Effective Date: 11/08/2024
1. Introduction
Just Penny Foundation (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
2. Information We Collect
We may collect and process the following personal data:
- Personal Identifiers: Name, address, phone number, email address, and other contact details.
- Donation Information: Payment details, donation history, Gift Aid status, and preferences.
- Communication Preferences: Your preferences for receiving communications from us, including newsletters and fundraising appeals.
- Volunteer Information: If you volunteer with us, we may collect information relevant to your role, including background checks.
- Event Participation: Information related to your participation in our events, including dietary requirements or accessibility needs.
- Technical Data: IP address, browser type, and other technical data collected through cookies and similar technologies.
- Sensitive Personal Data: We may collect sensitive personal data (such as health information) only with your explicit consent and solely for the purposes it was provided.
3. How We Use Your Information
We use your personal data for the following purposes:
- Processing Donations: To process your donations, claim Gift Aid, and send you receipts.
- Communications: To communicate with you about our work, events, campaigns, and opportunities to support us.
- Volunteer Management: To manage our relationship with volunteers, including recruitment, training, and support.
- Event Management: To organize and manage events, ensuring they run smoothly and meet participants’ needs.
- Fundraising and Marketing: To send you information about fundraising campaigns and other ways to support our work, in line with your communication preferences.
- Compliance: To comply with legal obligations, including financial regulations and safeguarding requirements.
- Improving Our Services: To analyze data for improving our website, services, and communications.
4. Legal Basis for Processing
We rely on the following legal bases for processing your personal data:
- Consent: We will seek your consent to process your data when required, particularly for sensitive personal data and certain types of marketing.
- Legitimate Interests: We may process your data to further our legitimate charitable interests, provided this does not override your rights and freedoms.
- Contractual Necessity: To fulfill a contract with you, such as processing a donation or registering you for an event.
- Legal Obligation: To comply with legal obligations, such as financial reporting and safeguarding.
5. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third-party service providers who assist us in our operations, such as payment processors, IT service providers, and marketing platforms.
- Legal Authorities: Government bodies, regulators, and law enforcement agencies, where required by law.
- Partner Organizations: Charitable partners with whom we collaborate, only if you have given your consent.
We do not sell or rent your personal data to third parties.
6. International Transfers
If we transfer your data outside the UK or European Economic Area (EEA), we will ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses or an adequacy decision by the European Commission.
7. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. Once your data is no longer needed, we will securely delete or anonymize it.
8. Your Rights
Under GDPR, you have the following rights:
- Access: To request a copy of the personal data we hold about you.
- Rectification: To request the correction of inaccurate or incomplete data.
- Erasure: To request the deletion of your data when it is no longer needed or if you withdraw consent.
- Restriction: To request the restriction of processing under certain circumstances.
- Data Portability: To receive your data in a structured, commonly used format or have it transferred to another controller.
- Objection: To object to processing based on legitimate interests or for direct marketing purposes.
- Withdraw Consent: To withdraw your consent at any time, where processing is based on consent.
You can exercise these rights by contacting us at [Insert Contact Information].
9. Security
We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
10. Cookies and Tracking
Our website uses cookies and similar technologies to enhance your browsing experience, analyze website traffic, and personalize content. For more details, please refer to our Cookie Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
- Email: info@justpenny.org
- Phone: +447854765087
- Postal Address: 173 Withington Road-Whalley Range -Manchester -M16 8EF
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.
