Balfour Project is committed to protecting your privacy. We ensure that all your personal information is held securely and safely.
In accordance with the implementation of the General Data Protection Regulation (GDPR) on 25th May 2018, the Balfour Project has updated the way it processes personal details. If you have any questions about how your data is handled, please email us at firstname.lastname@example.org
Our legal basis for collecting data
Organisations are permitted to process data if they have a legal basis for doing so. The Balfour Project processes data on the basis that:
- Express and informed consent has been given by the person whose data is being processed; and/or
- The Balfour Project has a legitimate interest in processing the data; and/or
- It is necessary in relation to a contract or agreement which the person has entered into or because the person has asked for something to be done so they can enter into a contract or agreement; and/or
- The Balfour Project has a legal obligation to process data.
Where Balfour Project is relying solely on consent as the basis for processing data, we are required to obtain your explicit consent and you can modify or withdraw this consent at any time by notifying us in writing, although this may affect the extent to which we are able to provide services to or interact with you in future.
How we collect data
We collect data in three ways.
1) Directly from people at events, over the phone, or by email.
2) Indirectly through third parties, such as MyDonate (when you make donations), Eventbrite (when you purchase tickets), or Mailchimp (when you interact with our emails or unsubscribe).
3) Through our website.
What data we collect from our website.
We collect data from our website for a number of reasons, primarily to provide you with the most useful and relevant information and services. We do this through collecting and analysing anonymous, or aggregate, data, and personal data volunteered by you online.
In some areas of our website, for example forms, orders and emails, we collect personal data such as your name, address, telephone number and email. We use this information only for the reason you have supplied it or any other reason for which you have given us permission to do so. You may choose not to provide such personally identifiable information, but this may limit our ability to provide you with a specific service or particular content, or to collect your donation.
Where relevant, information is provided to explain why the data is being collected and how it will be used. In some cases we may ask you to ‘opt-in’ to receive future communications including email. In other cases, when we ask you for information about yourself you may, by ticking the appropriate box, tell us that you do not want future communications from us.
Should it be necessary to collect sensitive personal data, you will be asked for your consent for us to process this data. We will also explain why we are asking for it.
In addition to information given explicitly by you, we also collect information about your visit to our website (for example, the date and time of your visit and the pages that you view). This information is not connected to you personally, and is in aggregate form. This kind of data helps us to understand how our visitors use our site so that future website development can better meet your needs.
In some circumstances, we collect data using cookies. Such as in the use of Google Analytics to monitor usage of the site. Most browsers allow you to turn off the cookie function. To do this, look at the help menu on your browser.
How we use your data
We use the data we collect to process donations, ticket purchases, and other transactions. We also collect data in order to fulfil certain legal requirements (e.g. financial audits).
The data we gather also helps us to send you information such as a receipt for a donation, an event ticket, or an update from us that may be of importance to you.
With your consent, we will also use your email address to contact you every month or so with an e-newsletter that contains information about our latest news, forthcoming events, and ongoing fundraising campaigns
Our policy is to email you only if you have said that you want electronic communication from us. This is in accordance with the Privacy and Electronic Communication Regulations (PECR). All our emails will offer you the chance to unsubscribe.
Security, retention and deletion of data
We take reasonable steps to ensure that any information we hold about you is protected, and have put in place suitable physical, electronic and managerial procedures to safeguard and secure the data we process. Persons processing data on behalf of Balfour Project do so in accordance with this policy.
All our online financial transactions are processed through secure sites and services -– such as MyDonate, Eventbrite or Mailchimp -– which use Secure Socket Layer (SSL) software, which encrypts information given over the internet. The software scrambles data transmitted between your computer and their server, where it is unscrambled securely
We will be using marketing automation platform Mailchimp to send you e-newsletters (if you have consented to receiving them), and to track whether you have chosen to unsubscribe (so that we can amend our own records to ensure you do not receive communications from us that you have explicitly chosen not to receive).
You, as the data subject, may request deletion of your data at any time in writing, subject to any overriding legal requirement for its retention, such as the need to retain 7 years of donation records for financial audits.
It is your right to request and receive details of the information we hold about you. For a copy of your personal information held by us, write to the address below. We will respond within 10 working days of receiving your letter. Make sure you also send us proof of identity, such as a copy of your passport or driver’s license, to ensure that there’s no mix-up between your identity and someone else’s.
For more information about data protection and your rights, please see the Information Commissioner’s website.
Respecting your privacy
The Balfour Project does not sell, rent or pass on any information about you to other organisations. However, we may need to pass on information when required by law or by a regulatory body (for example, if asked for details by a law enforcement agency).
We may provide third parties with overall information about visitors and users to our site, but this information, as explained above, is both aggregate and anonymous. Your privacy is protected. Occasionally, we employ agents to carry out tasks on our behalf, such as fulfilling orders or processing donations. These agents are bound by our confidentiality policy to protect your privacy just as we would ourselves.
We want to make sure the information we hold about you is correct. If you spot any errors, if your contact details change, or if you do not wish to receive information about the Balfour Project, please let us know by emailing email@example.com
© Balfour Project
Balfour Project is a Scottish Charitable Incorporated Organisation (SCIO)
Charity number SC047090