Noor Trust is a registered charity in England and Wales (charity number 1089506). Noor Trust’s registered address is 4 Dalston Gardens, Stanmore, London, HA7 1BU.
- Personal data that we process
- How we use personal data
- How long we keep personal data
- Rights you have over your data
- Third-party use
- Data security
The following table explains the types of data we collect and the relevant legal basis, under current data protection legislation, on which this data is processed.
|Purpose||Data we collect||Basis for collecting this data|
|Enquiring about our organisation and nature of its work on our website||Name, email, text of message||Legitimate interests – it is necessary for us to read and store incoming messages so that we can respond in an appropriate manner.|
|Subscribing to email updates about our work||Name, email||Consent – the party has given active consent.|
|Donating money/setting up sponsorship on our website and via third-party websites such as Just Giving.||Name, email, address, telephone number, payment information (if applicable)||Legitimate interests – this information is necessary for us to fulfill a person’s intention to donate money and provide a receipt if applicable.|
|Purchasing an event ticket via third party websites such as Ticket Tailor||Name, email, address, telephone number, payment information||Legitimate interests – this information is necessary for us to be able to stay in contact with event attendees regarding any changes.|
|Completing a gift aid declaration form||Name, email, address, payment information||Consent – the donor has given us consent to use their personal information to process the gift-aid declaration.|
2. How we use the data
We will only use personal data in a manner that is appropriate, considering the basis on which that data was gathered, as set out in the above table.
For example, we may use personal information to:
- reply to enquiries that we have received;
- handle donations or other transactions that had been initiated;
- where other parties have specifically agreed to this, we might send marketing communications by email relating to our work, which we think may be of interest to recipients.
- Process gift-aid declaration forms.
We take the principles of data minimisation and removal seriously and have internal policies in place to ensure that we only ever ask for the minimum amount of data for the requisite purpose, deleting that data promptly once it is no longer required.
We will keep a record of donations subject to gift-aid, for at least seven years to comply with HMRC rules.
You have a range of rights over your data, which include the following:
- Where data processing is based on consent, you may revoke this consent at any time and we will make it as easy as possible for you to do this (for example by putting ‘unsubscribe’ links in all our marketing emails).
- You have the right to ask for rectification and/or deletion of your information.
- You have the right of access to any personal information kept on file.
- You have the right to lodge a complaint with the Information Commissioner if you feel your rights have been infringed.
A full summary of your legal rights over your data can be found on the Information Commissioner’s website here: https://ico.org.uk/
If you would like to access the rights listed above, or any other legal rights you have over your data under current legislation, please get in touch with us.
Please note that relying on some of these rights, such as the right to delete your data, will make it impossible for us to continue to deliver some services to you. However, where possible we will always try to allow the maximum access to your rights while continuing to deliver as many services to you as possible.
6. Third-party use
When we participate in joint fundraising campaigns, we may share your information with whom we are collaborating. This may be to allow the facilitation of due diligence where large donations are concerned, or to ensure any contact or communication is only made by one organisation.
We may also disclose your personal information to specific third parties, such as:
- business partners, suppliers and sub-contractors who may process information on our behalf;
- analytics and search engine providers;
- IT service providers.
Where we are faced with a legal or regulatory duty, we may disclose your details to the police, regulatory bodies or legal advisors.
We reserve the right to disclose your personal information to third parties:
- We are at liberty to disclose your personal information to prospective buyers or sellers, if we sell or buy any business assets
- if our assets are acquired by a third party, we reserve the right to disclose your personal information, that is held by us, as part of the information transfer.
7. Data security and your rights
All the data held about you is held securely. We make the effort to ensure that there are appropriate technical controls in place to protect personal details. For example, we keep strict records of who has access to information that we hold, so as to ensure that your information is only accessible by appropriately trained staff and volunteers and can be requested at any time.
If you need more information about how we use personal data, or want to see a copy of information about you that we hold, please contact us.
If you have any comments or questions about this policy, feel free to contact us on firstname.lastname@example.org