Privacy Policy
The purpose of this Privacy Policy is to inform you about how Against Breast Cancer collects and uses personal data.
Our aim is not to be intrusive, we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous security measures and procedures to reduce the risk of, and protect it from unauthorised access or disclosure.
All supporters whose personal data is collected and processed will be in line with the requirements of the latest legislation. Personal data collected will be used to ensure we communicate with you relevant information about Against Breast Cancer concerning our fundraising and research.
We collect personal data from a variety of sources; Directly – where it has been provided to us (for example making a donation, signing up for an event or purchasing a product). Indirectly such as third party websites where you have given permission (such as online giving platforms or independent event organisers), social media (where you have given us permission to do so) and cookies embedded on our website.
By consenting to receive information from Against Breast Cancer you are giving us permission to control and process your personal data specifically for the purposes identified, normally for a minimum period of 36 months from the date of consent and subject to our data retention policy. You may withdraw consent at any time by contacting the Data Protection Officer here. The facility to unsubscribe from email messages is embedded in each email we send.
Why does Against Breast Cancer need to collect and store my personal data?
In order for us to provide you with the latest news and research in fight against breast cancer we need to collect personal data for accurate, relevant and timely correspondence purposes. We are committed to ensuring that the information we collect and use is appropriate for this purpose, and does not constitute an invasion of your privacy.
Will Against Breast Cancer share my personal data with anyone else?
We may pass your personal data on to third-party service providers (such as recycling organisations) contracted to Against Breast Cancer in the course of dealing with your request. We will, from time to time use publicly available sources to keep your records up to date such as The Bereavement Register or a change of address database. If you are supporter of Against Breast Cancer we enourage you to let us know should your contact details change.Any third parties that we may share your data with are obliged to keep your details securely, and to use them only to fulfil the service they provide to you or Against Breast Cancer.
How will Against Breast Cancer use my personal data?
Against Breast Cancer will process (collect, store and use) the information you provide in a manner compatible with the EU’s General Data Protection Regulation (GDPR) and other relevant legislation. We will endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary.Against Breast Cancer has a duty to retain information in accordance with the law, needed for tax and audit purposes. How long certain kinds of personal data should be kept may also be governed by specific business-sector requirements and agreed practices.
Can I find out what personal data Against Breast Cancer holds on me?
At your request we can confirm what information we hold about you and how it is processed. If Against Breast Cancer holds personal data about you, you can request the following information;
The categories of personal data and the purpose of the processing as well as the legal basis for doing so which will be either consent, contractual or legitimate interest. If the processing is based on the legitimate interests of Against Breast Cancer or a third party, information about those interests.
How long the data will be stored. Details of your rights to correct, erase, restrict or object to such processing. Information about your right to withdraw consent at any time and how to lodge a complaint with the supervisory authority.
Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
The source of personal data if it wasn’t collected directly from you. The identity and the contact details of the person or organisation that has determined how and why to process your data. In some cases, this will be a representative in the EU.
Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.
Recipient(s) or categories of recipients that the data may be disclosed to.
If we intend to transfer the personal data to a third country or international organisation, information about how we ensure this is done securely. The EU has approved sending personal data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure there are specific measures in place to secure your information.
To access your information you will be required to provide two of the following three forms of identification; passport, driving licence or birth certificate. Once ID has been provided and approved individual record will be released.
What are my rights?
At any point while we are in possession of, or processing your personal data, you, have the following rights:
Right of access – you have the right to request a copy of the information that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
Right of portability – you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing or automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
Right to judicial review - in the event that ABC refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in the Complaints statement which is available on our website: againstbreastcancer.org.uk/complaints-policy/.
In the event that you wish to make a complaint about how your personal data is being processed by ABC (or third parties as described above), or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and Against Breast Cancer’s Data Protection Officer.
The details for each of these contacts are: Information Commissioner’s Office (ICO) website - https://ico.org.uk/concerns/ or email us: DPO@againstbreastcancer.org.uk
We may change this Privacy Policy from time to time. If we make any significant changes in the way we treat your personal information we will make this clear on the Against Breast Cancer Website or by contacting you directly.
Against Breast Cancer Limited registered charity No 6310215, VAT No GB930093938, having its registered office at Leathem House 13 Napier Court, Barton Lane, Abingdon, Oxfordshire, OX14 3YT.
© 1992-2018 Against Breast Cancer and the Against Breast Cancer logo are registered trademarks of Against Breast Cancer Limited, All Rights Reserved. Data Protection ICO Registered Number: ZA047785.
V 20 May 2018