Privacy Policy – Supporters and Volunteers

This Privacy Policy was last updated on 11 June 2018.

Privacy Policy

At Blind Veterans UK we respect the privacy of our supporters and volunteers. This policy explains how and why we collect, manage, use and protect your personal data. It also makes clear how you control your personal information.  It should be read in conjunction with our Terms of Use for this website and Cookies Policy.

Our Privacy Promise

We take our duties when processing your personal data very seriously. We promise that we will tell you what data we are collecting and why. We will make every reasonable effort to collect, process, store and share your data safely and securely.  We will also make sure that our trusted partners do the same.  We also promise that we will be open and clear with you about our use of your personal information and that you will be able to control your personal information with ease.  Please also read our Supporter Promise.

Your data

We are very thankful that you are supporting us in providing life-changing assistance to blind veterans.  In order to enable that support, we need to collect and keep a little data about you, like your name, contact details, preferred means of communication or, when appropriate, payment details.  Some of this information we may need to share with 3rd parties such as payment agencies or HMRC or our trusted partners, such as event organisers or service providers.  This is to provide you with the information, products or services you have requested.

We use your data to enable your support

We use the information you provide to keep you informed about how we are providing lifelong practical and emotional support to blind veterans.  We also use it to identify your areas of interest and to draw your attention to how you may be able to provide specific support to our veterans. We also use it to help us to fundraise more efficiently; so that every penny we receive can be better used to directly support blind veterans.

You are in control

If you would like to make any changes to the way we are processing your data, if you believe it is inaccurate or incomplete, if you wish to stop receiving certain or all communications from us, you can amend your preferences at any time. Our communications with you offer the opportunity to amend your preferences. In any case whether a supporter or a volunteer you can contact us using the details in Section 9 of this policy “How to Contact Us”. If you prefer, or wish to make a complaint, you can e-mail our Data Protection Officer whose details are also in Section 9.

Changes to this Policy

We may change this document from time to time to reflect the latest views of what we do with your information and legal and regulatory changes. Please check back frequently.  You will be able to see changes have been made by the date it was last updated.

Our Privacy Policy in detail

This policy is split into 9 sections, which can be accessed below. This policy explains:

  • 1. Who we are

    Our Privacy Policy applies to personal data collected and used by Blind Veterans UK. Under data protection law and regulation, we are a ‘data controller’ and are registered as such with the Information Commissioner’s Office (Registration Number: Z6040633).

    Since 1915, Blind Veterans UK has held to the belief that no-one who has served our country should battle blindness alone. That's why we're here to help with lifelong practical and emotional support for blind veterans, regardless of when they served or how they lost their sight.  We help veterans recover their independence and discover a life beyond sight loss.

    References to "Blind Veterans UK", ‘the charity’, “our’, ‘us’ and "we" mean Blind Veterans UK registered charity 216227 in England and Wales and SCO39411 in Scotland. 

    This also includes: our wholly owned subsidiary charitable trading company, Blind Veterans UK Trading Limited (registered company in England & Wales No. 06446944) which trades on our behalf to raise funds; Four Seasons NWMC Housing Limited (registered company No. 01882050); and the St Dunstan’s Retirement Benefits Plan (1973).

  • 2. What personal data we collect and why

    What we need to collect

    The term ‘personal information’ (or data) means information that relates to you or another individual that means you can be identified, either directly or in combination with other information that we may hold.  We need personal information about our supporters and volunteers to allow us to provide you with the information and services that you ask us to provide or to allow you to support us in the ways that you want. 

    As a supporter or volunteer, for example you make a donation, volunteer your time, register to fundraise, sign up for an event or buy merchandise, or as someone interested in becoming one, we will usually collect personal data about you such as:

    • Name.
    • Postal address, telephone number, email address.
    • Date of birth.
    • Payment details (if you are supporting us financially).
    • Voluntary information to assist us in understanding our supporter base such as your reasons for supporting us or how you heard about the charity.

    We will be very clear with you that we wish to collect such information, our reason for collecting such information and we will only do so when we have a lawful basis for processing the information. If you are under 16, we would love you to support us, but please ensure you have the permission of your parent or guardian before giving us your personal information. You retain the right to change your preferences at any time.

    Data protection law and regulation recognises certain information as ‘special category’ data and as being particularly sensitive. This includes: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, certain biometric data, data concerning health or a person's sex life or sexual orientation. Sometimes we may need to collect or may indirectly obtain sensitive personal data.  For example:

    • You may reveal some of this information if you share photos or personal information on our website or social media channels.
    • If you have signed up to support an event that may be physically demanding, we may ask you to confirm any health conditions that we or the organisers need to be aware of.
    • We may gather this information for the purposes of monitoring and ensuring we provide equal opportunities to supporters and volunteers or to cater for your specific requirements when supporting us.

