Data Processing Notice

 

Our commitment to data protection

This Data Processing Notice (‘Data Processing Notice’) sets out how Hope 4 UK (‘we’, ‘us’ or ‘our’ being interpreted accordingly) uses and protects the personal information about you that we collect or that you provide, whether through our UK website at www.hope4.org (‘Website’) or by other means. The data we collect and process is for the purposes of the provision of aid as a non-profit organisation

Who we are

HOPE4 is a registered Charity (‘1144362’), incorporating it’s Community Interest Company (CIC) (‘13115805’).

For the purpose of processing the data detailed below, we are the Data Controller

 

Changes to our Data Processing Notice

As our process and data collection expands to meet the ever changing needs of those we serve and help, this Data Processing Notice will also change to reflect those updates and can do so at any time

Please review this Data Processing Notice regularly and if you have any concerns, please contact us at: [email protected] . We aim to post changes to the data collection and processing we undertake, as outlined in this Data Processing Notice, at least 30 days prior to them being implemented.

 

The Personal data we collect

We collect personal information from you in various ways, for example:

  • When using this Website (subject to your preferences expressed through our Cookie Control);
  • In the course of registering for support;
  • When making a donation through our UK appointed partner, Donor Box in which case they will provide us with this information – see also section headed Third Party Platforms below;
  • When you sign-up to receive newsletters or email notifications from us;
  • if you order any merchandise; and/or
  • if you raise a query or issue with us.

 

 

The types of personal data we process:

When collecting personal data through the above methods, the type of data we collect includes, but isn’t limited to

  • First Name
  • Last Name
  • Email Address
  • Home Address
  • Work Address
  • Contact Number
  • Details of your request
  • IP address (Only via consent through our Cookie Control)
  • Browser history (Only via consent through our Cookie Control)
  • Location data (Only via consent through our Cookie Control)
  • Your donation amounts
  • Donation Frequency

Donations:

Credit card or debit card data you provide is securely handled by Donor Box as our third party payment processor (or such other third party payment processor) as we use from time to time. We never store your credit or debit card details. In this respect, the Payment provider operates as an Independent Data Controller.

 

Lawful basis:

In order for us to process your personal data, in accordance with the obligations under the UK GDPR, we must have a lawful basis to do so. We process the following personal data under the lawful basis’ stipulated for the purposes defined:

 

Lawful Basis Personal Data Processed Purpose
Legitimate Interests First Name, Last Name, email address, home address, work address, contact number, details of your request, email messages, your donations amounts, donation frequency In order that we can provide you with the information you request from us or to help you administer your donations in line with service updates or any changes in the technology used.
Legitimate Interests First Name, Last Name, email address, contact number, We may contact you from time to time requesting your feedback on our activities or other such feedback that can help us improve how we save lives and help others.
Legitimate Interests First Name, Last Name, email address, home address, work address, contact number your donations amounts, donation frequency In order that we can provide you with opportunities to donate to specific activities or to provide you with opportunities to volunteer for particular events or activities, we will use this data to create a profile of you that will assist in the personalisation of our communications with you and opportunities for you. (See profiling section below)
Consent First Name, Last Name, email address Where you have provided your consent to receive information in the form of newsletters detail events or other operations that you may wish to donate to
Contract First Name, Last Name, Email address, Home Address, Work Address Where you have purchased merchandise from us, we will fulfil our contractual obligation to provide you the goods purchased

 

Use of personal data

We may use your Personal Data about you for the following purposes:

  • providing you with access to our Website as well as administering or developing Website features or content;
  • fundraising or direct marketing purposes. Where you have expressly consented to us doing so in accordance with applicable law, we may contact you for these purposes by telephone or electronic message (e.g. email or SMS). We may also contact you by post from time to time, unless you have told us that you do not want to receive these communications. If you wish to update your Personal Data or opt-out of receiving further fundraising or marketing communications from us please get in touch at the address shown in the Contact section below;
  • administering any on-going donations or support you provide;
  • providing you with news about us or any projects, campaigns or events that we may be involved in;
  • where you have agreed to take part in a survey or research;
  • we may also use tools to geo-locate a UK IP address when someone lands on www.hope4.org and offer them the opportunity to switch to our UK Website through a pop up message; and/or we may switch them automatically
  • we may also occasionally use Personal Data for the purpose of profiling (see the Profiling section below).

