Legal
Privacy Policy
Last updated 16 June 2026 — full legal review pending.
Hero is a trading name of KNECCT Ltd, registered in England and Wales, company number 14163727. Registered office: 25 Dollis Avenue, Flat 4, London, N3 1DA.
This policy explains what personal data Hero collects, why, and the rights you have over it. We aim to collect only what we need to run a trustworthy volunteering platform.
1. Who is responsible for your data
KNECCT Ltd, trading as Hero (“we”, “us”), is the data controller for the personal data processed through the platform. For any privacy question or request, contact support@herovolunteer.com.
2. What we collect
- Account data: name, email, password (stored hashed), and user type.
- Profile data: date of birth, location, causes, skills, bio, and profile photo.
- Organisation data: charity/business details, registration number, website, and logo.
- Activity data: applications, attendance, hours logged, points, badges, and ratings.
- Technical data: device, log, and usage information needed to operate and secure the service.
3. How we use your data
- to create and manage your account and match you to relevant opportunities;
- to enable charities to review and manage volunteer applications;
- to send transactional emails (confirmation codes, application updates, notifications);
- to measure volunteering impact and operate points, badges and rewards;
- to keep the platform safe, prevent abuse, and meet legal obligations.
4. Legal bases
We process data to perform our contract with you (providing the service), for our legitimate interests (operating and securing the platform), to meet legal obligations, and with your consent where required (for example, certain communications). You may withdraw consent at any time.
5. Who we share it with
When you apply to an opportunity, relevant profile details (such as your name, age, skills, and bio) are shared with that organisation so they can manage your application. We use trusted processors to run the service — including Supabase (database and authentication), Vercel (hosting), Resend (email), Stripe (payments), OpenAI (AI features), and Google (maps and sign-in). We do not sell your personal data.
6. Storage, security and retention
Your data is stored on managed cloud infrastructure with access controls and row-level security. We keep personal data for as long as your account is active and for a limited period afterwards as needed for legal, accounting, or safeguarding reasons, after which it is deleted or anonymised.
7. Your rights
Depending on your location, you may have the right to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise any of these, email support@herovolunteer.com. You also have the right to complain to your local data protection authority.
8. Cookies
We use essential cookies to keep you signed in and to operate the platform. We may use limited analytics to understand and improve usage. You can control non-essential cookies through your browser settings.
9. Children
Hero is intended for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will remove it.
10. Changes to this policy
We may update this policy from time to time. Where changes are material we will take reasonable steps to notify you, and the “last updated” date above will change.
11. Contact
For any privacy request or question, email support@herovolunteer.com.