Skip to main content

Finance and fundraising

Financial Controls and Reserves Policy

Al-Waris Foundation is committed to safeguarding charitable funds and maintaining appropriate financial controls.

Current version 2.0

1. Policy Statement

Al-Waris Foundation is committed to safeguarding charitable funds and maintaining appropriate financial controls.

The charity will manage its finances in a way that is:

  • lawful;
  • transparent;
  • proportionate;
  • properly authorised;
  • consistent with donor restrictions;
  • consistent with the charity's Constitution;
  • capable of appropriate audit and review.

The Board of Trustees retains ultimate responsibility for the financial affairs of Al-Waris Foundation.

Operational financial duties may be delegated, but trustees remain responsible for ensuring that appropriate controls exist.

2. Purpose

This policy establishes the framework for:

  • financial governance;
  • income handling;
  • expenditure;
  • bank and payment access;
  • authorisation;
  • restricted funds;
  • donations;
  • procurement;
  • expenses;
  • grants;
  • cash;
  • financial records;
  • reserves;
  • financial reporting;
  • fraud prevention;
  • financial oversight.

3. Scope

This policy applies to:

  • trustees;
  • staff where applicable;
  • volunteers;
  • authorised financial administrators;
  • project leads;
  • contractors where they handle charity money;
  • other persons authorised to act financially for Al-Waris Foundation.

It applies to financial activity in:

  • the United Kingdom;
  • overseas projects;
  • fundraising;
  • online donations;
  • bank accounts;
  • payment processors;
  • cash collections;
  • grant making;
  • procurement;
  • project expenditure.

4. Trustee Responsibility

The Board of Trustees is ultimately responsible for:

  • protecting charity assets;
  • ensuring funds are used for charitable purposes;
  • maintaining adequate accounting records;
  • overseeing income and expenditure;
  • managing restricted funds;
  • approving annual accounts and reports;
  • monitoring financial sustainability;
  • managing significant financial risks.

Trustees do not need direct operational access to every financial system to fulfil these duties.

They must, however, receive sufficient financial information to exercise meaningful oversight.

5. Delegation

The Board may delegate routine financial administration to authorised persons.

Delegated responsibilities may include:

  • bookkeeping;
  • invoice processing;
  • payment preparation;
  • donation reconciliation;
  • receipt management;
  • financial reporting;
  • project-payment administration.

Delegation should be clear and proportionate.

No person may exercise authority beyond that delegated to them.

6. Segregation of Duties

Where reasonably practicable, significant financial processes should separate:

  • requesting expenditure;
  • approving expenditure;
  • making payment;
  • recording payment;
  • reconciling payment.

For a small charity, complete segregation may not always be practical.

Where one person performs multiple functions, compensating controls should be used, such as:

  • trustee review;
  • regular reconciliations;
  • audit logs;
  • supporting evidence;
  • periodic independent checks.

7. Bank Accounts

Bank accounts must be held in the name of Al-Waris Foundation where they are charity accounts.

Personal bank accounts must not normally be used to receive or hold charity funds.

Where exceptional circumstances require another arrangement, it must be:

  • lawful;
  • documented;
  • temporary where possible;
  • subject to appropriate reconciliation;
  • approved by the Board where material.

8. Bank Signatories and Access

Bank access should be limited to authorised persons.

Access rights should reflect actual operational need.

The charity should maintain an up-to-date record of:

  • authorised users;
  • payment permissions;
  • account access;
  • relevant limits.

Access must be removed promptly when authority ends.

9. Online Banking Security

Users with financial access must:

  • use strong authentication;
  • use multi-factor authentication where available;
  • protect credentials;
  • avoid sharing passwords;
  • report suspected compromise immediately;
  • use trusted devices and networks where reasonably practicable.

Bank credentials must not be stored in public repositories, documents or unsecured messaging.

10. Payment Processors

Online payment processors may be used for donations and other legitimate charity activity.

Access should be limited to authorised personnel.

The charity should maintain appropriate controls over:

  • live and test environments;
  • API credentials;
  • refunds;
  • recurring payments;
  • webhook configuration;
  • account permissions;
  • reconciliation.

Production payment credentials must not be exposed in client-side code or public repositories.

11. Donation Income

Donation records should identify, where applicable:

  • amount;
  • date;
  • payment method;
  • donor;
  • donation destination;
  • intention or designation;
  • recurring status;
  • restricted or unrestricted treatment;
  • operations contribution where applicable.

Donation records should reconcile to the underlying payment or bank records.

