CONTENTS
- OUR PRIVACY POLICY
- WHO WE ARE
- INFORMATION COLLECTION
- YOUR DEBIT AND CREDIT CARD INFORMATION
- LEGAL BASIS & LEGITIMATE INTERESTS
- MARKETING MATERIALS
- FUNDRAISING
- RECIPIENTS - INFORMATION AND DISCLOSURE
- UNDER 18S
- INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
- KEEPING YOUR PERSONAL INFORMATION
- WEBSITE USERS
- COOKIES TRACKING
- INAPPROPRIATE WEBSITE CONTENT
- YOUR RIGHTS TO YOUR PERSONAL INFORMATION
- YOUR ABILITY TO EDIT AND DELETE YOUR ACCOUNT INFORMATION PREFERENCES
- CHANGES TO THIS PRIVACY POLICY
- COMPLAINTS COMPLIMENTS OR COMMENTS
- CONTACT US
1. OUR PRIVACY POLICY
What this privacy covers
The SHITAL is committed to protecting your personal information and being transparent about what information we hold, whether you are a donor, volunteer, shopper or campaigner.
Developing a better understanding of our supporters through their personal data allows us to fundraise more efficiently, which ultimately helps in the fight for every heartbeat. We have made improvements to this policy so that transparency is at the core of what we do, especially around our policy on profiling and wealth screening (see 'Fundraising' section below).
The purpose of this policy is to give you a clear explanation about how the SHITALand all of its subsidiaries collects and uses the personal information you provide to us and that we collect, whether online, via phone, email, in letters, social media or in any other correspondence or from third parties.
We ensure that we use your information in accordance with all applicable laws concerning the protection of personal information. This policy explains:
- What information the SHITAL may collect about you;
- How we will use that information;
- Whether we disclose your details to anyone else;
- Your choices regarding the information you provide to us; and
- How we use cookies to provide services to you or to improve your use of our websites.
If you have any queries about this privacy and cookies policy please contact the Shital Manager, SHITAL, PO Box 1094, Union Road, WEMBLEY, HA0 9JT or email: [email protected].
2. WHO WE ARE
We are the religious charity in the UK and our registered charity number is 1138530 in England and Wales. We are also registered as a company in England and Wales under registration number 06885384.
3. INFORMATION COLLECTION
We collect information in the following ways:
- Information you give us. For example, when you engage with our social media or message boards, make a donation to us, buy some products from us, register for an event or otherwise provide us with personal information. When you register, we’ll ask for personal information, like your name, email address and telephone number to store with your account.
- Information we get from your use of our website and services. We collect information about the services you use and how you use them, like when you watch a video on YouTube, visit our websites or participate in our events.
- Information from third parties. We may also receive information about you from third parties. This can include information such as your name, postal address, email address, phone number, your geographic location (for mobile devices) and whether you are a tax payer so that we can claim Gift Aid. We, like all companies, are able to confirm what browser you are using, IP address and computer operating systems that are being used and this information may be used to improve the services we offer
Wherever possible we use aggregated or anonymous information which does not identify individual visitors to our websites. See below, under marketing materials – to understand our purposes for processing your personal information.
Data Protection law recognises that certain categories of personal information are more sensitive. This is known as sensitive personal data and covers health information, race, religious beliefs and political opinions. We do not usually collect “sensitive personal data” about our supporters unless there is a clear reason for doing so, such as participation in a walk/marathon or similar fundraising event or where we need this information to ensure that we provide appropriate facilities or support to enable you to participate in an event.
We may also collect sensitive personal data if you make the information public or if you tell us about your experiences relating to experience (for example, if you want to publish in our yearly magazines); however we will always make it clear to you when we collect this information from you, what sensitive personal data we are collecting and why.
4. YOUR DEBIT AND CREDIT CARD INFORMATION
If you use your credit or debit card to donate to us, buy something or pay online or over the phone, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard.
You can find our more information about PCI DSS at https://www.pcisecuritystandards.org/security_standards/index.php
We do not store your credit or debit card details at all, following the completion of your transaction.
If we receive an email containing any credit or debit card details, it will be immediately deleted, no payment will be taken and you will be notified about this. All purchases or donations should be completed through the donation page or online shop on our website(www.shirdisai.org.uk) or by calling +44(0) 208 9022 311.
5. LEGAL BASIS & LEGITIMATE INTERESTS
When we collect and use your personal information, we will make sure this is only done accordance with at least one of the legal grounds available to us under Data Protection law.
One of these is where we have obtained your specific consent to use your information for a previously notified purpose, such as to send you email/text marketing or to provide you with a product, service or information at your request.
Another is where we have a legal obligation to use or disclose information about you – for instance, where we are ordered by a court or regulatory authority or we are legally required to hold donor transaction details for Gift Aid or accounting/tax purposes.
In certain instances, we may collect and use personal information where this is necessary in our legitimate interest as a charity, this includes being able to:
- send direct marketing material to supporters by post or contacting them by telephone for fundraising purposes (subject to checking against the Telephone Preference Service and any existing marketing preferences). See more at Marketing Materials below;
- conduct research to better understand who our supporters are and better target our fundraising activity. See more at Fundraising below;
- monitor who we deal with to protect our charity against fraud, money laundering and other risks;
- maintain and administer our donor database and systems.
In all cases, we balance our legitimate interests against your rights as an individual and make sure we only use personal information in a way or for a purpose that you would reasonably expect in accordance with this Policy and that does not intrude on your privacy or previously expressed marketing preferences.
Where we process sensitive personal data (as mentioned above), we will make sure that we only do so in accordance with one of the additional lawful grounds for processing such as where we have your explicit consent or you have made that information manifestly public. When we do this, we will tell you what sensitive personal data we are collecting and why.
6. MARKETING MATERIALS
We want to ensure you receive the level of information about the SHITAL that is right for you.
Email/text marketing:
If you actively provide your consent to us along with your email address and/or mobile phone number, we may contact you for marketing purposes by email or text message. By subscribing to SHITAL emails or opting in to email communication from SHITAL, you grant us the right to use the email for both email marketing purposes and advertisement targeting
Post/telephone marketing:
If you have provided us with your postal address or telephone number we may send you direct mail or telephone you about our work unless you have told us that you would prefer not to receive such information.
Your choice:
It is always your choice as to whether you want to receive information about our work, how we raise funds and the ways you can get involved. If you do not want us to use your personal information in these ways please indicate your preferences on the form on which we collect your data.
You may opt-out of our marketing communications at any time by clicking the ‘unsubscribe’ link in at the end of our marketing emails sending us an "opt-out" text message, following the instructions we provide you in our initial text.
You can also change any of your contact preferences at any time (including telling us that you don’t want us to contact you for marketing purposes) by contacting us on +44(0) 208 9022 311 or sending an email to [email protected].
We will not use your personal information for marketing purposes if you have indicated that you do not wish to be contacted by us for such purposes. However, we will retain your details on a suppression list to help ensure that we do not continue to contact you.
7. FUNDRAISING
We carry out targeted fundraising activity to ensure that we are contacting you with the most appropriate communication, which is relevant and timely and will ultimately provide an improved experience for you. In doing so, we may use profiling techniques or use third party wealth screening companies and insight companies to provide us with general information about you (this is not in practice and may be in future) Such information is compiled using publicly available data about you or information that you have already provided to us.
8. RECIPIENTS - INFORMATION AND DISCLOSURE
The SHITAL may disclose your personal information in the following circumstances:
- To other SHITAL entities, trading subsidiaries, suppliers or service providers only to provide the products or services you've requested from our site(s) where, for example, we use a separate company to deliver goods to you.
- To third parties who provide a service to us and are data processors. This would include our trusted partners that work with us in connection with our charitable purposes, and other entities that act as fundraisers for SHITAL , sell SHITAL services or provide SHITAL information and marketing (subject to your communication preferences and our internal policies and procedures). We require these third parties to comply strictly with our instructions and data protection laws and we will make sure that appropriate controls are in place. We enter into contracts with all of our data processors and regularly monitor their activities to ensure they are complying with SHITAL policies and procedures.
- Where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example to government bodies and law enforcement agencies), or in order to enforce or apply our rights (including in relation to our website or other applicable terms and conditions) or to protect the SHITAL, for example in cases of suspected fraud or defamation.
Rest assured, we will never share, sell or swap your details with any third parties for the purposes of their own marketing or the monetising of your data.
9. UNDER 18S
We are committed to protecting the privacy of the young people that engage with us.
Our fundraising events also request specific information about the age of participants. If you are under 18 and would like to get involved, please ensure that you have consent from a parent or guardian before giving us your personal information. When we collect information about a child or young person aged under 18 we will make it very clear as to the reasons for collecting this information and how it will be used.
10. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION:
For financial and technical reasons we may, on occasion decide to use the services of a supplier outside the European Economic Area (EEA), which means that your personal information is transferred, processed and stored outside the EEA. This includes countries that the European Union authorities do not consider provides and adequate level of protection for personal data. However we take steps to put in place suitable safeguards to protect your personal information when processed by the supplier such as entering into the European Commission approved standard contractual clauses. If you would like to receive further information about our safeguards, please contact the Manager, SHITAL, PO Box 1094, Union Road, WEMBLEY, HA0 9JT or email: [email protected]
11. KEEPING YOUR PERSONAL INFORMATION:
We keep your personal information only for as long as required to operate the service in accordance with legal requirements and tax and accounting rules. Where your information is no longer required, we will ensure it is disposed of in a secure manner.
