or name, what data is matched and the safeguards we apply.

• Added a new section 5b describing the donor recognition feature in plain English.
• Listed the safeguards in place: per-charity isolation (no cross-charity searching), on-screen privacy mode (only first name + surname initial + masked postcode shown), donor escape hatch ("This isn't me"), rate limiting, and a minimised set of fields returned to the kiosk.
• Added the recognition lookup as a named example under the legitimate-interests bullet in section 4.
• Filed a written Legitimate Interests Assessment internally and referenced it from the policy.
• No change to how donor data is processed operationally - this is a transparency update making explicit something the product was already doing.

Initial published version of the Trust Alma legal pack. All charities active before this date are recorded as accepting a baseline pack labelled "legacy-pre-2026-04-16".

• Established Terms of Service, Privacy Policy and Data Processing Agreement as the formal legal pack covering use of Trust Alma.
• Introduced an audit trail recording the date, name, email and IP of the person who accepted the legal pack on behalf of each charity.