Privacy Policy

We collect information about you in the following ways:

• DIRECTLY – you may give us your information in order to sign up for one of our events, tell us your story, make a donation, purchase our products or communicate with us.
• INDIRECTLY – your information may be shared with us by independent event organisers, e.g. the London Marathon or sites like JustGiving or Virgin Money Giving. These independent third parties will only do so when you have indicated that you wish to support Children with Cancer UK and with your consent. You should check their Privacy Policy when you provide your information to understand fully how they will process your data.
• We sometimes use external companies to collect or process personal data on our behalf for fundraising purposes. For example, we use an organisation that manages our weekly lottery; one for our telephone fundraising and one for dealing with direct debits, but we are responsible for your data at all times. We do comprehensive checks on these companies before we work with them, and put appropriate contracts in place that sets out our expectations and requirements, especially regarding how they manage the personal data they collect or have access to and we regularly monitor their activities for us to ensure their compliance.
• VIA OTHER ORGANISATIONS – you may have provided permission for a company or other organisation to share your data with third parties, including charities, e.g. when completing a lifestyle survey
• INFORMATION AVAILABLE PUBLICLY – we may combine information you provide to us with information available from external sources in order to gain a better understanding of our supporters. This may include information found in places such as Companies House and information that has been published in articles/newspapers.
• INFORMATION COLLECTED AS YOU USE OUR WEBSITE – like most websites, we use “cookies” to help us make our site – and the way you use it – better. Cookies mean that a website will remember you. ‘Cookies’ are small pieces of information sent by a web server to a web browser, which enables the server to collect information from the browser. Essentially, it takes the form of a small text file deposited on your computer’s hard drive. This makes interacting with a website faster and easier – e.g. by automatically filling your name and address in text fields. There are more details in Section 10, ‘Do we use Cookies’.

The type and quantity of information we collect and how we use it depends on why you are providing it.

If you support us, e.g. make a donation, volunteer, register to fundraise, sign up for an event, buy something from our shop or engage with our social media, we will usually collect:

• Your name
• Your contact details
• Your communication preferences
• Your bank or credit card details
• As the contact name for an organisation.

Where it is appropriate or required, we may also ask for:

• Your age or date of birth
• Information relating to your health (e.g. if you are taking part in a high-risk event)
• Why you have decided to support us. We will never make this question mandatory, and only want to know the answer if you are comfortable telling us.

We will keep your data no longer than necessary and only for the purposes for which it was intended.  We will always take any guidance issued by the Information Commissioner’s Office into account.  The length of time that data will be kept depends on the reasons for which we are processing the data and on the law or regulations that the information falls under, such as financial regulations, Health and Safety regulation etc., or any contractual obligation we might have – such as local government contracts.  For example, we will keep a record of donations subject to gift aid for six years to comply with HMRC rules. If you request no further contact from us, either directly or through the Fundraising Preference Service, we will remove you from our marketing lists within 21 days.  However we will keep some information about you on our suppression file to enable us to comply with your request. In order to keep your records up to date we may use publicly available sources such as the Royal Mail’s National Change of Address.

We use marketing communications to keep you up-to-date with what we are doing, how you can get involved and news about the charity. This may include newsletters, surveys, financial appeals, raffle appeals, events and fundraising opportunities. We will only contact you via SMS (text) and email where you have given your consent for us to do so. For the purpose of sending marketing through the post and making marketing telephone calls, we may do so under legitimate interest and where our legitimate interest does not outweigh your rights and freedoms. In the instances where you receive these calls and mailings, you will be given the opportunity or told how to opt out of receiving calls and/or post in the future. We will not use your information for marketing/fundraising purposes if you have asked us not to. However, we will retain your details on a suppression list to help ensure we do not continue to contact you. It is your choice regarding the type and frequency of communications and information you receive about our charity and the ways in which you can get involved. You can change your mind at any time by contacting our Supporter Care team at Children with Cancer UK, 51 Great Ormond Street, London WC1N 3JQ, on 020 7404 0808 or via email on supportercare@childrenwithcancer.org.uk.

We use a secure server when you make a donation via our website. We also take appropriate measures to ensure that the information disclosed to us is kept secure, accurate and up-to-date and kept only for so long as is necessary for the purpose for which it is used. Credit/debit card information If you use your credit or debit card to donate to us, buy something or pay online or over the phone, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard. Access the PCI website for more information about PCI DSS standards. We do not store your credit or debit card details at all, following the completion of your transaction. All card details and validation codes are securely destroyed on the payment or donation has been processed. Only those staff and third parties authorised to process payments will be able to see your card details.

By providing us with your personal data, including sensitive personal data such as on your health, you consent to the collection and use of any information you provide in accordance with the above purposes and this privacy statement. The charity maintains a secure back-up of its information. This enables us to ensure that in the event of an incident which disrupts normal business operations, we can restore these operations as quickly as possible. We aim to store all information within the UK or within the European Economic Area (EEA). However, in some situations, it is possible that your information may be transferred outside the EEA. If this is the case, we will take appropriate steps to ensure your privacy continues to be protected as outlined in this privacy policy and in line with our legal obligations. These steps include inserting appropriate clauses in any contractual agreement with the third party regarding security measures.