12. WEBSITE USERS
All SHITAL websites use cookies to help our websites work well and to track information about how people are using them. More information on cookies can be found further down the page under 'Cookies'.
In addition, if you register on our websites then the following will also apply:
- All SHITAL websites collect personal information when you register with us.
- The website you sign up to will collect information such as your name, email address and post code. Once you register with that website you will not be anonymous to us when you subsequently sign in.
- As part of the registration process and continued use of SHITAL services, you agree that any registration information you give to SHITAL will always be accurate, correct and up to date. Please do get in touch should you need to amend any of your personal information.
- We collect and retain information about your interactions with us so that we can process your interactions and deal with future queries.
- We use cookies to allow us to store limited information on an individual’s computer to either track them through tracking cookies or to allow people to have automatic logons as an example. We use this information to provide you with a good experience when browsing our website and to improve the functionality of our site.
13. COOKIES TRACKING
We use multiple first and third party technologies such as pixel tags and web beacons to track and improve the user experience on our sites, quality of service and to monitor the effectiveness of campaigns and digital marketing activity.
We may use them to:
- see what website content is popular and how people are using the site as they allow us to track users movement through our websites. This type of information is amalgamated so that we can build up a picture of how the site is performing.
- make sure we offer you a consistent service. For example, if we are testing new website content or we want to run a survey, we use tracking to remember what content you have seen or if you have already been asked to join the survey.
In addition, when we email you, we may place a tag (also known as ‘tracking pixel’) on the email we send out. These let us monitor performance of our emails marketing activity.
Your ability to edit and delete your account information and preferences
The accuracy of your personal information is important to us. You can edit your SHITAL account information, including your address and contact details at any time. If you would like to change your preferences or update the details we hold about you other than online, please contact us e on +44(0) 208 9022 311 or [email protected] or write to SHITAL, PO Box 1094, Union Road, WEMBLEY, HA0 9JT.
14. INAPPROPRIATE WEBSITE CONTENT
If you post or send any content that we believe to be inappropriate, offensive or in breach of any laws, such as defamatory content on our forums or social media pages, we may use your personal information to inform relevant third parties such as your internet provider or law enforcement agencies.
15. YOUR RIGHTS TO YOUR PERSONAL INFORMATION:
Under the Data Protection Act 1998 you have a right to request a copy of the personal information we hold about you and to have any inaccuracies corrected. You also have the right to request us to erase your personal information, request us to restrict our processing of your personal information or to object to our processing of your personal information.
Should you wish to exercise these rights we require you to prove your identity with two pieces of approved identification. Please address requests to the Data Protection, Shital Manager, SHITAL, PO Box 1094, Union Road, WEMBLEY, HA0 9JT and we will respond within 60 days, of receipt of your written request and confirmed ID. Please provide as much information as possible about the nature of your contact with us to help us locate your records. We reserve the right to charge a fee of £10 for this process.
Where you have provided your consent for our use of your personal information, you always have a right to withdraw your consent at any time.
16. YOUR ABILITY TO EDIT AND DELETE YOUR ACCOUNT INFORMATION PREFERENCES:
Where you have provided your consent for our use of your personal information, you always have a right to withdraw your consent at any time.
The accuracy of your personal information is important to us. You can edit your SHITAL account information, including your address and contact details at any time. If you would like to change your preferences or update the details we hold about you other than online, please contact us e on +44(0) 208 9022 311 or [email protected] or write to SHITAL, PO Box 1094, Union Road, WEMBLEY, HA0 9JT.
17. CHANGES TO THIS PRIVACY POLICY:
We may update the terms of this policy at any time, so please do check it from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address you have provided to us or by placing a prominent notice on our website(s). By continuing to use our website you will be deemed to have accepted such changes.
18. COMPLAINTS COMPLIMENTS OR COMMENTS
If you are unhappy with our work or something that we have done or failed to do, we want to know about it. We also welcome your views on what we do well. Your comments enable us as an organisation to learn and continuously improve our services.
Please find further information about giving us feedback, or lodging a complaint on the following page of our website:
19. CONTACT US:
By email: [email protected]
By telephone: + 44(0) 208 9022 311 (Phone lines are open 10am – 5pm Monday to Friday)
By post: SHITAL, PO Box 1094, Union Road, WEMBLEY, HA0 9JT