Action on Disability (AOD) takes your privacy very seriously. We are committed to protecting your personal information and being transparent about what we do with it, no matter how you interact with us.
We are committed to using your personal information in accordance with our responsibilities and the law.
- European Union General Data Protection Regulation (Regulation (EU) 2016/679) (‘GDPR’)
- Data Protection Act 2018 (‘DPA’)
- Privacy and Electronic Communications Regulation (2003)
GDPR provides the legal framework that defines how personal information can be used. AOD is fully committed to complying with the principles set out in GDPR and has a legal duty to protect any information we collect from you.
- Your personal information is only used for the purpose for which we collect it
- We will hold your personal information on our systems only for as long as is necessary for the relevant activity
- Your personal information is only seen by those who need it to do their jobs
- We will only disclose data when we have your consent, or where we are obliged to disclose personal data by law, or as expressly permitted under the GDPR
- We will keep your information up to date. Inaccurate or misleading data will be corrected as soon as possible
- Your information will be protected from unauthorised or accidental disclosure and processed in an appropriate manner to maintain its integrity and confidentiality
- We will provide you with a copy of your personal information on request
For the purpose of this policy, ‘personal information’ means any information which can identify a living individual.
As an organisation we collect and use personal information for a variety of reasons and in a variety of ways, depending on the activity you are taking part in and when you share the information.
When we collect personal information, we will always explain clearly what information we are collecting, why we are collecting it and how we will use it.
If you do not provide us with your personal information, we may not be able to provide you with any of our services.
We will always make sure we have a lawful basis for processing your personal information.
We may obtain your information in the following ways:
- If you give us your information directly for any reason – becoming a member or volunteer, receiving a service or making a donation, we will ensure you are given all the important information about how we will use and look after your information at the time.
3. When you visit our website or access our social media
- We might also obtain your personal information through your use of social media, depending on your settings or the privacy policies of these social media and messaging services. To change your settings on these services, please refer to their privacy notices, which will tell you how to do this.
4. When the information is publicly available
- We might also obtain personal data about individuals who may be interested in giving major gifts to charities or organisations like Action on Disability. In this scenario, we may seek to find out more about these individuals, their interests and motivations for giving through publicly available information. This information may include newspaper or other media coverage, open postings on social media sites such as LinkedIn, and data from Companies House. This is a form of profiling (see below) to build up a picture of donors. We will not retain publicly available data relating to major donors without informing them, which will be done at the earliest practical opportunity.
- Profiling and Automated Decision making – is any form of automated processing of personal data to build up a picture of a person, in particular to analyse or predict aspects about that person’s economic situation, personal preferences or interests. We may use the information we hold about you based on your interactions with us in order to build our relationship with you, offer you the right help or information and personalise things we offer to you.
- Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. We will always inform you if we are processing your information in this way.
How we share your information:
We have systems and processes in place to ensure your personal information is maintained confidentially and securely and that it is used only for purposes for which it was provided.
- We do not sell, rent or lease the personal information we collect to any third parties.
- Depending on why you provided us with your personal information and how we are using it, we may need to share your information with other organisations or individuals, such as those that provide services on our behalf (e.g. printing and delivery of mailings, delivery of products, information on your support). We will only provide these organisations and individuals with the personal information necessary to fulfil the purpose for which it was provided.
- Depending on why you provided us with your personal information and how we are using it, we may need to transfer your information outside the EEA, (for example some of systems we use to hold personal information may be provided by an organisation that stores the data on computer systems held outside the EEA). Although the country may not be subject to the same data protection laws as companies based in the UK, we will endeavour to make sure they provide an adequate level of protection in accordance with UK data protection law, or ensure that safeguards are put in place to protect your personal information. If you wish to know more about any transfer outside the EEA or the safeguards in place, please contact us using the contact details provided or at the bottom of this policy.
- We may also need to disclose your personal information to another organisation if we are required to do so to meet a legal obligation.
How we keep your Personal information secure
All personal information we hold about you will be kept securely, using a variety of security technologies and organisational procedures to help protect your personal information from unauthorised access, use or disclosure.
How long we’ll keep your personal information
We will only keep your personal information for as long as it is required, for the purpose we collected it, including if it is needed for any legal, accounting or reporting purposes. We will let you know how long we keep your personal information.
Your rights and controlling your personal information
Action on Disability supports the principle of “fair and transparent” processing of your personal information. We support your rights in relation to your personal information under the General Data Protection Regulation
You have the right to:
- Be informed about what we are doing with your personal information
- Object to the processing of your personal information
- Request access to your Personal information (commonly known as a “data subject access request”)
- Request us to rectify information you or we think is inaccurate, and you may also ask us to remove information that is inaccurate or complete information which is incomplete (‘right to rectification’)
- Request us to update the Personal information we hold about you or delete the information we hold about you (although we will not be able to provide our services to you if you make this request
- Ask us to stop processing personal information about you where we are relying on a legitimate interest (right to object)
- Ask us to restrict how we use your personal information for a period of time
- Request us to send another organisation information that you have provided to us in a computer-readable format
- Obtain your personal data from us and reuse it for your own purposes without hindering the usability of the data (‘right of portability’). This right does not apply where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
- Understand and input into a decision made by solely automated means if it has a legal or similarly significant effect on you
- Withdraw consent if that is the basis that we are relying on. We will inform you how to do this.
- Seek the deletion of your data (often referred to as the ‘right to be forgotten’). You may wish to exercise this right for any reason; but note that we are entitled to and reserve the right to retain your data for statistical purposes (this right is not absolute).
- You also have a right to object to us processing your data for the purposes of marketing. You have a choice about whether you want to receive information about our work and fundraising areas.
How to stop or change how we communicate with you
If at any time you wish to stop or change how we communicate with you, or update the information we hold, please do get in touch.
For further information on your rights
If you are unhappy with how we handle your personal information, or how we handle any requests you make, please contact us.
Changes to this Policy
Most browsers will allow you to turn off cookies. Please note however, that turning off cookies will restrict your use of our website.