We aim to ensure that all information we hold about you is accurate and, where necessary, kept up-to-date. If any of the information we hold about you is inaccurate and either you advise us or we become aware from public available sources, such as a Royal Mail change of address, or are otherwise notified by a relative, we will ensure it is amended and updated as soon as possible. If your personal details change, please help us to keep your information up to date by notifying the Supporter Care team at Children with Cancer UK, 51 Great Ormond Street, London WC1N 3JQ, on 020 7404 0808 or via email on supportercare@childrenwithcancer.org.uk.

‘Cookies’ are small pieces of information sent by a web server to a web browser, which enables the server to collect information from the browser. Essentially, it takes the form of a small text file deposited on your computer’s hard drive. We use Google Analytics (GA) to track website user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website. Although GA records user data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address but Google does not grant us access to this. GA makes use of cookies, details of which can be found on Google’s developer guides. We use Google AdWords remarketing to trigger ads for Children with Cancer UK across the internet. AdWords remarketing will display our ads to you based on what parts of our website you have viewed by placing a cookie on your machine. The cookie is used to say “this person visited this page, so show them ads relating to that page.” Google AdWords remarketing allows us to show ads that we think may be of interest to you based on pages you have visited on our website. We also use the Facebook pixel to determine people who have visited our site and use this for remarketing purposes. Facebook remarketing allows us to show ads that we think are of interest to you. Disabling cookies on your internet browser will stop GA and Facebook from tracking any part of your visit to pages within Children with Cancer UK’s website. If you disable our cookies, you may not be able to access certain features on our website and your use of our website may be limited. Further information on deleting or controlling cookies is available at www.AboutCookies.org. You may also find the following links useful – Microsoft Cookies guide and All About Cookies.

If you share our content through social media via our third-party functionality that allows you to post content to your social media account/s, please note that any information that you provide through the use of this functionality is governed by the applicable third party’s privacy policy and not by this privacy policy. Children with Cancer UK is not responsible for the collection and practices of other organisations, such as Facebook, Twitter, Instagram or any social media platform provider. Any personal information you disclose to other organisations through our social media pages and icons on our website is not our responsibility.

If you access independent third party websites via a link from Children with Cancer UK’s website, please note that any personal data you disclose through their site or any remarketing you experience is governed by the applicable third party’s privacy policy and not by this privacy policy. Children with Cancer UK is not responsible for the collection and practices of other organisations.

You have many rights under data protection legislation. If you wish to use any of these rights or discuss them further please contact the Supporter Care Team by phone on 020 7404 0808 or by email supportercareteam@childrenwithcancer.org.uk You have the right to:

• Transparency over how we use your personal information (right to be informed). This privacy notice, as well as any additional information that is provided to you either at the time you provided your details, or later, is intended to provide you with this information.
• Ask for a Subject Access Request, which is a copy of all the information we hold on you.  We will supply all information we hold on you, however this can take up to 28 days.  You will not be charged for this request other than in exceptional circumstances. We will ask you for proof of identity as we need to ensure that we are only releasing your personal data to you.
• Update or amend the information we hold about you if it is wrong (right of rectification).
• Ask us to stop using your information (right to restrict processing). In certain situations, you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
• Request for us to remove your personal information from our files (right to be ‘forgotten’).  Please note if you have opted out to receive marketing communications from us we will need to keep some details on file to enable us to comply with this request.
• Withdraw your consent for us to send you marketing material through specified channels at any time
• Object to the processing of your information for marketing purposes.  You also have a right to object to us processing data where we are relying on it being within our legitimate interests to do so (for example, to send you direct marketing by post).
• Obtain and reuse your personal data for your own purposes (right to data portability).
• Not be subject to a decision when it is based on automated processing (automated decision making and profiling).

If you do not think that we have processed your data in accordance with this notice or would like to make a complaint, please contact our Supporter Care Team in the first instance. If you are unhappy with their response they will escalate your complaint to the Senior Leadership Team who will aim to contact you with a resolution within five working days or in accordance with a proposed resolution date. If you are not satisfied with the response from the Senior Leadership Team or believe we are not processing your personal data in accordance with the law you may wish to contact the Fundraising Regulator or the Information Commissioner’s Office (ICO): Fundraising Regulator 2nd Floor, CAN Mezzanine Building 49-51 East Road London N1 6AH Telephone: 0300 999 3407 Email: enquiries@fundraisingregulator.org.uk Information Commissioners Office Helpline: 0303 123 113 Website: https://ico.org.uk/global/contact-us/ To view our feedback and complaints procedure in full, please visit: https://www.childrenwithcancer.org.uk/contact-us/feedback-policy/

We will regularly review and update this privacy statement. If we make any significant changes to the way we use your personal information, we will communicate this clearly via our website and our other communication channels where possible. We do advise, however, that you regularly check this webpage for updates. Last updated: February 2020