We may also contact you for other purposes that you consent to from time to time.

Profiling

Please note that we may occasionally use Personal Data to conduct profiling of certain donors or to conduct analysis of our donor database or persons who have positively expressed an interest in attending one of our events. This will help us target communications with our donors in a more relevant, efficient and cost effective way, helping us reduce the chances of donors receiving inappropriate or irrelevant communications.

To do this profiling we may cross-check certain Personal Data against public sources to get a better understanding of who our donors are. You can object to such use of your Personal Data for this purpose at any time by contacting us at the address shown in the Contact section below. For more information about the profiling that we do please contact us at [email protected].

 

Disclosing personal data to third parties

We never sell, trade or rent Personal Data. We do not disclose Personal Data to third parties without your consent unless we are legally required to do so or where we need assistance of third party data processors (acting under our instructions) who we may need to assist us to respond to your enquiry. We will take reasonable steps to ensure that Personal Data is only used by those third parties for specific, lawful purposes in accordance with this Privacy Policy.

 

International transfers

You should be aware that, in general, legal protection for personal data under applicable law in the United States (and other non-EU countries) may not be equivalent to the protection provided in the European Union and/or under UK law. In all cases, Personal Data you provide will only be disclosed to staff, volunteers and contractors who share our commitment to treating Personal Data responsibly and we always aim to make sure your Personal Data is treated to the same security standards you would expect in the United Kingdom. Our staff, contractors and volunteers globally are bound by confidentiality agreements and as such operate as Hope4.

Where we utilise cloud based solutions, we endeavour to ensure that data is stored and processed within the UK/EEA. Where this is not possible, we enter into Data Processing Agreements with those companies. The DPAs encompass the appropriate transfer mechanism which will be either the Approved EU Standard Contractual Clauses with the UK Addendum OR the approved UK International Data Transfer Agreement (IDTA).

These mechanisms are in place to validate those transfers and provide legal recourse relating to the processing of the personal data.

 

 

 

Your access rights

The UK GDPR provides the data subject (You) a number of rights in relation to the personal data processed about you. These are:

  1. Right to be Informed
  2. Right to Access
  3. Right to Object
  4. Right to Rectification
  5. Right to Erasure
  6. Right to Data Portability
  7. Right to Restrict Processing
  8. Rights relating to automated decision making

For more information on these rights, please visit: ICO Guide to Individual Rights

If you wish to exercise any of these rights, please email our UK data protection officer at the email address in the ‘Contact’ section below stating which right you’re wishing to exercise.

For requests from the UK/EEA no fee is applicable for the exercising of these rights.

If your requests originates from an alternate jurisdiction under which your data is governed and that law allows it, we may request a fee to cover our administrative expenses in responding and may also require further information to verify your identity or locate the specific information you seek before we can respond in full.

To learn how you can make a request for your data to be deleted, please email us at [email protected].

 

Security to protect personal data

We employ appropriate technical and organisational security measures to protect Personal Data from being accessed by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. We also take all reasonable steps to protect Personal Data from external threats. However, please be aware that there are always inherent risks in sending information by public networks or using public computers and we cannot 100% guarantee the security of all data disclosed or transmitted to us.

 

Data retention

We will retain certain Personal Data in respect of financial transactions for at least as long as the law requires us to for tax or accounting purposes (which in the UK may be up to 6 years after a particular transaction). In respect of the holding of Personal Data for fundraising or direct marketing purposes, we will retain this data for a limited period in line with recommendations of competent regulatory authorities

 

 

 

Third party platforms

This Website will link to third party websites that operate outside our control. If you access any other third party website using the links provided on this Website, the operators of those websites may collect personal data about you under their own privacy notices, so you should check the terms of any applicable privacy policy when you visit such third party website.

We implement Google’s Invisible reCAPTCHA to protect our site from spam and abuse. Use of this service is subject to Google’s privacy policy and terms.

 

Contact

If you have further queries or requests relating to how we use Personal Data please contact our UK data protection officer at [email protected]

 

Versioning:

1.0 – Initial Privacy Notice
2.0 – Updated Notice. Greater rights explanations and separation of the Cookie Notice

Scroll to Top