12. Restricted Funds

Where a donor validly restricts a donation to a particular purpose, those funds must be used only for that purpose unless a lawful alternative becomes available.

Examples may include donations designated to:

  • a specific appeal;
  • a specific project;
  • a restricted charitable purpose.

Restricted funds must be separately identifiable in the charity's records.

Trustees must not knowingly use restricted funds for unrelated operating costs.

13. Unrestricted Funds

Unrestricted funds may be applied to any lawful activity within the charity's purposes.

This may include:

  • charitable programmes;
  • administration;
  • governance;
  • fundraising costs;
  • premises;
  • technology;
  • staffing where applicable;
  • other legitimate operating expenses.

Use of unrestricted funds remains subject to proper financial controls.

14. Operations Contributions

Where donors are offered an optional contribution toward operational costs, the charity must present it clearly and separately from designated charitable giving.

The donor should be able to understand:

  • amount allocated to the selected charitable purpose;
  • amount allocated to operations;
  • total payment.

Operations contributions should be recorded consistently and treated according to the wording presented to donors.

15. Donation Designation

The charity must not invent or alter a donor's designation after payment.

Where historical records do not contain a clear designation, the charity should not retrospectively fabricate one.

Any correction to an allocation must be:

  • justified;
  • documented;
  • auditable.

16. Failed and Refunded Payments

Failed, cancelled, refunded or disputed transactions should be recorded accurately.

A donation must not be counted as received if it did not successfully settle.

Refunds should be:

  • appropriately authorised;
  • linked to the original payment;
  • recorded;
  • reconciled.

17. Cash Donations

Cash should be subject to enhanced controls because it is less traceable than electronic payments.

Where cash is collected:

  • collectors should be identifiable;
  • collection containers should be controlled where relevant;
  • cash should be counted promptly;
  • at least two people should participate in material cash counts where reasonably practicable;
  • count records should be maintained;
  • cash should be banked promptly;
  • reconciliation should be completed.

Cash should not be retained unnecessarily.

18. Public Collections

Public and street collections must comply with applicable permits and conditions.

Financial controls should address:

  • collection dates;
  • locations;
  • collectors;
  • collection containers;
  • count sheets;
  • supervision;
  • cash handling;
  • bank deposits;
  • reconciliation.

Collectors must not remove money from collections for personal expenses unless a separately authorised and properly recorded process exists.

19. Income Recording

All material income should be recorded accurately and promptly.

Income categories may include:

  • donations;
  • grants;
  • fundraising income;
  • other charitable income;
  • refunds or reimbursements.

Records should permit trustees to understand where the charity's money came from.

20. Expenditure

Charity expenditure must:

  • further the charity's purposes or support legitimate administration;
  • be reasonable;
  • be properly authorised;
  • be supported by appropriate evidence where available;
  • be recorded accurately.

Charity funds must not be used for private expenditure unrelated to the charity.

21. Expenditure Approval

The Board may establish financial approval limits.

The level of approval required should reflect:

  • amount;
  • nature of expenditure;
  • risk;
  • whether expenditure is routine;
  • whether a conflict exists.

Material or unusual expenditure should receive greater scrutiny.

22. Supporting Evidence

Expenditure should normally be supported by appropriate records such as:

  • invoice;
  • receipt;
  • contract;
  • quotation;
  • purchase order;
  • project documentation;
  • payment confirmation.

Where standard evidence is unavailable, the reason and alternative evidence should be documented.

23. Procurement

Material purchases should follow the Procurement and Purchasing Policy.

Factors should include:

  • value for money;
  • quality;
  • reliability;
  • conflicts of interest;
  • safeguarding;
  • delivery risk;
  • maintenance requirements;
  • total cost.

Lowest price alone does not necessarily represent best value.

24. Quotations

For material expenditure, multiple quotations should be obtained where reasonably practicable.

The number of quotations required may depend on:

  • amount;
  • urgency;
  • availability of suppliers;
  • location;
  • specialist nature of work.

Where competitive quotes are not obtained, the reason should be documented for significant purchases.

25. Related-Party Transactions

Payments involving:

  • trustees;
  • family members;
  • connected persons;
  • trustee-controlled businesses;

require careful conflict management.

Any such arrangement must:

  • be legally authorised;
  • be in the charity's interests;
  • provide reasonable value;
  • comply with the Constitution;
  • be appropriately recorded.

See the Conflict of Interest Policy.

26. Project Expenditure

Project expenditure should be identifiable by project or programme where reasonably practicable.

Records may include:

  • project number;
  • contractor;
  • location;
  • specification;
  • invoices;
  • payment records;
  • evidence of completion.

This supports transparency and monitoring.

27. Water Project Financial Controls

Water projects should normally maintain records including:

  • Al-Waris Foundation project number;
  • contractor quotation;
  • agreed price structure;
  • actual depth or specification where applicable;
  • invoices;
  • payment dates;
  • completion evidence;
  • maintenance or warranty details.

Where contractors charge according to depth or other variable specifications, final costs should be reconciled against actual verified work.

28. Food Distribution Financial Controls

Food and essential-aid distributions should maintain proportionate evidence such as:

  • supplier invoices;
  • quantity purchased;
  • unit cost;
  • transport or packaging cost;
  • distribution records;
  • payment evidence.

Bulk purchasing and repackaging should be recorded sufficiently to demonstrate quantities and costs.

29. Contractors

Before significant payments are made to a new contractor, proportionate due diligence should be completed.

Depending on the work, this may include:

  • identity;
  • business registration;
  • written quotation;
  • references or track record;
  • site assessment;
  • payment details;
  • evidence requirements.

For repeat project work, initial pilot projects should be considered before substantial batches are awarded.

30. Advance Payments

Advance payments should be limited where reasonably practicable.

Where an advance is commercially necessary, the charity should consider:

  • supplier credibility;
  • proportion of contract value;
  • project risk;
  • evidence of work;
  • milestone payments;
  • recovery options.

Higher-risk contractors should not automatically receive full payment in advance.

31. Milestone Payments

Material projects may use staged payments linked to:

  • commencement;
  • materials;
  • milestones;
  • completion;
  • evidence approval.

This may reduce financial exposure.

32. Grants

Grant payments must follow the Grant Making Policy.

Financial controls should include:

  • approval;
  • recipient verification;
  • bank-account verification;
  • grant purpose;
  • payment records;
  • monitoring;
  • unused funds where applicable.

33. Overseas Payments

Overseas payments require proportionate controls.

These may include:

  • recipient verification;
  • bank details;
  • exchange rate;
  • transfer charges;
  • sanctions checks where appropriate;
  • payment reference;
  • evidence of receipt.

Unusual payment instructions should be independently verified.

34. Exchange Rates

Where transactions involve foreign currencies, the charity should record:

  • foreign currency amount;
  • GBP equivalent where required for accounting;
  • exchange rate or actual sterling cost;
  • transfer fees where material.

The charity should use a consistent and reasonable accounting method.

35. Cash Overseas

Cash payments overseas should be avoided where safer traceable methods are reasonably available.

Where cash is necessary, enhanced controls may include:

  • written authorisation;
  • cash logs;
  • signed receipt;
  • count verification;
  • beneficiary or supplier confirmation;
  • reconciliation.

36. Expenses

Trustees, volunteers and other authorised persons may be reimbursed for reasonable costs genuinely incurred on charity business.

Expenses should be:

  • reasonable;
  • necessary;
  • supported by evidence where available;
  • claimed promptly;
  • properly authorised.

See the Expenses Policy.

37. Personal Payment of Charity Costs

Where an authorised person pays a legitimate charity expense personally, reimbursement may be made where:

  • the expense was genuinely for charity purposes;
  • appropriate evidence exists;
  • the amount is reasonable;
  • the reimbursement is authorised;
  • conflicts are managed.

Personal payment does not convert the expenditure into a donation unless the individual expressly waives reimbursement.

38. Loans and Amounts Owed to Trustees

Where a trustee or connected person advances funds to meet legitimate charity costs, any resulting liability must be:

  • documented;
  • supported by evidence;
  • properly authorised;
  • recorded accurately.

Interest must not be paid unless properly authorised and lawful.

The charity must distinguish between:

  • a donation;
  • reimbursable expense;
  • creditor balance;
  • formal loan.

39. Historic Claims

Historic expenses or amounts allegedly owed to trustees or connected persons should not be recognised automatically.

Before recognition or repayment, the charity should consider:

  • supporting evidence;
  • authority;
  • accounting treatment;
  • conflicts;
  • limitation or legal issues where relevant.

Material claims should be approved by unconflicted trustees.

40. Credit Cards and Payment Cards

Where the charity uses a payment card:

  • cardholders must be authorised;
  • personal use is prohibited;
  • transactions must be supported by evidence;
  • statements should be reconciled;
  • access should be withdrawn when no longer required.

Cash withdrawals should be limited and documented.

41. Direct Debits and Recurring Commitments

Recurring financial commitments should be reviewed periodically.

Examples include:

  • hosting;
  • software;
  • premises;
  • insurance;
  • subscriptions;
  • utilities.

The charity should cancel services that are no longer required.

42. Contracts

Material contracts should be documented.

Before entering a significant commitment, the charity should consider:

  • cost;
  • duration;
  • cancellation rights;
  • liabilities;
  • performance expectations;
  • safeguarding where relevant;
  • data protection;
  • conflicts.

43. Accounting Records

The charity must maintain accounting records sufficient to explain:

  • income;
  • expenditure;
  • assets;
  • liabilities;
  • restricted funds;
  • significant transactions.

Records should allow statutory accounts to be prepared accurately.

44. Bank Reconciliation

Bank accounts should be reconciled regularly against accounting records.

Discrepancies should be investigated.

Reconciliations should not simply be marked complete where unexplained differences remain.

45. Payment Processor Reconciliation

Online payment processors should be reconciled against:

  • donations recorded by the charity;
  • fees;
  • refunds;
  • disputes;
  • transfers to the bank.

Material discrepancies should be investigated.

46. Financial Reporting to Trustees

The Board should receive financial information proportionate to the charity's size and activity.

This may include:

  • bank balance;
  • income and expenditure;
  • restricted funds;
  • liabilities;
  • significant outstanding costs;
  • reserves;
  • significant project expenditure.

Trustees should be able to understand the charity's financial position without requiring direct access to transaction systems.

47. Budgeting

Where appropriate, the charity should maintain an annual or project-based budget.

Budgets may include:

  • expected income;
  • charitable expenditure;
  • administration;
  • fundraising;
  • project commitments;
  • contingency.

Material variances should be considered.

48. Financial Forecasting

The Board should consider future cash requirements before committing to material expenditure.

Forecasting should consider:

  • predictable income;
  • recurring liabilities;
  • planned projects;
  • restricted funds;
  • expected operational costs.

49. Reserves

Reserves are unrestricted funds that are freely available for the charity's general purposes, excluding amounts already committed or designated where appropriate.

Al-Waris Foundation will maintain reserves according to its actual financial risks and needs.

There is no automatic requirement to hold a fixed percentage of annual income.

50. Purpose of Reserves

Reserves may help the charity:

  • manage unexpected expenditure;
  • respond to income volatility;
  • meet liabilities;
  • maintain essential operations;
  • handle temporary disruption;
  • fund necessary transition costs.

Reserves should not be accumulated indefinitely without a clear charitable rationale.

51. Reserves Target

The Board will determine an appropriate reserves target based on factors including:

  • recurring operating costs;
  • certainty of income;
  • contractual commitments;
  • premises liabilities;
  • staffing obligations where applicable;
  • technology costs;
  • project commitments;
  • emergency risks.

The target may therefore change over time.

52. Current Reserves Position

Where unrestricted reserves are below the desired level, the Board should acknowledge this and take proportionate steps to improve financial resilience.

The charity should not present a target reserve as though that amount has already been accumulated.

53. Restricted Funds Are Not General Reserves

Restricted funds must not be counted as freely available general reserves where they cannot lawfully be used for general operating purposes.

This distinction should be maintained in financial reporting.

54. Designated Funds

The Board may designate unrestricted funds for a particular future purpose.

A designation is an internal decision and normally does not create the same legal restriction as a restricted donation.

The Board may reconsider a designation where appropriate.

55. Use of Reserves

Use of reserves should be authorised appropriately.

Reserves may be used where doing so is:

  • lawful;
  • in the charity's interests;
  • consistent with its purposes;
  • financially responsible.

Material use of reserves should be reported to the Board.

56. Reserves Review

The Board should review the reserves position at least annually.

The review should consider:

  • actual reserves;
  • target reserves;
  • changes in financial risk;
  • future expenditure;
  • sustainability.

57. Fraud Prevention

Financial controls should aim to prevent and detect fraud.

Controls may include:

  • separation of duties;
  • transaction limits;
  • reconciliations;
  • payment verification;
  • access controls;
  • supplier checks;
  • project evidence;
  • audit trails.

See the Anti-Fraud, Bribery and Corruption Policy.

58. Suspicious Transactions

Unexpected or suspicious transactions should be investigated promptly.

Examples may include:

  • unexplained transfers;
  • duplicate invoices;
  • sudden bank-detail changes;
  • unusual refunds;
  • transactions outside normal activity;
  • payments to unrelated personal accounts.

59. Financial Incidents

Significant financial incidents should be escalated promptly.

