Privacy statement

Privacy Statement Introduction

As a Data Controller under Data Protection Legislation, ActionAid is committed to handling all personal data with the highest standards of security, transparency, and integrity and protecting the privacy of users in compliance with the Data Protection Act2018, and the GDPR effective from May 2018.

This privacy statement outlines the types of data that we hold and how we use this data to provide services to supporters. It also outlines how we manage the information you give us while you use our website. We pledge to:

a) Obtain and process information fairly.
b) Keep it only for one or more specified, explicit and lawful purposes.
c) Use and disclose it only in ways compatible with these purposes.
d) Keep it safe and secure.
e) Keep it accurate, complete and up to date.
f) Ensure that it is adequate, relevant and not excessive.
g) Retain it for no longer than is necessary for the purpose or purposes.
h) Give a copy of your personal data to you, if requested.

Types of information we collect

The type of information we collect may include personal data which identifies you or can be used to identify or contact you. This may include name, postal address, year of birth, email address, telephone number and other contact information you provide on our forms.

If you make a donation or a purchase on the website, you will be asked to provide your credit/debit card number. We do not receive these details, they are encrypted using Secure Sockets Layer (“SSL Software”) and are transmitted directly to our payment providers Stripe or PayPal (Donations), using SCA protocol (Strong Customer Authentication)

If you set up a direct debit donation, we will require your BIC and IBAN numbers.

We may also hold records of your correspondence with us, if you have contacted us regarding your donation.

How we use the information you provide

1. The information you provide, including your marketing preferences, will be processed and added onto our databases.
2. We process personal data you provide to us for the following purposes:

• Fulfilling our services to you, such as fulfilling your child sponsorship or regular gift agreement
• Keeping you updated on our range of work, including:
• our campaigns and advocacy work,
• our fundraising events and activities,
• our training courses/ workshops and our publications,
• our volunteer opportunities,
• our conferences and other ActionAid events and programmes,
• For processing donations that we receive from you,
• For registering your subscription to mailing list(s) and eNewsletter(s),
• For conducting research and analysis to monitor the performance of our campaigns, appeals, events and products,
• To keep records of your donations for tax calculation purposes, namely the practice governing the restricted use and collection of PPSNs for our Tax back scheme.
• For internal record keeping, including the management of any feedback or complaints
• For possible wealth screening and research to improve our understanding of our
  supporters, inform our fundraising strategy and target our communications more effectively. Please contact us if you prefer not to be included in any such analysis.
• For conducting supporter surveys, including research on your satisfaction with
  ActionAid, your interest levels in areas of our work and communications and other areas you may like to support.

Disclosure of information to third parties

• We work with trusted third-party service providers to support our operations and deliver campaigns effectively. We will not trade your personal details with third parties.
• We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company, and its subsidiaries, as defined in the Companies Act 2014 (as amended from time to time).
• We may allow our staff, consultants and/or external providers acting on our behalf to access and use your information for the purposes for which you have provided it to us (e.g. process your donations, to deliver mailings and other campaigns, and to analyse data) or for purposes set out in this privacy notice. We will only provide third party agents with the information they need to deliver the relevant service. We will ensure your information is transferred securely and treated with the same diligence as if we were handling it directly.

Third party service providers include:

a) Donation processing and payment service providers (e.g. Stripe, Paypal)
b) Customer Relation Management (CRM) system providers
c) Website hosting, development and maintenance providers
d) Email communication and marketing providers (e.g. Mailchimp)
e) IT and website support providers
f) Business partners, suppliers, and sub-contractors for the performance of any contract we enter into with them or you.
g) Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others. We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users.
h) Analytics and search engine providers that assist us in the improvement and optimisation of our site.
i) Consultants advising us on individuals’ possible capacity and inclination to support ActionAid’s fundraising strategy.
j) If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions and other agreements; or to protect the rights, property, or safety of any of the ActionAid entities, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

From time to time, we may engage specialist providers to support specific projects, such as system re-development, maintenance or data migration. Where this involves access to personal data, these providers act as data processors and only process personal data on our instructions.

We ensure that all third-party service providers are subject to appropriate contractual safeguards, including confidentiality obligations and requirements to implement suitable technical and organisational security measures to protect personal data.

Updating your preferences with ActionAid will not guarantee that you never see ActionAid content on social media, since the social media site may select you based on other criteria and without your data having been provided by ActionAid.

Security

Your personal data received online is held on a secure server hosted by our hosting service provider, Register365. The nature of the Internet is such that we cannot 100% guarantee or warrant the security of any information you transmit to us via the Internet to be secure. However, once we receive your personal data, we take all reasonable technical and organisational measures to protect personal data from loss, misuse, alteration or destruction and to prevent any unauthorised or unlawful disclosure or processing.

Where we store your personal data

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us, or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your sponsorship, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. ActionAid will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy statement.

All information you provide to us is stored on secure servers. Any payment transactions will be encrypted using SSL and SCA technology.

Subject to the previous paragraph, unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

Right of access to and updating or deleting your personal data

ActionAid Ireland is committed to ensuring that nothing we do infringes on your rights relating to the processing of your data. You have the right to access personal data we hold which relates to you, including how we acquired such data, and the purposes for which it is being used. This right requires that you will be given a copy of your personal data which you may have supplied.

To exercise this right, you must make your request in writing, by emailing info@actionaid.ie or posting it to our address as specified below. A request will be dealt with as soon as possible and we will respond to your request within one month from the date on which your request was received.

If you have subscribed to receive e-communications from us, you can update your profile and preferences or unsubscribe at any time. Click on the ‘update preferences or unsubscribe’ link at the foot of the email, this link appears on every email we send out.

You may also inform us of any changes in your personal data and we will update your personal data accordingly. To find out what personal data we hold on you, to receive a copy of this data, or to have your personal data updated, amended, or deleted, please write to us using the contact details below.

This Privacy Statement will be the subject of change, please check our website frequently to see recent changes.

Cookies

ActionAid Ireland uses Cookies to provide our digital users with the best possible experience on our website. Our cookies help us improve the speed and security of the website, to distinguish users from each other, and to understand user browsing patterns anonymously. Cookies also allow the user to share pages with social networks like Facebook and Twitter.

Within your browser you can choose whether to accept or decline our cookies. Please remember that if you decline cookies from ActionAid.ie it may affect your experience of the website. Find out how to manage the cookies stored on your computer at http://www.allaboutcookies.org/manage-cookies/

Changes to our privacy notice

We may make changes to this Privacy Statement from time to time, so we encourage you to check it frequently. By continuing to use our website you will be deemed to have accepted any changes.

If you wish to exercise any of these rights or have any questions about ActionAid’s Privacy Statement, you may contact us in the following ways: