Spam crusade lands charity in hot water with data watchdog