Privacy Policy

This is the privacy policy of GivingWorks.

Contact information

3rd Floor, 65 Leadenhall Street, London
EC3A 2AD London
United Kingdom

You may contact us for any enquiries or questions related to our privacy policy by email at gdpr [at] givingworks [dot] org [dot] uk. Or you may contact us by phone on 0845 362 8425.

Policy Statement

We take your privacy seriously and this policy (Privacy Policy) sets out how we will handle your personal data securely and in accordance with your rights.

To the extent that we determine the manner and the purpose of processing, we acknowledge that we are a Data Controller of your Personal Data (as such terms are defined in the Data Protection Act 1998 but which, on and from 25 May 2018, shall have the respective meanings given under the General Data Protection Regulation (EU) 2016/679) (the “Regulation”)). We undertake to act in accordance with the Data Protection Act 1998 (and, on and from 25 May 2018, the Regulation) at all times (including having in place adequate levels of security in respect of such Personal Data). As noted above this Privacy Policy sets out the basis on which we will collect and process your Personal Data and that of any third party whose Personal Data you supply to us.
We will regularly review the purposes for which we hold your Personal Data and will not hold it for longer than is necessary. We will also seek to minimise the Personal Data which we hold about you wherever possible. If we intend to make use of your Personal Data for any new purposes which would be considered incompatible with the purposes for which it was originally collected, as set out in this Privacy Policy, we will notify you of such intended uses and seek your consent to such activities, prior to the commencement of any such processing.

General Information

This Privacy Policy explains what Personal Data we collect about you when you register to use our sites and/or use our services and how we handle your Personal Data to ensure that we protect your rights. Please read this Privacy Policy carefully to understand how we will treat your Personal Data. In this Privacy Policy, references to "you" or "your" shall mean you as a user of Givingworks website (our "site(s)") and/or the services we offer ("our "services").
This Privacy Policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any Personal Data we collect from you, or that you provide to us, will be processed by us.
We will seek your consent to the processing described in this Privacy Policy by asking you to tick relevant boxes situated on the form on which we collect your Personal Data

Information we may collect from you

When you register to use our services and/or our sites we may ask you to provide certain information such as your [name, address, email address, contact number, and documents which enable us to perform Aniti Money Laundering (AML) checks. We may also collect information on an ongoing basis about what pages you access or visit, and information about your use of our sites, for example the pages viewed, the website from which you came to visit our sites, changes you make to information you supply to us, including by use of cookies (see our Cookies Policy). If you contact us, we may keep a record of that correspondence.

Sensitive information
In order to provide you with our services we may need to collect Personal Data which is defined as ‘sensitive’, such as your medical and/or criminal records. We will ask you to signify your explicit consent to such sensitive Personal Data being processed by us and our service providers for the purposes stated in this Privacy Policy.

How we use your information

Our Group (which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006), our joint ventures and joint ventures of our Group, as we develop new business either on our own or with others, will use your Personal Data for the following purposes:
in the normal course of our business, to allow us to register you to receive our services and to provide you with our services;
to allow us to manage your account;
to allow us to analyse your personal preferences and personalise our services to you so that we can provide a more tailored experience to you;
to store your data to pre-populate fields to make it easier for you to provide information when you return to our sites;
we may ask you to complete surveys that we use for research purposes, although you do not have to respond to them;
Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data and the resources that you access on the basis that processing is necessary in order to perform our contract with you to provide our services;
to communicate with you, including sending you information about products and services which we think may be of interest to you (details of how to manage your marketing preferences are covered below under Marketing);
to validate your Personal Data (and, in some cases, match it against information that has been collected by a third party) to check that the Personal Data we hold about our customers/users is accurate, consistent and up to date on the basis that you have consented to such processing by agreeing to share your Personal Data with us for such purposes;
to comply with any legal obligations to which we are subject on the basis that processing is necessary to comply with our legal obligations;
in pursuit of our legitimate interests, such as developing and/or consolidating our business, defending our legal rights and/or seeking advice from our professional advisors;
We will endeavour periodically to check that the personal data we store for you is accurate. If you would like to update the personal data we hold about you, please contact us at gdpr [at] givingworks [dot] org [dot] uk with your request.
The provision of your contact information and Anti Money Laundering (AML) documents is mandatory if you are to receive our microtrust services.
The provision of Personal Data for the purposes of direct marketing is voluntary and you do not need to provide such Personal Data in order to receive our services. Information relating to your marketing preferences is detailed below under "Marketing".