Immediate action may include:

  • securing accounts;
  • freezing access;
  • contacting the bank;
  • preserving records;
  • suspending payments;
  • reporting suspected fraud.

60. Serious Incident Reporting

Significant financial loss, fraud, unauthorised trustee benefit or material misuse of charity funds may require consideration under the Serious Incident Reporting Policy.

The Board must assess whether Charity Commission reporting is required.

61. Sanctions and Terrorist Financing

Financial transactions must comply with applicable sanctions and terrorist-financing requirements.

Higher-risk overseas payments may require additional due diligence.

See the Sanctions and Terrorist Financing Policy.

62. Money Laundering

The charity must not knowingly permit its accounts, projects or fundraising activities to be used for money laundering.

Unusual or suspicious arrangements should be escalated.

63. Asset Register

Where appropriate, Al-Waris Foundation should maintain an asset register for significant property and equipment.

This may include:

  • description;
  • acquisition date;
  • cost;
  • location;
  • responsible person;
  • disposal information.

Low-value consumable items do not need to be individually recorded.

64. Asset Disposal

Significant charity assets must not be disposed of improperly.

Disposals should consider:

  • value;
  • conflicts;
  • best interests of the charity;
  • data security where devices are involved.

Any personal data must be securely removed before disposal of relevant equipment.

65. Insurance

The Board should consider appropriate insurance for significant financial and operational risks.

Insurance should be reviewed periodically.

Insurance does not replace effective financial controls.

66. Financial Records Retention

Financial records must be retained for the appropriate legal and operational period.

The Records Retention and Disposal Policy should specify detailed retention periods.

Records should be securely disposed of when no longer required.

67. Annual Accounts

The charity's annual accounts must be prepared in accordance with applicable requirements.

Trustees must take reasonable steps to ensure that accounts are:

  • accurate;
  • complete;
  • supported by records;
  • approved appropriately;
  • submitted on time.

68. Trustees' Annual Report

Financial information included in the Trustees' Annual Report must be consistent with the charity's records and statutory accounts.

The charity must not fabricate:

  • income;
  • expenditure;
  • reserves;
  • project spending;
  • impact figures.

69. Independent Examination or Audit

Where an independent examination or audit is legally required, the charity will arrange it appropriately.

The Board may also seek independent financial review where it considers this beneficial even if not legally required.

70. Access to Financial Records

Financial records should be accessible to:

  • authorised operational personnel;
  • trustees where reasonably necessary for governance;
  • accountants or independent examiners;
  • regulators where lawfully required.

Access should remain proportionate and secure.

71. Financial Confidentiality

Sensitive financial information should be handled in accordance with:

  • Confidentiality Policy;
  • Data Protection and UK GDPR Policy;
  • Information Security and Cybersecurity Policy.

Public transparency does not require publication of:

  • bank credentials;
  • payment credentials;
  • security information;
  • unnecessary donor personal information.

72. Policy Breaches

Breaches of financial controls may result in:

  • corrective action;
  • training;
  • restriction of financial authority;
  • removal of access;
  • disciplinary or governance action;
  • termination of volunteer or contractual responsibilities;
  • recovery of funds;
  • reporting to authorities.

Deliberate misuse of charity funds will be treated seriously.

73. Related Al-Waris Foundation Policies

This policy should be read alongside:

  • Constitution;
  • Trustee Terms of Reference;
  • Trustee Code of Conduct;
  • Risk Management Policy;
  • Conflict of Interest Policy;
  • Expenses Policy;
  • Procurement and Purchasing Policy;
  • Grant Making Policy;
  • Fundraising Policy;
  • Anti-Fraud, Bribery and Corruption Policy;
  • Sanctions and Terrorist Financing Policy;
  • Serious Incident Reporting Policy;
  • Overseas Operations and Partner Due Diligence Policy;
  • Data Protection and UK GDPR Policy;
  • Information Security and Cybersecurity Policy;
  • Records Retention and Disposal Policy.

74. Review

This policy will be reviewed:

  • at least annually;
  • following significant fraud or financial loss;
  • following a material change in income or expenditure;
  • following significant changes to banking or payment systems;
  • following material expansion of overseas activity;
  • where financial controls are found to be inadequate;
  • following relevant legal or regulatory change.

75. Approval

Version: 2.0 Status: Approved Approved by: Board of Trustees Approval date: 25/08/2026 Next scheduled review: 24/08/2027

Essential cookies keep secure account and donation features working. With your permission, Google Analytics helps us understand how public pages are used. It is not loaded unless you accept.

Read our cookie information