About this policy
1.1 Women and Children First (UK), (registered charity number 1085096), ("we", “us” or “our”) is committed to protecting and respecting your privacy.
1.3 For the purpose of the Data Protection Act 1998 (the “DPA”), and the General Data Protection Regulation (EU) 2016/679 (the “GDPR”), we are the data controller and are located at United House, North Road, London N7 9DP, United Kingdom.
1.4 We comply with the DPA and will comply with the GDPR once this becomes applicable from 25th May 2018 in respect of the collection, holding, storage, use, and processing of your personal data.
Personal Data That We Collect Open or Close
2.1 We collect and use the following types of personal data:
(b) first name, middle name, (if applicable) surname and salutation;
(c) other name (if applicable);
(d) postal address and postcode;
(e) telephone numbers (daytime, evening and mobile, as applicable);
(f) e-mail address(es);
(g) date of birth and age;
(h) information that you give us by completing forms on our website located at www.womenandchildrenfirst.org.uk, (the “Website”), giving donations, entering competitions or promotions, completing surveys, or reporting problems with our Website;
(i) technical information about your visits to our Website including, for example, internet protocol (“IP”) addresses, login information, browser type and version, time zone settings, browser plug-in types and versions, and operating systems and platforms;
(j) when you visit this site we use a third party service called Google Analytics to collect anonymous information about visitor behaviour patterns. We use Google Analytics to count the number of visitors to the site, understand what content people look at and how they find us. We use this information to understand how visitors use the site and to improve our website. This information cannot be used to identify you.
(k) information that we receive from other sources with whom we work closely (including, for example, sub-contractors in technical, payment and delivery services, search engine providers, advertising networks, analytics providers and business partners);
(l) information that we receive from other third-party sources and publicly-available data about you (including, for example, listed directorships);
(m) financial details (including, for example, bank and credit card information), except when donations are processed by a third party, including online or via a digital fundraising platform;
(n) correspondence between you and us (whether by telephone, e-mail or otherwise).
2.2 We collect some of the personal information set out above directly from you and some from third parties (such as the Big Fun Run, fundraising sites such as Virgin Money Giving, search engines such as Give as You Live, or through Ebay for Charities; you should check their privacy policies when you provide your information to understand fully how they will process your data).
2.3 We need the personal information set out above because it is necessary in order for us to provide you with the products or information you asked for, to administer your donation, or to support your fundraising, including processing Gift Aid.
2.4 You will be required provide some or all of the information set out above. If you do not do so, this is likely to mean that we will not be able to provide you with the services, products or information you asked for, or to administer your donation or support your fundraising, including processing Gift Aid.
Cookies Open or Close
How We Use Personal Data Open or Close
(a) performing our obligations under any contracts that we enter into with you;
(b) administering your donation(s) and supporting your fundraising, including processing Gift Aid;
(c) providing you with the products, services and information that you ask us for;
(d) corresponding with you and recording any relevant communications;
(e) building a profile in order to understand your interests and preferences, to target our resources effectively, and to understand your background in order to improve our fundraising efforts;
(f) providing you with marketing information in accordance with your stated preferences;
(g) improving our website and ensuring that content from our Website is presented effectively for you and for your devices;
(h) complying with applicable legislation, regulations and codes of practice;
(i) administrative and management purposes;
(j) administering our Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
(k) keeping our Website safe and secure;
(l) measuring or understanding the effectiveness of advertising;
(m) combining information that we receive from other sources with information that you give to us and that we collect about you and use such combined information for the purposes set out above, depending on the types of information that we receive.
How We Share Your Personal Information Open or Close
5.1 In addition to the parties mentioned above, we also share your personal data, as necessary, with third parties when we run an event in partnership with another named organisation. We will be clear what will happen to your data when you register for the relevant event.
Legal Basis for Processing Your Personal Data Open or Close
6.1 We will use your personal data in the following instances:
(a) where we have obtained your consent;
(b) where we need to perform a contract with you;
(c) where we need to comply with a legal obligation; and
(d) where the processing is necessary for our legitimate interests (or those of a third party) and our interests are not overridden by your interests or fundamental rights and/or freedoms.
