fbpx
Donate

Privacy Policy

Last updated: 1 July 2024

Any references to ‘we’, ‘our’ or ‘us’ within this Policy refer to WaterHarvest – we are a registered charity in England and Wales and our registered charity number is 1127564.  Any references to ‘you’ or ‘your’ within this Policy refer to someone who has donated to us; attended one of our events; bought a merchandise item directly from us and/or a supporter.

We are committed to protecting the privacy and the lawful processing of your data. This policy explains how and why we use your personal data, to ensure that you remain informed and in control of your information.

Our data processing is in accordance with the General Data Protection Regulation (EU GDPR), Data Protection, Privacy and Electronic Communication Regulation 2019 (UK GDPR), the Data Protection Act 2018 and any other data protection legislation that may be appropriate.

WaterHarvest does not pass, sell or swap personal information to any third parties or organisations for marketing purposes.

1. Our commitment to your privacy

We use three key definitions to describe people mentioned in this policy. These are definitions used by the Information Commissioner’s Office (ICO), the UK’s independent body set up to uphold information rights ( www.ico.org.uk).

  • ‘Data subject’: this is you, one of our donors and/or supporters. As the data subject, we respect your right to control your data.
  • ‘Data controller’ and ‘data processor’: this is us, WaterHarvest. With your permission, we determine why and how your personal data is used, as outlined in this policy.

2. Why do we collect personal data?

We use your personal data to keep in touch with you. We will only ever collect, store and use your personal data when we have an identified purpose and reason to do so. The ICO refers to this as a ‘lawful basis’. We collect your personal data so we can send you information about our work that we feel will be of interest to you via our supporter e-newsletter and fundraising appeals.

Your personal data also helps us to get to know you better and to develop a ‘profile’ of you on our secure supporter database. This ‘profile’ enables us to send you the information listed above in a timely and relevant way, to suit you. For example, keeping track of the donations you make to our charity helps us to send you information about fundraising appeals that we feel you would like to hear about.

You can unsubscribe from our e-newsletter and appeal emails at any time by using the unsubscribe link within the email or by contacting us directly.

This information is defined as ‘direct marketing’ by the ICO. As defined by the ICO, we use two different lawful bases for processing your data for ‘direct marketing’ purposes:

i) Legitimate interest: This is where we have identified a genuine and legitimate reason for contacting you, which crucially does not override your rights or interests. We use legitimate interest to send you the information listed above.

ii) Opt-in consent: This is where you have given us express permission to contact you by particular communication channels. In this instance we use opt-in consent to send you information about our work. We respect your right to update the way we get in touch with you at any time.

3. What kind of personal data do we collect? How do we collect it?

We do not collect or store sensitive personal data (such as information relating to health, beliefs or political affiliation) about you.

a) Basic information

We will usually collect basic information about you, including your name, postal address, telephone number, email address and your bank details if you are supporting us financially.

b) Getting to know you better

We also collect information about you that helps us to get to know you better. This may include records of donations you’ve made towards fundraising appeals, your preferences of how you would like us to contact you, ways you’ve helped us through volunteering your time, records of events you’ve attended, or campaigns or activities relating to our work that you’ve been involved in.

c) Our website

Our website uses ‘cookies’ to help provide you with the best experience we can. Cookies are small text files that are placed on your computer or mobile phone when you browse our website that help us:

  • Make our website work as you’d expect
  • Remember your settings during and between visits to our site
  • Improve the speed/security of the website
  • Allow you to share pages with social networks like Facebook
  • Continuously improve our website for you

We do NOT use cookies to:

  • Collect any personally identifiable information
  • Collect any sensitive information
  • Pass personally identifiable data to third parties
  • Pay sales commissions

For more information on our Cookies Policy, please click here.

4. How do we store your data?

a) Security
All of the personal data we process is processed by our staff team in the UK.

However, for the purposes of IT hosting and maintenance your information may be situated outside of the European Economic Area (EEA). This will be done in accordance with guidance issued by the Information Commissioner’s Office.

Electronic data and databases are stored on secure computer systems and we control who has access to information (using both physical and electronic means). Our staff receive data protection training and we have a set of detailed data protection procedures which personnel are required to follow when handling personal data.

b) Payment security

All electronic forms used by WaterHarvest that request financial data use the Secure Sockets Layer (SSL) protocol to encrypt the data between your browser and our servers.

Of course, we cannot guarantee the security of your home computer, mobile phone or the internet and any online communications (e.g. information provided by email or our website) are at the user’s own risk.

c) Data retention policy

We will only use and store information for as long as it required for the purposes it was collected for. We continually review what information we hold and delete what is no longer required.

5. Our service partners

WaterHarvest does not pass, sell or swap personal information to any third parties or organisations for marketing purposes.

We use the third-party service provider MailChimp to process and store your data to enable the sending of email communications we write, including our supporter e-newsletter and fundraising appeals. You can read their privacy policy notice here: https://www.intuit.com/privacy/statement/ and their terms of use here: https://mailchimp.com/legal/terms/

6. Your rights

We respect your right to control your data. Your rights include:

a) The right to be informed: This privacy notice outlines how we capture, store and use your data. If you have any questions about any elements of this policy, please contact us.

b) The right of access: If you wish to obtain a record of the personal data we hold about you, through a Subject Access Request, please contact us we will respond within one month.

c) The right to rectification: If we have captured information about you that is inaccurate or incomplete, we will update it.

d) The right to erase: You can ask us to remove or randomise your personal details from our records.

e) The right to restrict processing: You can ask us to stop using your personal data.

f) The right to data portability: You can ask to obtain your personal data from us for your own purposes.

g) The right to object: You can ask to be excluded from marketing activity.

h) Rights in relation to automated decision making and profiling: We respect your right not to be subject to a decision that is based on automated processing.

For more information on your individual rights, please see the Information Commissioner’s Office www.ico.org.uk .

7. Leaving our website

We are not responsible for the privacy practices or the content of any other websites linked to our website. If you have followed a link from this website to another website you may be supplying information to a third party.

WaterHarvest has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third party web sites or services. You acknowledge and agree that WaterHarvest shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such content, goods or services available on or through any such third party websites linked to our website.

8. Get in touch

Should you wish to find out more about the information we hold about you, or about our privacy policy, please contact us.

WaterHarvest reserves the right to amend this Privacy Policy from time to time. Please check back on this page to see any updates or changes to this Privacy Policy. This Privacy Policy was last updated in July 2024.

Please contact us if you have any queries about this Privacy Policy.