Macmillan Caring Locally Privacy Notice for Supporters We take data protection seriously and are committed to protecting all personal information we hold about you. We believe it is very important to respect the privacy of individuals and adhere to the data protection legislation. In this Privacy Notice, we explain what information we collect and for what purpose, what we do with it, who will have access to it, how long we will retain it and how we will keep it secure. We also explain how you can contact us and what your rights are.
This Privacy Notice covers: • Who We Are • What Personal Information We Collect and How We Use It • Who Will Have Access to Your Personal Information? • How Long We Keep Your Personal Information • International Transfers • Security of Your Personal Information • Your Rights • How to Contact Us
Who We Are Macmillan Caring Locally is the ‘Controller’ of any personal information that you provide to us. We will therefore process your personal information in accordance with all applicable laws, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018).
What Personal Information We Collect and How We Use It If you are one of our supporters ie: you make donations to us or raise money for us, we will collect information from you which may include your name, address, telephone number, email address and credit card or bank details. We need this information in order to answer your queries, contact you about your fundraising activities, collect the money you raise for us or donate to us, process your payment and send you an acknowledgement and/or thank you. We may also obtain photographs of you in relation to your fundraising activities and use them on our website and to promote our charity. We will only use your personal information for the purpose for which we collected it and will not use it for anything else without your prior consent, subject to certain legal exceptions. Our legal basis for processing your personal information as described above is legitimate interests or consent, depending on the circumstances. If you do not provide the information we ask for, we may not be able to process your donation, contact you about your fundraising activities, answer your enquiry or respond to your request.
Who Will Have Access to Your Personal Information? Our staff will have access to your information for the purpose of contacting you about your fundraising activities, collecting the proceeds, promoting your fundraising event and collecting your donations. If photographs of you taking part in fundraising activities are published on our website or promotional material, they will be available to the world at large. However, we will keep your address, telephone number, email address and credit card and bank details confidential and will not share them with anyone else, subject to certain legal exceptions.
How Long We keep Your Personal Information We will keep your payment details only for as long as is necessary to process the transaction. We will keep your other personal information for as long as you are a supporter and for 6 years after that, in order to satisfy legal obligations.
International Transfers We will not transfer your personal information outside the EU. When the UK is no longer part of the EU, we will continue to ensure that appropriate technical and organisational measures are implemented to safeguard personal information.
Security of Your Personal Information In accordance with the requirements of the GDPR and the DPA 2018, we take appropriate technical and organisational measures to safeguard your personal information.
Your Rights You have rights under the data protection legislation and, subject to certain legal exemptions, we must comply when you inform us that you wish to exercise these rights. For example, you have the right to request a copy of the personal information we hold about you. This is known as a Subject Access Request and there is no charge for this, providing the requests are not manifestly unfounded or excessive. Your request needs to be made in writing and sent to the Trust Secretary at the address given below under ‘How to Contact Us’. We may ask you to provide ID before processing the request. Once in receipt of this, we will process the request without undue delay and within one month.
You also have rights in relation to rectification, erasure, restriction, data portability, objections and automated decision making. If you would like to exercise these rights, please contact the Trust Secretary using our contact details below.
You have the right to complain to Macmillan Caring Locally about the way your personal information is processed. Please contact the Trust Secretary using our contact details below. If you remain dissatisfied, you may also complain to the Information Commissioner’s Office. They can be contacted at:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF www.ico.org.uk
How to Contact Us If you have any questions or concerns about this Privacy Notice or about how your personal information is being processed or if you wish to make a Subject Access Request, please contact: