Privacy

George and the Giant Pledge raises money to support Royal Marsden Cancer Charity, a world-leading cancer centre.

To help us do this we may collect and process your personal data. This gives us a better understanding of our supporters which strengthens our decision-making processes and cost-effectiveness, as well as being necessary for the administration of our supporters’ donations and purchases.

George and the Giant Pledge adheres to the requirements of the General Data Protection Regulation 2018 (the “GDPR”) and respects any personal data you share with us. We aim to be clear about when we collect your data and will not to do anything with it you wouldn’t reasonably expect so please read this policy carefully to understand how we collect, use and store your information.

This privacy policy sets out how, in our day to day activities, George and the Giant Pledge processes and stores personal information relating to our supporters, volunteers and customers of our online store.

George and the Giant Pledge is a data controller in respect of your personal data. If you have any questions about this policy or the ways in which we may process your personal data, please contact us:

Email: georgeandthegiantpledge@gmail.com

Personal information is information that can be used to identify you or tell us about you. We will only collect what we consider necessary. This includes the following:

• Your name
• Your contact details
• Donations you make to us
• Enquiries, feedback and complaints
• Logs of communications we’ve sent you and you’ve sent us
• Your communication preferences
• Your PayPal email address – if you bought something from our store, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard.
• Data collected from your website use using cookies (see our Cookie Policy).

Sensitive data

We do not collect any sensitive information from you.

How do we collect personal information?

We will collect personal information directly from you when you:

• Sign up to our website
• Sign up for communications
• Engage with our website
• Order products such as merchandise from our shop
• Make an enquiry or complaint
• Email us

We may collect personal data indirectly from you in the following ways:

• We collect contact details, financial transactions, gift aid status and communications preferences via third party fundraising platforms that support your fundraising (e.g. Just Giving) and from organisations that support your fundraising events (e.g skydiving, running and cycling events).
• We gather and observe data about supporters’ use of our websites, such as which pages are most visited and which events or activities are of most interest as well as feedback ratings and text (see section 9. Our website).

Ensuring the accuracy of your information

We aim to ensure that all information we hold about you is accurate and, where necessary, kept up to date.

If any of the information we hold about you is inaccurate and either you advise us or we become otherwise aware, we will ensure it is amended and updated without delay.

You can contact us via email: georgeandthegiantpledge@gmail.com

As a data controller, George and the Giant Pledge takes its responsibilities under the GDPR very seriously. Our lawful bases for processing your data are as follows:

• We have a legitimate interest in processing your data for the purposes of improving our products, services and website to run our fundraising effectively and efficiently
• We ask for your specific and informed consent to communicate with you by email, SMS and telephone for marketing and feedback purposes.
• Lastly, we process data where it is necessary for the performance of a contract. For example, we need your personal details in order to send you items ordered through our shop or to process your direct debit, both of which represent a contract.

Legitimate interest

The personal data we process on this basis include contact and identification details, financial transactions and records of interactions.

We process some of your personal data in a manner that you would reasonably expect to pursue our legitimate interests. We have carefully balanced your interests against our interests when deciding whether this is appropriate. Our legitimate interests and the purposes for processing that fall under each of them are as follows:

Processing and record keeping

• Process your donation(s)
• Acknowledge any donation(s) we receive
• Managing feedback and complaint
• Keeping a record of your communications with us
• Supporting your fundraising activities

Understanding and improving our products and services

• Analysing and segmenting data in order to ensure we understand your support and are sending you communications tailored to you and your interests
• Blocking disruptive use of our website, record website traffic, personalise the way our information is presented to you

Managing volunteers

• Keeping a record of communications
• Keeping a record of website activity

Targeted digital or social media marketing

We may use the information you provide to ensure our digital and social media advertising is effective – this might include secure provision of demographic details to digital advertising networks or to social media companies. This could mean your information allows us to show online ads to you and to others like you. Any information we share will be securely encrypted and you can ask us not to share your information in this way by getting in touch.

However, you should bear in mind that even when you have asked us not to share your information for this purpose, you may still see adverts relating to our cause. This will be because the ad network or social media site has selected you based on information they hold, or settings you have on your device or profile with them, without using any information provided by George and the Giant Pledge.

If you want to manage the advertising you see through social media sites you can find out how here:

• Facebook
• Twitter

Consent

The categories of personal data we process on this basis may include contact and identification details.

We may contact you for marketing purposes by email, telephone, mobile telephone or text but only with your explicit opt-in consent. It is your choice what type of communications and information you receive about our Charity and the ways in which you can get involved.

We will also obtain your consent when we collect sensitive personal data from you, unless you have clearly and deliberately shared the relevant information in public.

