Privacy Policy

The personal data that we collect about you will be based on how you interact with us, but we collect the following information from many of our supporters:

• Your name and contact details, i.e. postal address, email address and your telephone number or numbers.
• How you have opted to hear from us, including when you communicated this preference to us.
• Details of any correspondence we have had with you, for example, if you have ever made a donation by telephone, will be recorded.
• Any fundraising or advocacy appeals that you may have responded to?
• Information you have provided as part of the recruitment process when you have applied to join WRBLO as a member.

There is also other information that we may collect and hold in specific circumstances. For example:

• Financial data, including bank or payment card details (for example, if you donate).
• Campaigning actions that you have taken on our behalf.
• Our telephone system lists the numbers that have recently been called or dialled, but we do not link these to any individual records.
• Information to support our work with high-net-worth individuals, to understand their philanthropic interests, and complete any necessary due diligence.
• Information relating to your employment or volunteer role with WRBLO.
• Technical data, such as your IP address, is collected when you browse our website.
• Marketing data, including your preferences for receiving communications from us.
• Media data, including photographs, video, and audio recordings

As a nonprofit, we rely on a variety of methods to keep our supporters engaged and informed about our work. We may use data collected for the following purposes:

• To keep you informed and obtain your views on our activities.
• To provide you with information about our work and opportunities for you to participate in events, and third parties connected with us, either through direct communications or newsletters.
• To process your payments and donations and keep our records up to date.
• To process and respond to requests, enquiries and complaints received from you or about you.
• To provide services or information requested by you and any related communications.
• To recommend products and services that we believe will be of interest to you.
• To analyse trends and profiles to understand our performance better, improve our services and better meet the needs of our supporters, or to report on the results and impact of our work.
• To administer our website.
• To process employment applications.
• To transfer to service suppliers who undertake processing on our behalf, at our direction or otherwise, or to transfer any personal information to any other regulator or government body as required.
• For legal obligations (including those arising under contracts) and regulatory compliance.
• For audit purposes and to administer our accounts.
• To detect or prevent fraud, misuse of services or money laundering.
• The enforcement of legal claims.
• For any other purposes, which we will notify you about.

Data privacy laws identify specific categories of personal information as sensitive and therefore require more protection. It is unlikely that we will collect and/or use your sensitive personal information (also known as special category data). If we do, we will only do so with your explicit consent, unless otherwise permitted by data privacy law.

https://www.paypal.com/webapps/mpp/ua/privacy-full

Like most websites, the WRBLO site uses cookies —small data files that are downloaded when you use a website —to make the site easier to use. The information gathered is anonymous to us, but it helps us understand how people use our site, allowing us to provide a better user experience. You can find out all about cookies in our specific cookies policy.

Our legal bases for collecting and using your personal information are.

To lawfully collect, hold and use your personal information, we must rely on one or more of the six grounds set out in data privacy law. We consider the following to be relevant to our use:

1. Where you have given consent (for example, to send you promotional or fundraising material by email, and we may ask for your explicit consent to collect certain types of sensitive information).
2. Where it is necessary to comply with a legal obligation.
3. Where it is necessary for the performance of a contract with you or to take steps at your request before entering a contract.
4. Where it is necessary to protect someone’s vital interests. Whilst we are unable to advise individuals directly on their circumstances and do not provide a helpline service, as a charity, we may occasionally receive enquiries from individuals in distress who are displaced and otherwise vulnerable. We may refer these enquiries on to those better equipped to assist if we feel yours or another’s vital interests are at risk.
5. Where there is a ‘legitimate interest’ in us doing so.

The law allows us to collect and use personal information if it is necessary to achieve our or others’ legitimate interests (if to do so is fair, balanced and does not unduly impact your rights). In general, our legitimate interests include the operation of a charitable entity and the pursuit of our mission and vision. This may include charity governance, administration, operational management, fundraising, and campaigning (including sending mail marketing and analysing data to develop effective communication and fundraising strategies). When we rely on this lawful basis, we consider and balance any potential impact on you (positive and negative) and on your privacy rights.

