Fundraising and Marketing Privacy Notice

• When you provide your personal information directly to us

If you sign up to one of our events, make a donation, purchase a product, or communicate directly with our teams for another reason, whether online, on paper, in person, or over the phone, you will be sharing your personal information with us.

• When you provide your personal information through a third-party organisation

Family Action works with other organisations such as JustGiving, London Marathon, Fundraising Event Partners and Corporate Partners, such as organisations who have us as their Charity of the Year.  We work with these organisations to make sure that we can provide the best services and opportunities to those we work with, our supporters, staff and volunteers.   If you provide your personal information to these third parties and indicate that you wish to support Family Action or wish to hear from us such as by supporting an event, signing up to hear from us, or making a donation, the organisation you have contacted may share your details with us (including personal information).  For information about the type of information receive through these third parties, see the section below “What type of information do you collect”.  To learn how these organisations use your personal information, please read their Privacy Policy.

• Publicly available personal information

In some circumstances, we may combine information you provide us with personal information available from external sources such as on your employer’s website, in newspaper and magazine articles in the press, or in public records such as Companies House.  This might be in order to provide you with a better experience at Family Action events or to ensure that we are contacting you with information that we feel is relevant to you, or in order that we can provide you with a better and more personal experience in your interactions with Family Action. It also enables us to gain a better understanding of our supporters to improve our fundraising products and services.

If you leave us a legacy and information is required for administration purposes in relation to that legacy, we may refer to publicly available sources in order to obtain the information required for these purposes.

Occasionally we obtain publically available information such as contact information or we research information to help us perform due diligence checks to ensure we are not being abused by fraudsters or criminals posing as genuine donors or to ensure that there are no conflicts of interest from potential supporters or organisations prior to our engagement.  This might be if, for example, we noticed unusual donation activity.  We do these checks to help protect Family Action from abuse. For further information around this please see the marketing section below.

• Social media

We may refer to personal information available on and through your social media profiles (such as LinkedIn, Twitter and Facebook) in order to provide you with a better and more personal interaction with Family Action. Your personal settings within those social networks and the privacy policies of those websites and messaging services will determine what information you have given us, and others, permission to access. Please check your settings and the privacy policies of those sites if you’re not sure what permissions you’ve given.

• When you use our website or apps

So that we can make our website as good as possible, and provide the best possible experience for those who use it, we collect cookies when you use our website.  This can include the pages you visit and areas that are of most interest.  Cookies can also be used to make using the website faster, such as by automatically filling your name and address.  Further information about cookies is set out below and in our cookies policy.

In addition, the type of device you’re using to access our website or apps and the settings on that device may provide us with information about your device, including the type of device it is, what specific device you have, what operating system you’re using, or why a ‘crash’ has happened.  Your device manufacturer or operating system provider will have more details about what information your device makes available to us.

The type information (including personal information) that we collect and use and what we do with it will depend upon your relationship with us.

If you are kind enough to support us, such as by making a donation, registering to hold an event or do some fundraising, signing up for an event, the data that we need to collect will vary, but may include:

• Your name
• Your contact details, including email, telephone number and postal address
• Your date of birth
• Your bank or credit/debit card details and
• (only if we need it, such as if you are taking part in a sporting event), health information.
• Why you’ve decided to support us or make a donation
• Details needed for us to provide you materials such as t-shirt size
• The name and address of your employer, particularly if we are running an event in conjunction with your employer, or your employer is a Corporate Partner of Family Action
• If an event is being provided by a third party, the name and contact details of that third party supplier
• Details needed to improve your event experience such as dietary requirements or accessibility needs
• Invoicing information
• A declaration from you to enable us to re-claim Gift Aid on your donations

We will rarely collect information classified as “special categories of personal data” or “sensitive personal data”, such as information about your race, religious beliefs, political opinions and health information.  We will only do so if there is a clear reason for doing so, such as if you are attending an event and we need your health information to ensure your safety, or to enable you to participate in an event.

If you provide us with your bank or credit card details to process a payment over the telephone or via a postal mailing, we will always ensure that your information is handled securely.  We do not store your credit or debit card details at all following the completion of your transaction. All card details are securely destroyed once the payment or donation has been processed. Only staff authorised and trained to process payments will able to see your card details.

If you make a payment through our website, the payment will be processed through a secure third party such as Stripe or GoCardless and we will not have access to any of your card details.  Your card will be processed in accordance with the policies of the processor providing that service that you will be notified of at the time of making payment and we would refer you to their terms and conditions for further information.

Family Action uses your personal data in different ways, depending on the nature of our relationship with you.

If you make a donation, register to hold an event or sign up for an event or do some fundraising, we need to collect this data for numerous reasons, in order to

• provide you with the services, products or information you asked for;
• administer your donation or support your fundraising;
• process gift aid;
• keep a record of your relationship with us;
• Make sure we know how you prefer to be contacted;
• Understand how we can improve our services, products or information.

We may also use your data for the following:

• Direct Marketing

We will use the details you provide to us to communicate with you about the work we are doing with children and families across the UK, how your support is helping and other ways you can help in the future, such as through volunteering, events or fundraising.  We may also send you appeals asking for a donation to support our work.

