Privacy Policy
Last updated 23 January 2024
It’s so important to us that you can support our work in complete confidence. As well as working hard to ensure you know where your money goes and how it has made a lasting difference to people’s lives, we also want to be completely transparent about what personal information of yours we collect and what we do with it. We uphold the strictest data protection standards, including the European General Data Protection Regulation (GDPR) and are registered with the Fundraising Regulator as part of our commitment to ethical fundraising.
This Privacy Policy sets out how we collect, store and use your personal information.
Please read this policy carefully. By providing us with your personal information, you consent to Partnership for Children processing it in accordance with this policy. Occasionally, we may make changes to this policy, please always refer to the latest version on our website.
How to contact us
Telephone: (+44) 0 207 974 6004
Email: info@partnershipforchildren.org.uk
Post: Partnership for Children, 26-27 Market Place, Kingston upon Thames, Surrey, United Kingdom
Definitions
Personal information means any information relating to an identifiable person who can be directly or indirectly identified by it. This includes a person’s contact details, images of them and their IP address.
In other words, personal information is anything which can be used to identify you (either by itself or when combined with other information).
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
In other words, processing refers to all stages of collecting, storing and using your personal information.
Why we collect personal information and what we do with it
We collect information purely for the purpose of helping our work towards our mission. Specifically, Partnership for Children processes personal information in order to:
- administer donations (including keeping records of our supporters’ relationships with us)
- administer enquiries including volunteering and job applications
- contact people if we need to
- contact people with updates on our work
- contact people about opportunities to support our work
- help us make our website work better
- show us how people are using our website, so that we can keep improving it
- understand why people support our work, so we can better meet their needs and find more people like them
- analyse it alongside publicly available information to carry out due diligence on our donors and to help tailor our communications and products
- support people to deliver our programmes
In any case, we will only process personal information when at least one of the following conditions applies (as defined by the GDPR):
- You have given your express permission for us to do so (in that way and for that reason)
- It is necessary in order to deliver contracted goods and services
- We have a legal obligation
- It is of vital interest (it might save a person’s life)
- It is necessary for you to perform a task in the public interest or for your official functions
- There is a legitimate interest (when it is not obviously annoying or intrusive and would reasonably be expected)
- We may contact you by post, telephone, email or SMS, in line with how you have agreed to be contacted. You can change how you hear from us at any time simply by contacting us at info@partnershipforchildren.org.uk
When you enter information into our website and start but don’t complete (submit) it (e.g. in a form or when making a donation or purchase), we may send you an email to check and see if there is any help we can give. You are under no obligation whatsoever to respond or act on this.
If you would prefer us not to analyse your information or combine it with publicly available information, no problem, please just let us know by contacting us.
What personal information we process
We process any personal information you actively provide to us, including from donation and payment transactions, enquiries and surveys and forms. Website usage information is collected using cookies.
Personal information we process includes:
- names
- postal addresses
- email addresses
- telephone/mobile numbers
- contact preferences
- bank details
- taxpayer status (to understand if we can claim Gift Aid)
- dates/years of birth (for Staff and Trustees only)
- gender (where this is appropriate, such as when you register for a running event)
- information about how people support us
- correspondence and details from interactions with our staff
- information that is publicly available
- IP addresses and web browsers (and versions) used
- Information on how people use our website, using cookies and page tagging, to help us improve the website and our services
- Any other personal information provided to us
How we collect personal information
We collect information in the following ways:
- When you interact with us
- such as when you make a donation, complete a form or attend an event. Sometimes you might be interacting with an organisation working on our behalf, but we are still responsible for your information.
- When you interact with third parties such as when you make a donation through a third party website e.g. JustGiving and CAF and give your permission for your information to be shared with us (we won’t have access to your information otherwise).
- such as when you attend a training course delivered by a PfC.
Social media
- similarly, if you engage with us on social media and messaging services like Facebook, or X, you might give us permission to process information from those accounts. The data we are given access to by social media services will vary but will always be in line with the Terms of that particular service. We will not be able to access your private messages, photos, etc. It will just be anything you specifically send to us and possibly information about you as a person, e.g. your age, where you live, etc. which might be pooled with other information to draw a general profile of our audience on that service.
When you visit our website
- we may gather information to help us improve the online experience, such as which pages you visit most often and which topics and appeals are most of interest. Like most websites, we use cookies to help us do this but wherever possible, we use aggregated or anonymous information that does not identify individuals. Depending on the type of device that you are using to access our website, your apps and your settings may supply us with additional information about the type of device, the operating system you are using and details associated with this.
From other information that is available to the public
- to help us tailor our communications, we may use information from publicly available sources such as Companies House or information published in the media.
Who we share your information with
- We will always keep your details safe and will not sell or swap your information with any other organisation. We may share your information with trusted partners, agents or service providers to help us with our work or to help us better understand our supporters. These partners will only use your information under our instruction and will not use it for their own purposes.
- We always have contracts in place with our suppliers, which require them to comply with UK’s law on data protection and to have systems and processes to protect the security of your information.
- We may disclose personal information if required to do so by law or if we believe that such action is lawful and necessary to protect and defend the rights, property or personal safety of Partnership for Children and our stakeholders and for other lawful purposes.
Examples of organisations we may share your data with include:
- Our website, email client, and social media partners:
- Facebook, X, YouTube, LinkedIn, Mailchimp
To process donations and claim gift aid:
- BACS, Her Majesty’s Revenue and Customs (HMRC), PayPal, SAGE (industry-recognised online accounting software)
To process orders
- Couriers, suppliers
To respond to queries and support schools to deliver the programme
- We may share details of enquiries, or information relating to programme delivery in schools with our staff at PFC. These members of staff deliver training and support on our programmes. Where we do pass on details that is for the exclusive purpose of supporting you with the Skills for Life programmes.