We will make it easy for you to tell us if you would like to receive marketing communications (including fundraising and campaigning communications) from us and hear more about our work. You can also let us know how you prefer to receive this information (post, email, SMS, or phone). In every communication, we will clearly state how you can opt out of receiving further marketing communications, either entirely, on specific topics, or via certain methods.

If you tell us that you do not want to receive marketing communications, we will remove you from our list and will then not send you any further marketing materials.

There are several circumstances where we only process your data based on your consent. Examples of this are:

• To send you marketing by email.
• To send you marketing by SMS (text message).
• To send you direct messages through social media.

When you give your consent for us to contact you, we do not consider this consent to be valid indefinitely. However, we understand that our supporters want to continue hearing from us while they have an active relationship with us, and for a period afterwards.

Here are some examples of what we mean by an active relationship:

• If you donate or sponsor payments to us, including regular monthly gifts.
• If you have informed us that you have left a gift in your Will.
• If you have an ongoing conversation with one of our donors about our work.

We will consider your consent to be valid while you take these actions and for a maximum of 60 months afterwards (or less if relevant), to enable us to keep you up to date with our work and to offer you other ways you might choose to support us. Before this period ends, we will contact you to confirm that you are still happy to hear from us. After the period ends, we will remove your information from all our systems, unless you have replied to confirm that you would like to continue hearing from us.

You can change your contact preferences at any time. This includes informing us that you do not wish to be contacted for marketing purposes.

You can do this quickly and easily by clicking the ‘unsubscribe’ link at the footer of our emails to indicate that you do not wish to receive our emails.

You are in control of how we use your data, and you have the right to request that we stop processing your personal information. You also have the right to request a copy of the information we hold about you.

You are also granted additional rights under data protection legislation, which are outlined below:

• Where we are processing data based on your consent, you have the right to withdraw consent at any time. Please see ‘Managing Your Contact Preferences’ (above) for more information on how to do this.
• You have the right to change your personal information if it is incomplete or inaccurate.
• You have the right to request the deletion or removal of your personal information in certain circumstances, including where it is no longer necessary for us to hold it for the purposes for which we are processing it.
• You have the right to restrict our processing of your data if there is disagreement about its accuracy or legitimate usage.
• You have the right to move, copy, or transfer your personal information easily and safely from one IT environment to another, in some circumstances.
• You have the right to object to processing based on legitimate interests (as described above), including “direct marketing.”

Please note that these rights are not exercisable in all circumstances. For example, personal data may not need to be erased if it is required for compliance or historical research purposes.

If you would like to request a copy of the personal information that WRBLO has on file for you, please contact our team, and we will respond to your request within one month of receipt.

What to do if you are not happy

Listening and responding to feedback from our supporters is essential to us.

You can make a complaint or raise a concern about how we process your personal information by contacting any of our staff.

We will acknowledge a complaint about any aspect of our data protection policy within five working days and aim to resolve complaints within ten working days of receiving them. If you are dissatisfied with our response, please contact us using the details provided below.

• Mail:  Rivers Lodge, West Common, Hertfordshire AL5 2JD
• Email: info@wrblo.org

Suppose you are not happy with how we have handled your complaint. In that case, you can contact the Information Commissioner’s Office (which is responsible for upholding information rights in the UK) or the Fundraising Regulator (which is responsible for overseeing fundraising activities carried out by charities and similar organisations in the UK). Alternatively, you may choose to contact these bodies directly, regardless of whether you have already raised the complaint with us.

Our Privacy Policy is regularly reviewed to ensure it accurately reflects how we use your information. Any changes will be notified to you by updating this policy. Please review this Policy regularly to check for any critical changes that may affect you. Where appropriate, changes will be notified to you by email.