    If you provide, either at our request or voluntarily, any sensitive personal information, you explicitly agree that we may collect and use it in order to provide our services in accordance with this Privacy Policy.

    The accuracy of your personal information is really important to us.  If you wish to update or correct any information we hold, please contact us using the contact details in Section 9 “How to Contact Us” at the end of this policy. 

    Why we need it

    We need your personal information in order to perform functions such as:

    • Manage your support relationship with us. To keep a record of your relationship with us and any direction you give on how we are to comply with your data rights. To administer any donations or support your fundraising, including processing Gift Aid.   
    • Communicate with you. To know how you prefer to be contacted and to make adjustments as you specify. To provide you with specific and, where appropriate, personalised services, products, updates, newsletters, feedback, competitions and information.  To assist with technical problems related to our websites or apps.
    • Marketing. If you provide us with your email address or telephone number, we may contact you for marketing purposes.  We may use your email or SMS text number for both marketing and targeted advertising, but only where we have your opt-in consent to do so. If you provide us with your postal address or telephone number, we may send you direct mail or telephone you about our work.  We will not do so if you have told us you would prefer not to hear from us by these means.  We check telephone numbers against the Telephone Preference Service (TPS) and if you are registered, we will only contact you if you have specifically consented to us making such calls.  We make it easy for you to tell us how you want us to communicate, in a way that suits you.  Our forms have clear marketing preference questions and we include clear information on how to opt-out or opt-in when we send you marketing information.  
    • Fundraising. The lifeblood of serving our blind veterans is fundraising. We are always grateful when people donate. We endeavour to tailor our fundraising activity to ensure that we are as efficient with our resources as possible, keeping as much money available to support our beneficiaries as possible, which donors tell us is a priority for them.  It also provides you with the most relevant and timely information and opportunities.
    • ProfilingTo help us achieve this tailored approach, we use profiling or wealth screening techniques, both ourselves or through trusted third-parties. We use existing information that you have supplied to us and combine this with information from publicly available sources such as charity and corporate websites and Companies House. We only use reputable sources, where someone would expect their information may be read by the public. By doing this, we can understand our supporters better and ensure we only make appropriate requests from each of you.  It may help those of you who have the means, and the desire, to give a bit more. For more detail about how and why we build profiles of our supporters please click here.
    • To personalise and improve your supporter experience. We may use your personal data in order to tailor our information and services to your specific needs and preferences to ensure a personalised supporter experience. To understand how we can improve our services, products or information. To provide personalised direct marketing and communication in a way that you control and that suits you. 
    • To improve our services and administration. To ensure the most efficient and appropriate use of the resources we have. To drive efficiency through statistical and market analysis. 

    If you choose to withhold certain personal information, we may not be able to provide you with the information, products or services you would like.

    If you don’t want to hear from us, or do not want us to use your data for direct marketing or profiled fundraising purposes please call us using the details at Section 9 “How to Contact Us”. We will retain your details on a suppression list to ensure that we respect your preferences.

  • 3. How we collect your personal data

    We collect information about you in a variety of ways. We may collect information you provide directly to us as well as information indirectly available from other sources. The information we get from other organisations may depend on your privacy settings or the preferences you have selected with them, so you should regularly check them to fully understand how they will process and share your data.

    Direct from you

    You may give us personal data directly yourself:  in order to join as a supporter or volunteer; use our websites or apps; sign up for one of our events; make a donation; purchase one of our products (such as tickets, raffles, merchandise); or communicate with us. Sometimes when you support us, your information is collected by an organisation working for us (e.g. a professional fundraising agency). 