We will never send you electronic marketing communications, such as fundraising emails, or contact you by telephone unless we have your express consent that you wish to hear from us in this way.  If you do subscribe to Family Action emails or the e-newsletter, we will understand that you are granting us the right to use that email address for email marketing.

If you don’t currently hear from us by email or receive our e-newsletter and would like to do so, or if you would like to update your preferences, please contact the Fundraising team using the details in the “Contact us” section below.  You can also unsubscribe from Family Action emails by clicking the ‘unsubscribe’ link at the bottom of any of our emails.

We may contact you by post if we believe we have a legitimate interest in doing so and that contacting you in this way will not have unduly adverse consequences for you.  This might be if, for example, you have a history of making donations and have not indicated that you no longer wish to receive these appeals by post.   If you hear from us via the post and no longer wish to do so, please contact us using the details in the Contact us section below.

We are committed to communicating with you in the way you wish us to and we will always respect your privacy. You can change your mind at any time and it is quick and easy to let us know that you no longer want to hear from us by using the contact details in the Contact us section below or by posting us an updated consent form that you may receive in the post.  You can be assured that our staff will deal with any request quickly, sensitively, courteously and professionally.

• Personalisation and Profiling

To help us to make sure you’re happy to hear from us and happy with what we send you, we may use the personal information that we have gathered in the course of our relationship to tailor our future communications.  This includes helping us to understand the likelihood of you responding to a fundraising communication from us, potentially donating and in some instances donating or supporting us at a higher level. The greater understanding of you we can obtain from this information, the more personalised and relevant we aim for our communications to be.

We also carry out targeted fundraising activity to ensure that we are contacting you with the most appropriate communication, which is relevant and timely and will ultimately provide an improved experience for you. For example, by providing timely news about our work, letting you know the different ways you can support us and how you can help raise funds.

You can opt out of your personal data being used for profiling. However, this may mean that you stop receiving marketing communications from us or they become more generic and less relevant to you as they are no longer based on your interests in our cause. If you do wish to opt-out please contact us using the details in the “Contact us” section below.

• Sharing your Story

To show our funders, partners and supporters the great work that Family Action does, we may share anonymised information about the ways in which a successful fundraiser has been able to help Family Action support young people and their families and the work we have been doing.  We will not share any information which makes you identifiable unless you have given us express consent to do so, or, if someone is under 18, without the consent of their parent or guardian.

We will never share your information with a third party who intends to use it for their own marketing purposes and there are very limited instances where we will share your personal data with a third party.   This could include:

• If a third party provides a service to us, such as running an event on our behalf or providing an element of a contract for us, such as email distribution, or fulfilling a Christmas card order. This would include our trusted partners that work with us in connection with our charitable purposes, entities that act as fundraisers for Family Action, sell Family Action’s products or provide Family Action information and marketing for us.
• To assist with the administration of fundraising. For example, if you have indicated that your employer may be willing to match fund any donations you make to Family Action, we may need to contact your employer.
• For the administration of events. For example, an event venue may require the provision of the names of attendees in advance, for security purposes.
• Where there is a legal or regulatory requirement to disclose your personal information such as from HMRC or the courts, we have a genuine and real concern regarding a person’s well-being, or where disclosure is necessary for taxation and criminal investigation purposes;
• where we have your written consent;
• In order to prevent fraud and crime, we may perform due diligence checks to ensure we are not being abused, such as by fraudsters or criminals posing as genuine donors for example money laundering proceeds of crime and tax avoidance. We do these checks to help protect Family Action from abuse;

Family Action has a number of steps in place to keep your personal information as safe as possible.  We train all of our staff in data protection and data security to increase awareness of its importance.  We keep our data protection and data security policies and practices under constant review and review the personal data that we hold, where we hold it and what we do with it.

Family Action requires the third parties it works with to comply with data protection laws and puts controls in place to ensure that your information is handled safely and appropriately.

Wherever possible, we ensure that your personal data is kept in the UK.  We minimise use of servers outside of the EEA and in some limited instances if we need to transfer your personal information to a third party for processing in countries that aren’t listed as ‘adequate’ by the European Commission we’ll only do so where we have appropriate contracts or other appropriate safeguards in place.

By communicating electronically with us you acknowledge and agree that your data may be processed in this way.

We will only keep information about you for the length of time it is necessary to do so to engage with you in the way that you have requested and in accordance with our legal requirements and tax and accounting rules.  When your personal data is no longer needed, we will ensure that it is disposed of in a secure manner.  If you would like us to delete any information we hold about you, please contact us using the details in the “Contact us” section below.

Family Action takes into account the needs of any potential donor who may be in a vulnerable circumstance or require extra care and support to make an informed decision. If in any doubt, if any member of Family Action staff knows or has reasonable grounds for believing that an individual lacks capacity to make a decision to donate, a donation will not be taken.

Family Action are committed to protecting the privacy of the children and young people you provide us with information about, whether this be through our website or at fundraising events.