How we keep your information safe
- We have physical, technical and human controls in place to keep your information secure.
- We ensure that extra controls are in place for financial, sensitive and special categories of information, meeting regulatory and legal requirements for managing these types of information.
- The transmission of information over the internet is never completely secure and Partnership for Children cannot guarantee the security of any information you transmit to us, and you do so at your own risk. We advise against sending personal information using unsecure wifi (e.g. free public wifi).
- Once we receive your data, we make every effort to ensure its security both on our systems and while in transit between our systems and any partners working on our behalf.
- Access to your personal information is restricted to those who require it to do our work and all staff with access to your personal data are trained in how to keep it safe.
- We cannot be responsible for the privacy policies and practices of other websites, even if you access them using links from our websites and we recommend that you check the policy of each site you visit.
- Sometimes we may transfer information submitted by you to our other offices or we may need to use a service provider or partner outside the European Economic Area (EEA) – which may include a country that does not have the same level of data protection as the UK. In these circumstances, we minimise the information that must be shared and take all reasonable steps to ensure the safety and security of your information as set out in this Privacy Policy.
How long we keep your information
- We will hold your personal information on our systems for as long as it is lawful and necessary to do so. This is so that we can provide the services, products or information you have requested, administer your relationship with us, ensure we don’t communicate with you if you’ve asked us not to and comply with the law.
- We may keep information relating to gifts in wills indefinitely so that we can administer these gifts and communicate appropriately with the families of those leaving Partnership for Children a legacy.
Your rights
- Under data protection law, you have the following rights regarding our processing your personal information. For more information on your full rights, please visit see the Information Commissioner’s Office website, currently at this address:https://ico.org.uk/
Your right to information/to be informed
- it is our responsibility to ensure you are clearly informed of when, how and why we are collecting your information and what we will do with it. We do this through this Policy and privacy notices which explain these points any time we collect your data.
Your right to object
- you can object to us contacting you. We provide the opportunity for you to say how we can contact you and what for on our website and you can change these preferences at any time.
Your right to restrict processing
- you can ask us not to process your personal information (though this still permits us to store it).
Your right to rectification
- you can ask for any inaccurate personal information we hold about you to be corrected
Your right to erasure (your right to be forgotten)
- you can ask us to erase the personal information we hold about you
Your right to data portability
- making it easy for you to obtain a copy of any personal information you have provided to organisations in a machine-readable format so you can easily transfer it to other organisations providing similar services. Any copies of personal information we provide upon request will be provided in plain text format.
Your right not be evaluated on the basis of automated processing
- you can ask that we do not include your personal information in any automated profiling exercises that might make assumptions about you in order to get insight into our supporter audience (in order to tailor communications and reach more people that might be interested in supporting us)
Your right of access
- you have a right to see what information we hold about you and can request to see it.
- You can also lodge a complaint about the way we manage your data with the Information Commissioner’s Office (ICO). More information is available on the ICO website, currently at this address: https://ico.org.uk/
For more information or to exercise your rights, please contact us.
If you would like to request a copy of the personal information we hold about you, please send a description of the information of the information you would like as well as proof of your identity to Partnership for Children, 26 – 27 Market Place, Kingston upon Thames, KT1 1JH, UK. Once your identity is confirmed, will send you a copy of your personal information, in line with what we are legally required to disclose, within one month. We accept no liability for the security of your personal information, as contained in your request, until it has been received by us.
How to change the way we contact you
- It is easy for you to change or withdraw your communication preferences with us at any time.
- You can contact us at any time to request changes to how we contact you and what for – or to tell us not to contact you at all. We will always respect your wishes, though please note there may be some information we have to keep or reasons we must contact you that are required by law.
- In the event that you change or withdraw consent for your information to be shared publicly, we will not share anything else publicly but will be unable to retract anything already shared outside of Partnership for Children’ own website.
How we use cookies
- Like most websites, our site uses small data files stored on your computer called cookies. Cookies give us insight into how people use our website to help us keep improving it. Cookies do lots of different things, such as helping us to:
- avoid asking you to register or complete details twice
- estimate the number of visitors to our site, including the source and patterns relating to this traffic
- understand how visitors use the site, and how we can enhance this experience
- You are able to set your devices to accept all cookies, to notify you when a cookie is issued, or not to receive cookies at any time, although of course please be aware this means that you’ll miss out on some personalised services. You can delete your cookies through your device settings at any time.
You can find out more about cookies at www.allaboutcookies.org and www.youronlinechoices.eu/
What if I’m under 18?
- If you are under 18, please get your parent or guardian’s permission before you send us any information about yourself, this includes photos and messages.
- Also, if you do use our sites to find out about fundraising, campaigning or supporting the work of Partnership for Children, please let an adult know.
Online Teaching Platform (Moodle)
Our Skills for Life Online Teaching Platform (OTP) is built using Moodle and hosted by an external company (Titus Learning) who also provide technical assistance for the site.
Subscriber data is stored on the OTP for the duration of the user subscription. Once a subscriber no longer requires access to the platform and /or their subscription expires, data for that user is deleted.
Titus Learning are committed to providing a secure and reliable learning management system while ensuring the protection of customers’ information and data. Their adherence to industry standards such as ISO 27001, ISO 9001, and Cyber Essentials Plus certifications demonstrates their dedication to maintaining the highest levels of information security. By implementing robust technical and organisational measures, they aim to provide customers with the confidence and assurance that data is handled and protected in accordance with best practices and applicable regulations, including the GDPR twin pillars of technical and organisational measures.
Regular backups of data are performed to ensure data integrity and availability.
Backup data is securely stored on AWS servers in London, UK and is therefore protected by UK data protection laws.