    Indirectly from other sources

    We may obtain your personal data indirectly when you give permission to other organisations to share it or it is publicly available:

    • Independent event organisers. Your information may be shared with us by independent event organisers, for example the London Marathon or fundraising sites like Just Giving or Virgin Money Giving. These independent third parties will only pass on your data when you have indicated that you wish to support Blind Veterans UK and with your explicit consent.
    • Third party organisations. You may have provided permission for a company or other organisation to share your data with third parties, including charities. This could be when you buy a product or service, register for an online competition or survey or sign up with a comparison site. We can only use this data where we have been named as a recipient of the data or the third party has named a charity subsection into which we fit. We may also be provided with credit/debit card details and whether you are a tax payer for Gift Aid purposes. Like all companies, through our website and mobile apps, we may collect information about what browser you are using, your IP address and computer operating system and may use this information to improve the services we offer.
    • Social media. Depending on your settings or the privacy policies for social media and messaging services like Facebook or Twitter, you might give us permission to access information from those accounts or services.
    • Publicly available sources. Public information may include information from places such as Companies House, the electoral register and information that has been published in articles / newspapers. Additionally, the Post Office’s National Change of Address database allows us to keep your information up to date.
  • 4. The lawful basis for processing

    Data protection law and regulation require us to have a lawful basis for processing your personal information.  These include:

    • Where you have given consent to do so for notified purpose(s).  This may include marketing material via e-mail or SMS or to provide you with a product, service or information that you have requested or require.  Where we need your consent, it will be clearly identifiable as a consent for a specific purpose.
    • To comply with a legal obligation. For example, where we are required to do so by a court, regulatory authority the police or security services or we are legally required to, such as to comply with Health and Safety law or in order to comply with HMRC requirements to process Gift Aid.
    • The performance of a contract.  If we are setting up or have a contract with you we will process your data to comply with the obligations of the contract.
    • Where we as a charity have a legitimate interest. Where we have a legitimate interest, we must ensure that we are not harming any of your interests or rights and only use it in a manner that you would reasonably expect us to. For example, we have a legitimate interest in using our supporters’ data, contacts and preferences for the purposes you would expect; in marketing to supporters; and research to better understand who our supporters are and to better target our fundraising activity.  We also have a legitimate interest in fraud prevention and informing authorities about possible criminal acts or security threats

    Where we process ‘special category’ personal information (such as health) we will ensure we do so in accordance with the additional conditions required such as having your explicit consent or where you have manifestly made the information public yourself. 

  • 5. Sharing and Protecting your information

    How we keep your personal data safe

    We ensure that there are reasonable and appropriate technical and organisational controls in place to protect your personal details against unauthorised or unlawful processing and against accidental loss, destruction or damage.  For example, our computers, online systems and our network are protected and routinely monitored.  We have policies and procedures in place which staff and volunteers are expected to comply with and for which they receive training.

    • Online security. Blind Veterans UK will ensure that when collecting personal information over the internet that this is done securely. Our online forms are always encrypted and our network is protected and routinely monitored.  If you use a credit or debit card to donate to us, buy something or make a booking online, we pass the card details securely to our payment processing partners.  We are Payment Card Industry (PCI) Data Security Standard (DSS) compliant (for more information go to:  pcisecuritystandards.org/pci_security) and use external compliant providers to collect this data on our behalf. We and our partners use TLS (Transport Level Security) to encrypt data sent between you and us or our partners.  We do not use cookies to store this type of information nor do we store credit or debit card details following completion of your transaction. To protect yourself when sending us sensitive information, please ensure that you use devices running supported operating systems that are regularly updated / patched and have malware protection. Only connect your devices to networks that you trust. We cannot guarantee the security of data disclosed or transmitted over public networks.
    • Password security. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping the password confidential.  You agree not to share that password with anyone else.
    • Third party website links. Our website and apps may include links to other third-party websites, not owned or managed by Blind Veterans UK.  Whilst we try our best to only link to reputable websites we cannot be held responsible for the privacy of data collected by sites not managed by Blind Veterans UK, nor can we accept responsibility or liability for the implications to you of those policies.  For this reason, you should consult the privacy policy on any external website you link to before you submit any data to those websites.

    You should be aware that the use of the Internet is not entirely secure and although we will do our best to protect your personal data we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via the Internet.  Any transmission is at your own risk.

    Who has access to your personal data

    We undertake regular reviews of who has access to information that we hold to ensure that your information is accessible only by the necessary and appropriately trained staff, volunteers and trusted third parties. Where we share your data with a third-party, we require that they have appropriate technical and organisational measures in place to protect your information. However, we may be compelled by law to disclose your personal data to a third-party, such as law enforcement agencies, courts or government bodies and have limited control over how it is protected by that party.