6.2 We will also use your personal data in the following situations, which are likely to be rare:
(a) where we need to protect your interests (or someone else’s interests); or
(b) where it is needed in the public interest.
Where We Transfer and Store Your Personal Data Open or Close
7.1 The personal data that we collect from you is held within the EEA. If your personal data is transferred outside the EEA, we rely on agreements incorporating the standard contractual clauses approved by the EU Commission Decision 2004/915/EC of 27 December 2004 (the “Standard Clauses”) and, as applicable, we will also rely on any other framework for transferring personal data from the EEA to another jurisdiction that is approved by the European Commission as providing an adequate level of protection.
7.2 All information that you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.
7.3 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of data transmitted to our Website(s); and any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access to it.
7.4 We will store your personal data, including any correspondence and information about any donations granted, for at least as long as it is necessary in order to fulfil our contractual, regulatory and statutory obligations. Subject to those qualifications, our goal is to keep such data for no longer than is necessary for the lawful purposes for which such personal data was processed.
We will review on a regular basis the personal data that we collect and hold to ensure that such data is only kept for an appropriate length of time.
Individuals' Rights Open or Close
8.2 We will process all personal and sensitive personal data in line with your rights, including those set out below, in each case to the extent required by and in accordance with applicable law only (including, without limitation, in accordance with any applicable time limits and requirements regarding fees and charges).
8.3 Access. We will confirm whether or not we are processing and using personal data about you, at your request and, if so, provide you with access to and a copy of such personal data and the other details to which you are entitled.
8.4 Rectification. We will correct any inaccurate personal data and complete any incomplete personal data (including by providing a supplementary statement) that we hold about you without undue delay at your request.
8.5 Prevention of Processing Likely to Cause Damage or Distress. We will respect your rights to require us to cease or not to begin the processing of your personal data for a specific purpose, or in a specific way, that is likely to cause unwarranted damage or distress, either to you or a third party.
8.6 Erasure. We will erase your personal data at your request without undue delay in certain circumstances, (for example, among other things, if your personal data is no longer needed for the purposes for which it was collected or otherwise used).
8.7 Restriction. We will restrict the processing of your personal data in certain circumstances (for example, among other things, if you believe that your personal data held by us is inaccurate), if requested by you to do so.
8.8 Data Portability. We will respect your rights to receive your personal data provided to us in a structured, commonly used and machine readable format and to transmit such personal data to another data controller without hindrance from us in certain circumstances.
8.9 Right to Object. We will respect your general rights to object to the processing of your personal data in certain circumstances.
8.10 Right to Object to Marketing. We will respect your rights regarding use of your personal data for direct marketing purposes. In particular, we will not begin or we will cease processing your personal data for direct marketing purposes, including profiling if it is related to such direct marketing, if at any time you ask us not to do so.
8.11 Automated Individual Decision-Making, Including Profiling. We will respect your rights in certain circumstances (which are subject to certain exceptions) not to be subject to decisions which are based solely on automated processing of your personal data, including profiling, especially where such processing has legal or other significant effects on you.
We will inform you about any such decisions. Subject to certain exceptions, we will usually obtain your explicit consent before making any decisions based solely on automated processing activities and put in place appropriate safeguards to protect your rights, freedoms and legitimate interests in these circumstances.
Among other things, we ensure that individuals can always obtain a review by one of our staff members of any automated decisions and are able to express their point of view and contest any such decisions.
We will not make any automated decisions based on sensitive personal data unless we have obtained explicit consent from individuals to do so, or this is otherwise necessary for substantial public interest reasons based on applicable law.
8.12 Scientific or Historical Research Purposes or Statistical Purposes. To the extent relevant, we will respect your rights to object to our processing of your personal data for scientific or historical research purposes, or statistical purposes, unless this is necessary to perform a task which is carried out for reasons of substantial public interest.
Contact and Complaints Open or Close