Family Action requires the consent of a parent or guardian before anyone under 16 years of age participates in an event organised by us. Children aged under 13 must obtain the consent of a parent or guardian before providing any personal information.

Family Action does not have any control over how any third party websites handle and use your data.  Therefore, if you follow any links to third party sites from Family Action websites, you must check the Privacy Policy for that organisation in order to understand how your data could be used.  This policy does not cover third party websites.

Cookies are small text files which are used by websites to learn about your visit to the site and in some cases to tailor your experience on the website.  We use cookies to improve your experience of using the Family Action website.   Find out more about cookies on www.allaboutcookies.org.  You can turn cookies off on your computer – please check your computer settings for further information.  Turning cookies off could restrict your use of our website.

Some of these cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. The data collected is not shared with any 3rd party. The information we get through the use of these cookies is anonymous and we make no attempt to identify you or influence your experience of the site while you are visiting it. If you do not allow these cookies we will not be able to include your anonymous visit in our statistics.

We use cookies on our site that provide functionality, improve performance, help with behavioural advertising and embedded content. We will use a cookie that stores your font size preferences, which allows us to make the size standard throughout the site and we will use a cookie to remember you acceptance of the cookie banner statement.

‘Corporate Subscribers’ are people who Family Action might contact in a professional context, using their work contact details, including phone, email and post.

These contact details may be obtained from public domain sources (company websites etc.), from our own business records or from other companies and business contacts.

Family Action may contact Corporate Subscribers under the legal basis of Legitimate Interests and as permitted under the PECR (2003) legislation.

We may contact corporate subscribers by email or telephone provided that the subscriber has not previously opted out and is not registered with the Telephone Preference Service (TPS) or its corporate equivalent (CTPS).

Direct Mail is not covered by PECR. We may contact subscribers by mail if they have not previously opted out of receiving such communications.

You have a right to object to the processing of your data for direct marketing.
We will provide opt-out notices on our communications to you, or you can advise our team at [email protected].

Family Action understands that PECR (2003) legislation will be replaced by the EU e-Privacy Regulation (ePR) in due course and reserves the right to review this privacy notice accordingly.

• The right to see what personal information we hold about you.

If you would like to know if we are processing any of your personal information or to see the personal information that we hold about you, you can make a request by sending a description of the personal information you wish to see and 2 pieces of identification, so that we can verify your identity to [email protected] or by writing to the Data Protection Officer at Family Action, Family Action, 34 Wharf Road, London N1 7GR. We will respond within 40 days (and from 25 May 2018, it will normally take us one month to get back to you but could take longer (a further two months) if it’s a complex request or we get a lot of requests at once).

In order to make sure that we only send information to the right person, we cannot provide this information or accept requests via email.

• You may have the right to request any of the following in relation to the personal information we hold:
• To request that we amend personal information that we hold incorrectly;
• deletion of the personal information we hold. We will consider any request on a case by case basis;
• for restrictions to be imposed upon how we process your personal information;

You may also have the right to object to the way in which we process your personal information;

If you wish to exercise any of these rights or have any questions in relation to any of the above, please contact us using the details in the “Contact us” section below.

Please note that it may take 28 days for your request to be implemented from the date of the request.

Further information in relation to how you can access and change the information any organisation holds about you, see guidance provided by the Information Commissioner here.

• Internally

If you would like to complain to Family Action about our handling of your personal data, please contact please contact the data protection officer at [email protected], or by post at Family Action, 24 Angel Gate, London EC1V 2PT or on 020 7241 7608.

• To a supervisory authority

If you wish to lodge a complaint or seek advice from a supervisory authority please contact:

The Office of the Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Tel: +44 (0) 01625 545 745

Website: www.ico.org.uk

To make sure that this policy and our practices stay legally compliant and up-to-date, we may make changes from time to time.  If we make any substantial changes, we will make this clear on our website, or by contacting you directly, if appropriate.  To be sure that you don’t miss anything, please check back to this page from time to time.

I would like to speak to someone at Family Action about how you collect, use and store my personal data.

If you have any questions, comments, requests or suggestions, please contact the data protection officer at [email protected], by post at:

Family Action
34 Wharf Road
London, N1 7GR

If you would like to change your contact preferences, please get in touch with us at [email protected] or call 020 7241 7608.

We have included a description of how the terms we use are generally interpreted:

• Apps means an application, like one you’ve downloaded to your mobile or portable device.
• Family Action means Family Action, the Charity, Registered with the Charity Commission, Charity number 264713.
• Cookies are small text files which are used by websites to learn about your visit to the site and in some cases to tailor your experience on the website created by a website and stored in the user’s connected device
• Direct Marketing means advertising or marketing communication (which could be to sell a product or promoting an organisation) that is directed to particular individuals or companies.
• Model Contracts are standard contractual clauses set by the European Commission. They offer sufficient safeguards to protect people’s privacy, fundamental rights and freedoms when their personal information is moved from within the EEA to outside. The contracts are in compliance with data protection legislation.
• Personal information means information that identifies you as an individual, or is capable of doing so.
• Profiling – processing of personal data to evaluate information about an individual
• Sensitive Personal Data or Special Category Data means data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.