    Occasions, other than by law, when we may share your data include:

    • If you have agreed that we may do so.
    • When we use external service providers to collect or process personal data on our behalf, for example, providing services; processing, mailing or delivering orders; fundraising; answering questions about products or services; sending mail and emails; customer analysis, assessment and profiling; when using auditors/advisors or processing credit/debit card payments or online tracking and analysis.
    • To our subsidiaries (i.e. the companies owned by Blind Veterans UK).
    • If we receive a complaint about any inappropriate content you have posted or transmitted to or from one of our sites, forums, social media pages or apps we may share your personal data with your internet provider or law enforcement agencies.
    • To enforce or apply the Terms of Use for our website or other agreements or if we believe that we need to protect the rights, property or personal safety of Blind Veterans UK, our supporters, members, visitors or websites and for other lawful purposes.
    • We may disclose aggregate statistics about our supporters, volunteers, site visitors, customers and sales to describe our services and operations to prospective supporters, partners, advertisers and other reputable third parties and for other lawful purposes, but these statistics won’t include any personally identifying information without your explicit consent.
    • If we run an event in partnership with other named organisations your details may need to be shared. We will be very clear what will happen to your data when you register.
    • If we merge with another organisation to form a new entity, information may be transferred to the new entity.

    We will never rent or sell your personal information.  We will not share or swap it with other organisations for their own purposes or to make money out of your data without your consent.

    Where we store your information

    The information that you provide to us will be held in our systems and servers, which are located in our premises or those of a trusted third-party who processes data on our behalf. 

    We may need to use the services or provide access and processing to service providers and other organisations located outside of the European Economic Area (EEA). This may mean your data is transferred, processed and stored outside of the EEA. However, we will put in place appropriate safeguards to protect your data and rights, such as asking for your explicit consent, using appropriate contractual clauses and / or Privacy Shield (for the US) with our third-party supplier and / or by using encryption. With the appropriate safeguards in place, by submitting your personal information, you agree to this transfer, storing or processing at a location outside the EEA. In cases when we use external websites provided by other organisations such as Twitter or Facebook, then we would ask you to consult their privacy policies too.

  • 6. Retaining your information

    We hold your information for only as long as is necessary to fulfill the purposes for which the data was collected and our legitimate interests or in order to comply with legal or regulatory rules and requirements.

    If you decide not to support Blind Veterans UK any more or request that we have no further contact with you, we will keep some basic information in order to record this to ensure we comply with your request in the future.

  • 7. Your details on the internet and website

    Like most organisations, our website and apps use “cookies” and other tracking software to help us make our site and the way you use it better and more relevant to you.  We will not be able to personally identify you from the information gathered but it may help us improve our online services.

    • Cookies mean that a website will remember you. They’re small text files that are transferred to your computer (or phone or tablet).  They make interacting with a website faster and easier, for example by automatically filling your name and address in text fields.  Please read our cookies policy  for more information. You can change your cookie preferences whenever you wish.
    • When visiting our website or apps we may collect information about the type of device you’re using to access them and the settings on that device. This might also include the IP address and your operating system and certain device settings as well as diagnostic information.

     

  • 8. What are your rights?

    The new General Data Protection Regulations (GDPR), effective from 25 May 2018, gives everyone a number of very important rights. In abbreviated form these are:

    • The right to be informed. Transparency over how we use your personal information.  This Privacy Policy falls under this right.
    • The right of access. Request information that we hold about you.
    • The right of rectification. Update or amend the information we hold about you if it is incomplete or inaccurate.
    • The right to erase or ‘right to be forgotten'. Ask us to remove your personal information from our records where there is no compelling reason for its continued processing.
    • The right to restrict processing. Ask us to suppress the processing of your information.
    • The right to data portability.  Obtain and reuse your personal data for your own purposes.
    • The right to object. Object to the processing of your information for certain purposes (such as marketing, research, statistics or our legitimate interests).
    • Rights in relation to automated decision making and profiling.

    If you would like to know more about your rights under the data protection law see the Information Commissioner’s Office (ICO) website

    Remember, you can exercise your rights in relation to your personal information and change the way you hear from us or withdraw your permission for us to process your personal data at any time by:

    • Using the ‘Contact Preferences Form’ on our 'Contact Us' web page;
    • Through the contact details set out in the ‘How to contact us’ section of this policy.

    If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law and your rights, you can complain directly to the Information Commissioner’s Office.

  • 9. How to contact us

    If you wish to raise any comments or questions regarding this Privacy Policy or you would like to change your preferences for how we process your information you are very welcome to do so by contacting the appropriate department:

    If you are a supporter of the charity:

    If you are a volunteer:

    If you wish to enquire further about your rights, ask for information to be provided, or to raise a complaint, please contact our Data Protection Officer.

    • Post: Data protection Officer, Blind Veterans UK, 12-14 Harcourt Street, London, W1H 4HD
    • Email: dpo@blindveterans.org.uk