Email: advearse@aol.com

Advearse – Privacy policy

 Introduction

As a campaign group we depend on our supporters and donors for funding and assistance. We take their privacy seriously as we need to maintain confidence and goodwill in Advearse as an organisation.

The key information we maintain are supporter/donor contact details so that we can maintain contact with them and provide updates. We keep the information for no other purpose.

Please read the policy carefully and contact us with any questions or concerns about our privacy practices.

Who we are?

The current data controller is Phil Summerton (Advearse Treasurer). Contact via Advearse email account:  advearse@aol.com .

What information do we collect?

The types of personal information we collect are the minimum needed to ensure we can keep in contact with supporters/donors and is specifically:

• Name, address and emails
• Amounts donated with dates received and type of receipt (ie cash, cheque or bank transfer).

We collect the data when we receive a donation or are contacted and asked to be included on our mailing list. This may be via a request received on our website or our organisation email address or via, donation form/correspondence.

In each case we advise that we would like to include the donor/supporter on our mailing list giving the individual the option not to be included. We also advise that if at any time the individual no longer wants to receive updates from us they can ask to be removed from the list and all personal data deleted.

Where do we store and process personal data?

We do not store and process data outside of the UK.

How do we secure personal data?

The following measures are used to protect personal information:

• Stored on a password-protected spreadsheet
• Backed up onto password-protected Dropbox
• Email addresses are held on our organisation email account (AOL).
• Personal details (names and addresses) are only printed out for purposes of sending letters.

We do not collect data from third parties.

How do we use personal information?

We use the personal information to allow us to provide updates on the campaign via email or physical letter. Physical correspondence is only used where we do not have an email address to use. The information is used for no other purposes.

What legal basis do we have for processing your personal data?

We have a legitimate interest to process personal data based on consent of the data subject. This is in accordance with the General Data Protection Regulation (GDPR) requirement for the lawful basis for processing of data.

Individuals can withdraw their consent by email, website message or written/verbal communication at any time. Their personal data will then be deleted and their email removed from our organisation email account.

When do we share personal data?

We do not share donor/supporter personal information.

How long do we keep your personal data for?

The donor/supporter personal information will be held for the duration of the Advearse campaign. It is not possible to be specific on how long this campaign will last.

Once it is clear that the campaign is no longer viable then all donor/supporter personal data will be deleted (ie spreadsheets and back-ups). The organisation email account will be closed with all email contact lists and emails deleted.

Your rights in relation to personal data

In accordance with the GDPR, we respect the right of data subjects to access and control their personal data. Donors/supporters have a right to:

• Have access to personal information held (a copy of this can be provided on request)
• Request correction and deletion
• Withdrawal of consent to process their data (ie to no longer be contacted and have data deleted)
• Lodge a complaint with the Information Commissioner’s Office if unhappy with the holding and processing of their data.

Donors/supporters can exercise their rights by contacting Advearse data controller via website, email or via written/verbal communication.

We will then respond within 3 days to any communication received and take the requested action.

There are no circumstances where data subject rights may be limited.

END – Updated 2 June 2020