The provision of your personal data to us is always voluntary. However, without providing some personal data it may be impossible for us to provide you with certain services.
We collect information about you:
When you give it to us directly
You may choose to provide us with your personal data when you take action via our site to sign a petition or send an email to a decision-maker; when you sign up to receive our newsletters and pesticide-related updates; when you sign up to attend one of our events; when you apply for employment with us; when you apply to volunteer with us; when you contact us by phone, email or post; when you interact with us on social media; when you buy anything from our online shop and/or when you donate money to us.
When it is publicly available
We may use available information from external public sources
When you visit our website
We may also partner with other organisations and in so doing acquire personal data with your consent.
What information do we collect?
We may collect, store and use the following kinds of personal data:
- When necessary we will store your name and contact details such as email address, physical address, telephone number and social media identity.
- We may store other information, where it is appropriate and relevant, such as details of why you have contacted us and what we have discussed; responses to surveys you have completed, donations you have made and actions you have taken.
- Information about you and your browsing habits on our website, including geographical location, browser type, referral source, length of visit and number of page views.
Applicable law recognises certain categories of personal information as sensitive and therefore requiring more protection, including health information, ethnicity and political opinions. We would never solicit this type of information from you. Should you choose to provide this information for some reason we would ask your permission in order to store it against your record.
How and why will we use your personal data?
Personal data will only be used for the purposes we have outlined when you give us consent,
- To enable you to use any services we offer;
- To send you information about our work, campaigns, important updates and progress we have made;
- To provide you with any products or information you have requested;
- To provide you with information on how you can support the work that we do;
- To allow the cookies on our website to provide us with statistical information that will help to improve your browsing experience;
- To handle the administration of any donation or other payment you make via credit/debit card, cheque, standing order or BACS transfer;
- To handle the administration of your employment and/or volunteering application;
- To audit and/or administer our accounts.
Communications, fundraising and marketing
Donations and other payments
Any financial transactions carried out on our website are handled by third party service providers such as JustGiving (donations) and TeeMill (online shop). We recommend that you read their privacy policies here and here respectively, prior to making any transactions.
We do not knowingly process data on any person under the age of 16. If we come to discover, or have reason to believe, that you are 15 and under and we are holding your personal information, we will delete that information within a reasonable period and withhold our services accordingly.
Who do we share your personal data with?
We do not sell, rent or trade any personal information.
We may need to provide certain information to certain trusted third parties who assist us in providing our products and services. Should we transfer personal information to third parties, we only provide the information they need to perform their services, and they are permitted by contract to only use the data for the purposes we require.
If any police force, regulatory body or other public authority lawfully requests us to provide personal information we may comply with that request without being obliged to inform you.
Security of and access to your personal data
We endeavour to ensure that there are appropriate and proportionate technical and organisational measures to prevent the loss, destruction, misuse, alteration, unauthorised disclosure or access to your personal information. Your information is only accessible by appropriately trained staff.
Please note that some countries outside of the EEA have a lower standard of protection for personal data, including lower security requirements and fewer rights for individuals. We may transfer and/or store personal data collected from you to and/or at a destination outside the European Economic Area (“EEA”). Such personal data may be processed by agencies and/or suppliers operating outside the EEA. If we transfer and/or store your personal data outside the EEA we will take reasonable steps to ensure that the recipient implements appropriate measures to protect your personal data.
You have the right to withdraw your consent at any time. This includes the right to ask us to stop using your personal information for direct marketing purposes or to be unsubscribed from our email list. You also have the following rights:
- Right to be informed – you have the right to be told how your personal information will be used. This Policy is intended to provide you with a clear and transparent description of how your personal information may be used. If you have further questions please get in touch.
- Right of access – you can write to us to ask for confirmation of what information we hold on you and to request a copy of that information. Provided we are satisfied that you are entitled to see the information requested and we have successfully confirmed your identity, we have 30 days to comply.
- Right of erasure – you can ask us for your personal information to be deleted from our records.
- Right of rectification – if you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated.
To exercise these rights, please send a description of the personal information in question using the contact details found at the end of this Policy. Where we consider that the information with which you have provided us does not enable us to identify the personal information in question, we reserve the right to ask for (i) personal identification and/or (ii) further information.
You are further entitled to make a complaint about us or the way we have processed your data to the Information Commissioner’s Office (“ICO”). For further information on how to exercise this right, please see the guidance here.
We are required to have one or more lawful grounds to process your personal information. Only 4 of these are relevant to us:
- Personal information is processed on the basis of a person’s consent (1)
- Personal information is processed on the basis of a contractual relationship (2)
- Personal information is processed on the basis of legal obligations (3)
- Personal information is processed on the basis of legitimate interests (4)
We will ask for your consent to use your information to send you electronic communications such as newsletters and marketing and fundraising emails.
(2) Contractual relationships
Interactions with our supporters and website users are voluntary and not contractual. However, sometimes it will be necessary to process personal information so that we can enter contractual relationships with people, for example, if you apply for employment or to volunteer with us.
(3) Legal obligations
Sometimes we will be obliged to process your personal information due to legal obligations which are binding on us. We will only ever do so when strictly necessary.
(4) Legitimate interest
Applicable law allows personal information to be collected and used if it is reasonably necessary for our legitimate activities (as long as its use is fair, balanced and does not unduly impact individuals’ rights). We will only rely on this ground to process your personal data when it is not practical or appropriate to ask for consent.
When we use your personal information, we will consider if it is fair and balanced to do so and if it is within your reasonable expectations. We will balance your rights and our legitimate interests to ensure that we use your personal information in ways that are not unduly intrusive or unfair in other ways.
In general, unless still required in connection with the purpose(s) for which it was collected and/or is processed, we remove your personal information from our records six years after the date it was collected. However, if before that date (i) your personal information is no longer required in connection with such purpose(s), (ii) we are no longer lawfully entitled to process it or (iii) you validly exercise your right of erasure, we will remove it from our records at the relevant time.
Third party websites
Please let us know if you have any queries or concerns about the way in which your data is being processed by contacting us at email@example.com or by writing to us at the following address:
Pesticide Action Network UK
The Brighthelm Centre