At Goodwill and Growth for Africa UK (GAGAUK; registered charity number 1092028), we are committed to protecting and respecting your privacy.

This Privacy Policy describes exactly when, how and why we collect personal information, what information we collect, how we use it and how we keep it secure, and the rights you have regarding our collection, processing and storage of your data, including the right to be forgotten.

What information we collect, how we collect it and what we use it for

We may collect or receive personal information about you whenever you interact with us, for example when you:

Give us information directly by:

• donating to us offline and completing a paper donation form
• visiting or contacting us via our website
• subscribing to our mailing list or responding to one of our mailings
• requesting information from us
• contacting us, or becoming involved with us in any other way than as stated above

Give us information indirectly by:

• making an online donation or purchasing a ticket for an event via third-party fundraising/donation-processing websites such as CAF Donate, Charities Trust, JustGiving, VirginMoneyGiving, GlobalGiving, Eventbrite or Facebook*

The information we may collect from the above interactions may include, but is not limited to:

• Your name, address, email address, telephone number, and/or mobile number, along with your preferences as to how we should contact you in the future
• Financial information which you give to us, including your gift aid/taxpayer status
• Records of your donation history and correspondence with us
• Details of your visit to our website, including technical information such as the IP address you use to access the website, your browser type and version
• Other details relevant to your communications with us including your reasons for supporting us
• Bank account details, should you ask us to contact your bank on your behalf to set up a standing order.

*Payment information

We do not directly collect and handle payment information such as credit/debit card details. If you make a donation either directly or via a fundraising page, or purchase an event ticket online, your card details are collected by our third-party payment/donation processors, who specialise in the secure online capture and processing of credit/debit card transactions. They may share your contact details with us but no payment information is shared with us, nor do we have access to it. Please refer to the Privacy Policy’s or Statements of these respective organisations for further information.

We will use your personal information in a number of ways, including for the following purposes:

• To provide you with information you have requested
• Fundraise in accordance with our policies and procedures
• To administer your donation, including sending a thank you email or letter, and for Gift Aid processing
• Keeping a record of your relationship with us
• To send you our e-newsletters if you have subscribed to our mailing list or opted-in to receive further communications from us via email
• To maintain our organisational records and ensure we have your most up-to-date marketing and communications preferences.

Using your data for marketing

We will only use your data for marketing purposes (such as sending you our newsletters) if you have explicitly opted-in to receive such communications from us, and we will only send such information via the channels by which you have consented to receive it. If you receive a marketing email from us that you haven’t asked for please do let us know. You may opt-out of email marketing communications by clicking the ‘Unsubscribe’ link at the end of our mailing list emails. This request will be honoured automatically and immediately.

 Cookies

The GAGA UK website uses cookies for certain functionality on the site. There is a site cookie that remembers any preferences you choose for the site; so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another.

There are three Google Analytics cookies:

• [_ga]
• [_gid]
• [_gat_gtag_UA_18451846_18]

Sensitive personal data

We do not collect ‘sensitive personal data’, as defined by data protection regulation, such as health information, race, religious beliefs and political opinions.

Collecting children’s data

Whilst we don’t routinely collect information from children (under 16s) we appreciate that supporters of all ages may wish to get involved with our work. If you are under 16 and would like to get involved, please ensure that you have consent from a parent or guardian before giving us your personal information.

Who we share your data with

We will never sell your data to any third party nor will we share your details with other entities for marketing purposes, and you will not receive communications from other charities or organisations as a result of giving your details to us.

We will only share information with other organisations where we have your permission to do so in accordance with this Privacy Policy or where it is necessary for a legitimate reason or where it is required by law or regulation. These “data processors” will only act under our instruction and we will not allow these organisations to use your data for their own purposes and will take care to ensure that they keep your data secure.

Examples of situations where we may share your details without your consent are as follows:

• When claiming Gift Aid on any eligible donation you have made, or for a Gift Aid audit, we are required to provide to HMRC the name and address of any individual on whose donation we have claimed or are claiming Gift Aid.

Your data may also be available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behavior of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:

• Your data will be made available to our website provider
• The data that may be available to them include any of the data we collect as described in this privacy policy.
• Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.
• They will store your data for a maximum of 7 years.
• This processing does not affect your rights as detailed in this privacy policy.

 How we store your data and keep it safe

GAGA UK is committed to keeping your personal information safe and secure and we will always try to take appropriate precautions to protect against unauthorised access to, loss, misuse or unauthorised disclosure of your information.

We always ensure that only authorised personnel (for example GAGA UK staff, volunteers, or Trustees) have access to your information and that any place where personal data is stored is protected via a secure password or log-in, or, in the case of physical records, held in a secure location.

Your data may be stored in the following places, depending on how and where you have provided it:

• our Excel database
• our Paxton accounting system
• our email servers and in our Outlook email folders
• our Mail Chimp account
• the admin end of our website
• our paper records and files

Despite all precautions, no data transmitted over the internet, stored on a computer or in the Cloud, can be guaranteed to be 100% secure. So, while we strive to protect your personal information, we cannot guarantee the security of any information you disclose to us online either directly or via a third-party, and you must understand that you do so at your own risk.

How long we keep your information for

We will hold your personal information on our systems for as long as is necessary for the relevant activity. If you ask us to stop sending you marketing communications, we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us.

Your rights to your data

Data protection legislation gives you the following rights in relation to your personal data:

• To object to, restrict or withdraw consent from us processing your personal data
• Access to, rectification of and deletion of the personal data we hold on you

If you wish to exercise any of your rights, please write to us at GAGA UK, 50 Cygnet Court, Timothy’s Bridge Road, Stratford upon Avon, CV37 9NW or email [email protected]  

If you make a request relating to any of your rights listed above, we will consider each request in accordance with all applicable data protection laws and regulations. No administration fee will be charged for considering and/or complying with such a request unless the request is deemed to be excessive in nature.

Upon successful verification of your identity you are entitled to obtain the following information about your own personal information:

• The purposes of the collection, processing, use and storage of your personal data.
• The source(s) of the personal information, if it was not obtained from you.
• The categories of personal data stored about you.
• The recipients or categories of recipients to whom your personal data has been or may be transmitted, along with the location of those recipients.
• The envisaged period of storage for your personal data or the rationale for determining the storage period.
• The use of any automated decision-making and/or profiling.

If at any time you’d like us to change the way we contact you, please write to us at GAGA UK, 50 Cygnet Court, Timothy’s Bridge Road, Stratford upon Avon, CV37 9NW or email [email protected]  

You can also now register your details with the Fundraising Preference Service if you would prefer us not to contact you. For further information please visit the Fundraising Regulator’s website at www.fundraisingregulator.org

Changes to this policy

This Privacy Policy may change from time to time. If we make any significant or material changes to this policy, we will publicise these changes clearly on our website or contact you directly with more information.

Should you have any queries about this Privacy Policy, please contact us at [email protected]

Complaints

If at any time you are not happy with the way we have handled your personal data, please do contact us. If you do not feel we have been able to satisfactorily resolve your complaint you can report your concern to the Information Commissioner’s Office (ICO) by visiting their website at ico.org.uk/concerns/