You can change your mind about consent or withdraw it at any time by accessing your account.

Compliance with a legal obligation

The categories of personal data we process on this basis include contact and identification details, financial transactions and records of interaction.

When necessary for the performance of a contract

The categories of personal data we process on this basis include contact and information details as well as your PayPal email address and related financial transactions.

We may send you service communications for example when you place an order for goods or services on our website. We also need data to be able to service your direct debit. Without the relevant personal data here, it would not be possible to carry out the contract with you.

We will not, without your consent, supply any of your personal data to any third party except for the following reasons, which are expanded on below:

• We are required to do so by law enforcement or regulatory bodies where this is required or allowed under the relevant legislation

Law enforcement

We will disclose your personal information to third parties if we are required to do so through a legal obligation (this would include but not be exclusively HMRC, Information Commissioner’s Office, Charity Commission, Companies House, the police or government bodies); to enable us to enforce or apply our terms and conditions or rights under an agreement; or to protect us, for example, in the case of suspected fraud or defamation.

The Royal Marsden Cancer Charity

We work closely with The Royal Marsden Cancer Charity both in managing our online orders. It is necessary for us to provide access to information to select staff working for The Royal Marsden Cancer Charity.

• Customers – We will share your contact details with some select staff to enable them to fulfill your order where necessary. George and the Giant Pledge will be the data controller of any personal or sensitive data provided with regards to orders e.g. your address and billing information

Use of third parties

We will use third party companies as trusted partner organisations that work with us in connection with our charitable purposes.

We currently use Google Analytics to collect standard internet log information and details of visitor behavior patterns. We do this to find out things such as the number of visitors to the various parts of the site.

This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

If you are aged 16 or under, and would like to participate in an event, make a donation or get involved with us, please make sure that you have your parent or guardian’s permission before giving us your personal information.

We will not communicate with under 16s directly beyond fulfilling the relevant service i.e. acknowledging your order, sending out event details.

You can withdraw consent and delete your account, at any time, by visiting your account area.

We will keep all your information in a confidential record that is specific to you. We use a customer relationship management system (CRM) to support our activity. This means that we can keep the information you provide us, so we are able to see the history and relevant details of your relationship with us. We take information security very seriously. No one is allowed access to our system or files unless they need this in order to provide a service to you or for one of the other purposes discussed in this notice.

We will only keep your information for as long as needed to ensure that we can effectively carry out your wishes, for example process your order, respond to your enquiry and make sure that we are only sending you communications that are relevant to you and are in line with your preferences.

If you have supported us with a donation we will keep your contact, order and communication details, as well as why you have donated if you have decided to give us this information.

When we no longer need to retain your information we will ensure it is securely disposed of, at the appropriate time. You can request for us to delete this information at any time and we will do so immediately. You can also delete your account at any time via your account.

We do not store your credit or debit card details at all, we use PayPal to keep this information hidden from us. Following the completion of your transaction, we only store the email address used by PayPal.

If we receive an email containing any credit or debit card details, it will be immediately deleted, no payment will be taken and you will be notified about this.

We will not use your information for marketing purposes if you have asked us not to. However, we will retain your contact details on a suppression (permanent exclusion) list to help ensure we do not continue to contact you.

To make full use of our website you need to accept cookies. Without cookies you can still visit our website but some features won’t work. More information on cookies can be found in our Cookies Policy.

Our website is hosted on a secure server. Any information you send to us over the internet is encrypted using secure socket layer technology (SSL). Although we cannot 100 per cent guarantee the security of any information you transmit to us, we enforce strict procedures and security features to protect your information and prevent unauthorised access.

Our website contains links to other websites belonging to third parties and we participate in social networking sites including but not limited to Twitter, YouTube, Instagram and Facebook. We may also include content from sites such as these on our website. However, we would advise you that we do not have any control over the privacy practices of these other sites. You should make sure when you leave our site to visit another site that you have read and understood that site’s privacy policy, in addition to our own.

You have the right to:

• Request a copy of the information we hold about you, and to transmit that copy to another data controller
• Update or amend the information we hold about you if it is wrong
• Change your communication preferences at any time including withdrawing consent to be contacted by email
• Ask us to remove your personal information from our records
• Object to the processing of your information for marketing purposes
• Raise a concern or complaint about the way in which your information is being used.

If you wish to find out more about these rights, or obtain a copy of the information we hold about you, please contact us:

Email: georgeandthegiantpledge@gmail.com

We hope that you will not have cause to complain about any aspect of our services. If a problem does arise you are, of course, entitled to complain – if you have any concerns or complaints that cannot be raised with us through the above details, you can also contact the Information Commissioner here.