Privacy policy


Medical Emergency Relief International (also known as Merlin) is a registered charity in England and Wales (number 1135111)  and a charitable company limited by guarantee, registered in England and Wales (under company number 02823935). Merlin is committed to protecting the privacy of our supporters. 

The following Merlin Privacy Policy explains how we collect, store and use any personal information submitted to us. We value and respect all individuals and organisations seeking to donate time, money or resources to our work to provide vital health care and medical relief for people caught up in natural disasters, conflict, disease and health system collapse. We endeavour to protect our users' information, through compliance with the Data Protection Act 1998 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (as amended).

The processing of your personal data may be carried out by Merlin and Save the Children Fund (a registered charity in England and Wales (213890) and in Scotland (SC039570) and a registered company in England and Wales (178159)). This is because, whilst Merlin remains a separate legal entity, Merlin is a charitable subsidiary of Save the Children Fund (Save the Children) and Merlin is currently in the process of joining Save the Children in the UK and globally.

Collecting information

When you contact Merlin orsend or receive information, you can provide us with your personal information. This data provided is stored on our secure database to enable us to respond to your requests, and keep you updated and informed about our work or that of Save the Children . In the future, we (or Save the Children) may communicate with you by mail, email, telephone or SMS. Under the Data Protection Act 1998, it is your right to decide how your details are used. If you do not wish us to use your details in this way, please email us at or write to the Company Secretary, Merlin, 12th Floor, 207 Old Street, London EC1V 9NR.

Job applicants and former and current employees

If you apply to work at Merlin, we will only use the information you give us to process your application and to monitor recruitment statistics. If we want to disclose this information outside of Merlin – for example, if we need a reference – we will make sure we tell you beforehand, unless we are required to disclose this information by law. When recruiting for a post based in another country, Merlin will sometimes need to transfer your personal information to that country to progress the recruitment. It may be that the country does not provide the same level of data protection as in the European Economic Area.

If you are unsuccessful in your job application, we will hold your personal information for 6 months after we’ve finished recruiting the post you applied for. After this date we will destroy or delete your information.

If you begin employment with us, we will put together a file about your employment. We keep the information in this file secure, and will only use it for matters that apply directly to your employment.

Once you stop working for us, we will keep this file according to our record retention guidelines. You can contact us to find out more about this.

If you apply for a job or volunteering opportunity we will also collect information so we can assess your suitability for the role.

We may need to share the information provided with Save the Children, which carries out some activities on behalf of Merlin, but we will let you know when this is the case. 

How we protect information

When our supporters submit personal and sensitive information, this information is protected by a secure system both online and offline. Merlin protects any user information with the following security measures: secure servers, firewalls, SSL encryption and other technology and procedures used to protect consumer privacy. Merlin collects information throughout the website at several points.

We may collect the following general data that is not personally identifiable information: on-line straw polls; browser information; country/geographical information; pages visited and files downloaded.


Emails aren’t always secure, and they may be intercepted or changed after they’ve been sent. Merlin doesn’t accept liability if that happens. The contents of emails reflect their author’s views and not necessarily those of Merlin. Please do not send Merlin any financial data through email. The information in emails is confidential, so if you have received one by mistake, please delete it without copying, using, or telling anyone about its contents.


We use cookies on our website. A cookie is a small text file that our web server places on a user’s computer hard drive to be a unique identifier. Cookies enable Merlin to track usage patterns and deliver customised content to website visitors. Our cookies have an expiration date and they collect personally identifiable information. To ensure we have an accurate personal record of our supporters, please contact us if our personal details have changed so we can update your record. We may provide your data to a third party for data processing or analysis. By using our website, you agree that we can place certain types of cookies on your device. Please read our ‘Cookies in use on this Site’ to learn about our cookies.

With strict security procedures in place we endeavour to protect your data at all times.

If you have any queries or questions about privacy and/or security of your personal data please contact us at

This policy is subject to change and any such changes to our privacy policy will be posted on this page without prior notification.

For the avoidance of doubt, if you interact with Save the Children, or visit Save the Children’s website, or make a donation to Save the Children, your personal data will be processed and protected in accordance with Save the Children’s own Privacy & Cookie Policy.

Visit for further information.