Privacy Policy

Last reviewed: May 2026

This privacy policy describes the way Marble Prospects Limited ("Marble Prospects", "we", "us") gathers, uses, manages and discloses the personal data we collect through research using publicly available sources, and any personal data or information which is provided to us by our clients. By using our website, or by providing any personal information to us, you consent to the collection and use of your personal information as set out in this policy.

Marble Prospects is committed to safeguarding and protecting all forms of personal data. We comply with the Data Protection Act 2018 ("DPA") and the UK General Data Protection Regulation ("UK GDPR"). We are registered with the Information Commissioner's Office (ICO) under registration number ZB252558.

Who we are

Marble Prospects Limited provides prospect research, profiling, identification, due diligence, strategy, data management and training services to the charity, schools, and higher education sectors. We help fundraising teams identify, understand and build relationships with the individuals, charitable trusts and companies most likely to support their work — whether as existing or future donors and supporters.

Our research is never stand-alone. It forms part of an overall fundraising approach, helping our clients engage thoughtfully and appropriately with the people they hope will support their cause.

We are a company registered in England and Wales. We — Marble Prospects Limited — are responsible for deciding how the personal data described in this policy is held and used.

  • Company number: 13499023

  • Registered office: 1 Norlington Road, London, E11 4BE

  • Email:edward@marbleprospects.com

  • Telephone: +44 (0)7909 963 983

Our role under data protection law

When we carry out research for a client, that client is the data controller and Marble Prospects acts as the data processor: we process personal data on the client's documented instructions and only for the purposes of the work they have asked us to do. We are the controller only for the limited personal data we hold about our own enquirers, clients, suppliers and professional contacts, as described under "Data we collect directly from you" below.

If you are an individual who has been researched as part of a client's fundraising, the organisation that commissioned the work is the controller of your data and is the right organisation to contact about how it is used. We will support them in responding to any request.

Data we collect directly from you

Information (including contact details) that you supply to us about yourself — whether by email, through our website, or by other means — will be securely stored by us. This typically includes your name, organisation, job title, email address and telephone number.

We use this information to communicate with you about any business we are conducting together and to tell you about our services. We will never share your data with third parties for marketing purposes, and we will only disclose it where we are required to do so by law. You can ask us to delete the information we hold about you at any time by emailing edward@marbleprospects.com.

Data we collect from publicly available sources

Marble Prospects undertakes research on individuals, charitable trusts and companies on behalf of our clients (the data controller). This research is used by clients in their fundraising as a way to understand and build meaningful relationships with prospective and existing donors and supporters.

For this research, we use information gathered entirely from publicly available sources. These include:

  • General internet searches, company and organisation websites, online articles and social media

  • Public registers, including Companies House, the Charity Commission, the Financial Conduct Authority register, the Electoral Commission's record of political donations, the Land Registry and the open electoral register

  • Reference volumes and professional directories, such as Who's Who and Debrett's People of Today

  • Newspaper and media sources, both current and archived, including published rich lists and pay lists

  • Philanthropy and giving resources, used to understand an individual's charitable interests and history

We provide elements of this information to clients to help with their fundraising — for example, estimated wealth and gift-capacity indicators. This is based on publicly available data such as company annual accounts, career history (including remuneration and shareholdings), published rich lists, property values, land registry information and news articles. We may also research the known philanthropic and charitable interests of donors, their key professional interests and networks, and any society and club memberships. This can include interests such as education, the arts, health and medicine, heritage, the environment, international development, and sport, to help our clients understand an individual's potential inclination to support their cause.

We do not collect or store special category (sensitive) personal data. Where we carry out due diligence, we may process information relating to criminal offences, allegations or proceedings, but only where it has been drawn from publicly available sources, and only to help our clients identify and assess potential legal, reputational or ethical risks before accepting a gift or entering into a relationship.

Data clients send to us for research services

Use of our research services may require that a client sends us personal data about their supporters or other individuals so that we can carry out research on their behalf. Before we receive any such data, we enter into a contract with the client that includes data processing terms. Under that contract:

  • the client remains the data controller and Marble Prospects acts as data processor throughout;

  • all personal data the client sends to us remains the client's property;

  • all client data is treated in the strictest confidence and stored securely, with access limited to our team and the client;

  • we will not pass on or disclose any information contained within client data to a third party unless authorised to do so by the client, or required to do so by law; and

  • we securely delete personal data sent to us for a project within three months of the project ending, unless the client instructs otherwise.

Legitimate interests

Our work in helping fundraising organisations identify and understand potential high-value supporters is a lawful legitimate interest under both the DPA and the UK GDPR. The individuals we research are typically those capable of making, or influencing, a significant charitable gift, and who would reasonably expect a not-for-profit organisation to be well informed before making an approach.

The data we use for this research is already accessible within the public domain, and the privacy rights and interests of the individual are not adversely affected by our processing. The interests of Marble Prospects, our client and the individual are closely aligned: better-informed fundraising leads to more thoughtful, relevant and respectful engagement.

How we store information and keep it secure

We have taken appropriate technical and organisational measures to ensure that the personal information we hold remains secure at all times. Client data is held on secure, access-controlled cloud storage, and is processed in the strictest confidence by our team.

We use a small number of trusted service providers to host our website, manage our email and documents, and organise research data. We require them to keep personal data secure and to process it only on our instructions. Where any personal data is transferred outside the UK, it is protected by appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How we stay compliant

We undertake all our work by following accepted best-practice policies and procedures when processing personal data. We keep our knowledge current with developments in good data management and guidance issued by the Information Commissioner's Office, and all personal data is processed in the strictest confidence.

Cookies

Our website is provided using the Squarespace platform, which uses cookies to keep the site secure and functioning and to understand how it is used. You can manage your preferences through the cookie settings on our website.

Your rights

You have the right to:

  • request a copy of the information we hold about you (a subject access request);

  • ask us to update or correct information that is inaccurate or out of date;

  • ask us to remove your personal information from our records;

  • withdraw your consent where we have relied on consent;

  • object to, or request that we restrict, our processing of your information; and

  • ask us to transfer your information to you or another organisation.

To exercise any of these rights, please email edward@marbleprospects.com. We do not make a charge for this, and it helps us if you can tell us something about the nature of your contact with us. Please note that where we hold your data only as a processor on behalf of a client, you should usually direct your request to that organisation as the data controller; we will help them respond.

Complaints

If you have a concern about how we have handled your personal data, please contact us first so that we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113 — www.ico.org.uk

Updates or changes to this policy

We will review and update this policy from time to time. This policy was last reviewed in May 2026.