Data Protection Policy

Data Protection Policy - need to check

Last updated: 31/01/2024

Action for BPAN ("we", "our", "us") is committed to protecting and respecting the privacy and confidentiality of all personal data we process. As a registered charity in the UK, we aim to comply with the Data Protection Act 2018 and General Data Protection Regulation (GDPR). This Data Protection Policy explains how we collect, use, store, and protect your personal data when you visit our website www.actionforbpan.org.uk ("our site") and engage with our services.

1. Purpose of the Data Protection Policy

The purpose of this policy is to outline how Action for BPAN processes personal data to ensure compliance with UK data protection laws. We are committed to safeguarding the privacy of individuals and the confidentiality of their personal data.

2. Scope of the Policy

This policy applies to all personal data collected, processed, and stored by Action for BPAN, including but not limited to:

Individuals who donate to the charity or sign up for events.
Individuals who sign up for communications such as newsletters or updates.
Individuals who interact with us via our website or other communication channels.

3. Data Controller

The Data Controller for the purposes of this policy is Action for BPAN, which determines how and why your personal data is processed.

Contact Information:

Action for BPAN

actionforbpan@gmail.com

Westfield Lodge, Old Mill Lane, Bray, Maidenhead, SL6 2BG

Registered charity number: 1210529

4. What Personal Data We Collect

We may collect the following types of personal data:

Personal Identification Information: Full name, contact details (email, phone number, postal address).
Payment Information: Credit/debit card details and other payment information for processing donations.
Donation Data: Information about donations, including amounts, frequency, and method of donation.
Event Registration Data: Details of events or campaigns you participate in.
Communication Data: Information you provide when you sign up for our newsletters, respond to surveys, or communicate with us.
Technical Data: Information on how you use our website, such as IP address, browser type, and pages visited.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

To process donations: To process and confirm your donations, provide receipts, and manage Gift Aid claims.
To send communications: To send you updates, newsletters, and information about our activities, events, or campaigns. You may opt out of these communications at any time.
For event management: To manage registrations for events or volunteer opportunities.
To improve services: To analyse and improve the functionality of our website and services.
For legal compliance: To comply with legal obligations, such as Gift Aid reporting and other regulatory requirements.

6. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

Consent: When you have given us explicit consent to process your data, such as when you subscribe to our newsletters or opt-in to communications.
Contractual necessity: For processing donations or event registrations.
Legal obligation: When we are required to process data to comply with legal requirements, such as claiming Gift Aid.
Legitimate interests: For activities that are in our legitimate interests, such as direct marketing or fundraising, provided these interests do not override your rights and freedoms.

7. How We Protect Your Data

We take appropriate measures to protect your personal data, including:

Using encryption technologies to safeguard sensitive data, such as payment details.
Ensuring that only authorized staff have access to personal data.
Regularly reviewing our security practices to prevent unauthorized access, alteration, disclosure, or destruction of your data.

Although we implement robust security measures, please note that no system is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

8. Sharing Your Personal Data

We do not sell, rent, or lease your personal data to third parties. However, we may share your data in the following circumstances:

Service providers: We may share data with trusted third-party service providers who assist with payment processing, event management, and communication delivery. These third parties are required to keep your data confidential and use it only for the purposes for which it was provided.
For Gift Aid claims: We may share your data with HMRC for claiming Gift Aid on eligible donations.
For legal reasons: We may disclose your data if required by law or if necessary to protect our rights, safety, or the safety of others.

9. Your Rights Over Your Personal Data

Under the UK Data Protection Act 2018 and GDPR, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct any inaccurate or incomplete data we hold about you.
Right to erasure: You can request that we delete your personal data, subject to certain legal exceptions.
Right to restrict processing: You can ask us to limit how we process your data.
Right to data portability: You can request a copy of your data in a machine-readable format to transfer to another organization.
Right to object: You can object to certain types of data processing, such as marketing communications.
Right to withdraw consent: You can withdraw any consent you have given for data processing at any time.

To exercise these rights, please contact us at [email/contact information].

10. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Once your data is no longer needed, it will be securely deleted or anonymized.

11. Cookies

We use cookies to enhance your experience on our website. Cookies are small text files that are placed on your device and help us analyze website traffic and improve functionality. You can control the use of cookies by adjusting your browser settings. However, please note that blocking certain cookies may affect the website’s functionality.

For more detailed information about cookies, please refer to our Cookie Policy.

12. Third-Party Websites

Our website may contain links to third-party websites. These sites have their own privacy policies, and we are not responsible for how they collect, use, or protect your personal data. We encourage you to review the privacy policies of any third-party websites before providing them with your personal information.

13. Changes to This Policy

We may update this Data Protection Policy from time to time to reflect changes in our practices, legal requirements, or technology. Any changes will be posted on this page, and the "Last Updated" date at the top of the policy will be revised.

14. Contact Information

If you have any questions about this Data Protection Policy or how we handle your personal data, please contact us:

Action for BPAN
Westfield Lodge, Old Mill Lane, Bray, Maidenhead, SL6 2BG
actionforbpan@gmail.com
Registered charity number: 1210529