Who do we share your information with?

As part of using our services, you consent to us sharing your Personal Data with the following parties:
to any member of our Group of companies (as described in section 4.1 above), our joint ventures and joint ventures of our Group, as we develop new business either on our own or with others;
service providers and other third parties who process and store data on our behalf;
professional advisors;
individuals who you nominate as referees to verify certain information;
if you set your marketing preferences to allow us to share your details with third parties, we may share your details with them so that they can communicate with you about their own products, services and other offers which they believe may be of interest to you. You will be able to opt-out of such communications at any time by following the steps described under Marketing below
We may also share your Personal Data with third parties:
in the event that our business, either in whole or in part, is acquired by a third party (in which case Personal Data about customers will be one of the transferred assets);
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce any contract with you; or to protect our rights, property, or the safety of our employees, customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud prevention.

How long do we store your personal data for?

We only store your Personal Data for as long as necessary for the purposes described in this Privacy Policy and or Use of Information Privacy Statement.
In any event, we will only store your personal data whilst you continue to use our services and for a period of at six years minimum or as directed by the Anti Money Laundering (AML) regulations.

Where we store your personal data

In order to ensure fair and transparent processing, we will, taking into account our processing activities, adopt appropriate procedures for the processing of Personal Data, which shall include implementing technical and organisational measures which take into account the harm that may be suffered, and correct inaccuracies identified in Personal Data processed, so that risk of errors are minimised and your Personal Data is processed in a fair and secure manner.

All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

From time to time, service providers, members of Our Group (as described in section 4.1 above) and organisations with whom we work k, may be located outside the European Economic Area in countries that do not have the same standards of protection for personal data as the UK. We will, however, always use every reasonable effort to ensure sufficient protections are in place to safeguard your Personal Data. We will also ensure that our service providers enter into compliant processing agreements with us to ensure that your Personal Data is processed in accordance with applicable data protection legislation.

Marketing

If you are a new customer, we will contact you by post, telephone, email and/or text message if not to do so by post, telephone, email and/or test message. You can indicate that you do not wish to receive such marketing information by ticking the relevant box situated on the form on which we collect your data for the purposes of marketing.

We may also permit selected third parties to use your data, to provide you with information about goods and services which may be of interest to you by post, telephone, email and/or test message where you have provided your express consent for us to do so by ticking the relevant box situated on the form on which we collect your data for the purposes of marketing.

You can also exercise this right at any time by contacting us at gdpr [at] givingworks [dot] org [dot] uk or selecting "unsubscribe" on the relevant marketing communication.

What are your rights?

Access to your personal data: You may request access to a copy of your personal data.
Right to withdraw consent: You may withdraw your consent at any time. Please contact us using the details located at section 15 of this Privacy Policy if you would like to withdraw your consent and we will update our records accordingly (including where appropriate by deleting your data in line with your right to erasure set out below).
Rectification: You may ask us to rectify inaccurate Personal Data held about you. If you would like to update the Personal Data we hold about you, please email us at gdpr [at] givingworks [dot] org [dot] uk
Erasure: You may ask us to delete your personal data. If you would like us to delete the personal data we hold about you, please contact us using the details below, specifying why you would like us to delete your personal data.
Portability: You may ask us to provide you with the Personal Data that we hold about you in a structured, commonly used, machine readable form, or ask for us to send such personal data to another data controller.
Right to object: You may object to our processing of your personal data pursuant to this Privacy Policy. Please contact us using the details below, providing details of your objection.
Make a complaint: You may make a complaint about our data processing activities to a supervisory authority. For the UK, this is the Information Commissioner's Office, at ico.org.uk.
To make enquires and/or to exercise any of your rights in this Privacy Policy please email us at gdpr [at] givingworks [dot] org [dot] uk
Please note that we may ask you to provide a form of identification verification before we can give effect to any such request made by you.

Cookies policy

Our Cookies Policy is accessible via our website.

IP addresses

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.

Links to Other Websites

Our site may, from time to time, contain links to and from the websites of our partner networks and PL1 affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Changes to our Privacy Policy

We may modify this Privacy Policy from time to time, so please review it regularly.
If we change this Privacy Policy in a way that may substantially alter the purposes for which we process your personal data we shall notify you [by means of notice on our site homepage and where a material change to such terms by email to the email address you have provided to us].
This Privacy Policy was last amended on 4 June 2018.

Contact Us

Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed to gdpr [at] givingworks [dot] org [dot] uk.