Data Protection Act 2018 and legal basis for processing

All the personal information that we collect and use is handled in accordance with the Data Protection Act principles. These state that personal data processing must be:

  1. lawful and fair
  2. specified, explicit and legitimate
  3. adequate, relevant and not excessive
  4. accurate and kept up to date
  5. kept for no longer than is necessary
  6. held securely

We process your data as described in this Privacy Statement because we have a legitimate interest to meet our charitable objectives. Some processing of data may be carried out to perform a contract with you, or it is required by law, such as the completion of due diligence, or obligations for processing Gift Aid on your donations.

We will only use your email or telephone information to contact you for fundraising or marketing purposes if we have your explicit consent to do so. In some cases, we may not yet have received consent from you to contact you by post, but feel that you may be interested in our communications (for example, if you have recently supported us in some way, perhaps by donating or signing up for a fundraising event). We may exercise our legitimate interest to contact you by post in these circumstances, but we will always carry out an assessment beforehand to ensure that the way we use your data is fair and does not exceed what you would reasonably expect to receive from us.

You will always be given the opportunity to opt out of communication by any channel at any time, and we will always make it clear to you how to do this.

Last updated: August 14, 2018