NW Hearts Charity

Privacy Notice

NW Hearts Charity is committed to protecting the personal details that we process when you engage with us. This Privacy Notice explains why we may ask for your personal information and tells you what we will do with it.

We collect and use personal data to manage our relationships with our peers and supporters, and to better understand how we can meet and exceed our goals.This allows us to operate and fundraise more efficiently and effectively to ultimately help us realise our mission to improve the heart health outcomes for people across Greater Manchester. 

The Privacy Notice tells you:

• Who we are
• Where we collect information from
• Information we collect
• What we do with your information
• Legal Basis for processing your information
• How we update your information
• Who we share information with
• How to access, correct or delete your information
• How we keep your data safe
• How long we store your data for
• Contact us
• Changes to the Privacy Notice

By providing us with personal information, you consent to its collection and use as set out in this Privacy Notice. We aim to be clear, transparent and to use your information in a way that you would reasonably expect us to. 

If you have any questions about this Privacy Notice please contact our Data Controller at office@nwhearts.org 

Who we are

NW Hearts Charity is a Registered CIO (Charity no. 1194189). The registered address is Suite 246, Peel House, 30 The Downs, Altrincham, WA14 2PX.

Where do we collect information from?

We collect information in the following ways:

Information you give us:

• NW Hearts Charity may obtain personal information from you when, for example, you complete an online form, register to join our mailing list, apply to become a volunteer, take part in an event or make a donation.

Information from Third Parties:

• We may also receive information about you from independent third parties, such as fundraising sites like JustGiving. We will only receive information from third parties in this way if you have given your consent for your information to be passed on to us. You should check their Privacy Notice when you provide your information to understand how they will process your information. Once we have obtained this information from the third party it will be covered by our Privacy Notice as well as by the originating third party.

Information we get from your use of our website and services:

• We collect information about the services you use and how you use them, like when you visit our websites or view and interact with our social media content. These are small pieces of text, known as Cookies, which are sent to your browser by a website you visit. They  help that website remember information about your visit.

Information in the public domain:

• We may obtain some information from publicly available sources such as the Charity Commission, newspaper articles or open postings on social media such as Facebook and LinkedIn. 

What information do we collect?

The types of personal information that NW Hearts Charity collects may include:

• Your title, name, gender and date of birth.
• Your contact details (address, email, phone number and social media contact details).
• Family and spouse/partner details, relationships to other supporters.
• Your professional activities and employment details.
• Current interests and activities.
• Gift aid status and records of donations.
• Contact preferences.
• Media articles about you.
• Your IP address, location, browser type and information on how you interact on our website.
• Any other information provided by yourself at the request of NW Hearts Charity.

In some limited circumstances, the personal information that NW Hearts Charity collects may include information that is considered ‘sensitive data’. This may include personal information regarding racial or ethnic origins, health and also information concerning criminal offences. Where this information is collected, we will tell you, so you know why it is needed.

What might we do with your information?

If you support us, for example by making a donation, volunteering, registering to fundraise, or signing up for an event, we will mainly use your information to:

• Provide you with the services, products or information that you asked for.
• Provide you information about other services, products or information we think might interest you where you have consented to being contacted.
• Administer your donation or support your fundraising, including processing Gift Aid.
• Send you surveys.
• Invite you to events.
• Keep a record of your relationship with us and record the contact we have with you; and
• Ensure we know how you prefer to be contacted.

We may use tracking tools to improve the effectiveness of our communications with you, including tracking whether you open emails we send you and which links you click within a message.

Legal Basis for processing your information

Under the UK General Data Processing Regulations, we must have a legal reason to collect, keep and use your data. We rely on the following legal basis for processing your data:

1. Consent
2. Legitimate Interests

We process your personal data for our legitimate interests to allow us to run NW Hearts Charity as a charitable entity effectively and in pursuit of our objectives. When we process your personal information for our legitimate interests, we make sure to consider and balance any potential impact on you and your rights under data protection laws. We will always ensure that your personal data will not be used where our interests are overridden by the impact on you.

The following are some examples of instances where we process your data for our legitimate interest:

• Direct marketing: We may send electronic marketing and fundraising requests which further the aims and objectives of NW Hearts Charity and don’t unduly impact the rights of the individual.
• Profiling and analysing information: We carry out limited profiling and research to help us understand our supporters, donors and potential donors and further enhance the charity.

How we update your information

We review records of our supporters and volunteers to ensure your data is as accurate as possible and always appreciate it if you let us know if your contact details change. It is important that we keep your personal data as up to date as possible. 

Who we share your information with

We are committed to protecting your data and therefore it will never be sold to external organisations and will only be disclosed to those acting as agents and data processors carrying out work on our behalf. Where we enter into a relationship with an external delivery partner, any such arrangements will be subject to a formal agreement between NW Hearts Charity and that organisation to protect the security of your data. These Parties will include:

• Salesforce, Just Giving, Award Force and other delivery partners who enable us to deliver our programmes effectively.

How to access, correct or delete your information

Under the UK-General Data Protection Regulations, you have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email the Data Controller at office@nwhearts.org 

To help us locate any personal information about you (or in case we need to get in touch with you to obtain further information to help us locate your records) please include your full name, address and telephone number with your request.

If you do not want to receive any further information about NW Hearts Charity and would like us to remove your name from our mailing list, please contact us using the details above.

How we keep your data safe

We aim to ensure that there are appropriate, physical, technical and managerial controls in place to protect any personal information you may provide to us.

Where we use external companies to collect or process data on our behalf, we carry out comprehensive checks on them before we work with them and ensure that contracts are in place that set out our expectations and requirements. We may need to transfer your personal data outside of the European Economic Area (EEA) to allow them to perform services on our behalf. In doing so your data may be stored or processed outside of the EEA. Where this happens, we will endeavour to ensure that your data is being processed in accordance with the appropriate security requirements in line with our legal responsibilities, and by submitting your details in such circumstances you agree to this transfer.

How long we store your data for

We will hold your personal information on our systems for as long as is necessary for the relevant activity. If you request that we stop sending you marketing materials we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us, we won’t keep any information that we don’t need.

Contact us

If you have any questions or concerns about how the Charity is collecting, using or storing your personal data, you should contact the Charity’s Data Controller in the first instance via office@nwhearts.org. You also have a right to complain to the Information Commissioner’s Office via their website https://ico.org.uk/make-a-complaint/

Updating

NW Hearts Charity reviews its Privacy Statements annually and updates it where necessary.