Privacy and Cookies Policy
Introduction
We are committed to protecting your privacy and will only use the information that we collect about you lawfully. This privacy notice is intended to give you an understanding of how and why we use the information you give us.
Our website https://www.worldvision.org.uk/, or any related website incorporating the subdomain worldvision.org.uk, or https://www.musthavegifts.org are owned and operated by World Vision UK. We are registered as a company in England and Wales with company number 01675552 and a charity registered in England and Wales with charity number 285908. Our registered address is World Vision House, Opal Drive, Fox Milne, Milton Keynes, Buckinghamshire, MK15 0ZR.
You may contact our Data Protection Officer at any time about your data privacy matters. If you have any questions about this privacy notice you can contact dpo@worldvision.org.uk, or write to World Vision UK, World Vision House, Opal Drive, Fox Milne, Milton Keynes, MK15 0ZR, or call our Supporter Services team on 01908 841010.
We may update this policy from time to time without notice to you, so please check it regularly.
How we collect information about you
We may collect information from you in the following ways when:
- you visit our website
- you donate to us (which may be financial or non-financial/in-kind), or respond to our mailings and appeals
- you leave a legacy or gift to World Vision
- you contact us in relation to volunteering for us, act as an ambassador or fundraise on our behalf
- you share your experience of World Vision
- you attend a World Vision event
- you apply for a job with us or volunteer with us or provide services via an agency or provide consultancy services directly to us
- you register a website account for My Sponsorship
- you contact us with enquiries or other correspondence (including via social media) or become involved with us in another way and indicate you would like to hear more from us.
If you interact with us in one of the ways listed above, we may collect and process personal information about you such as:
- details of your visit to our website, including your IP address
- your name, address, email address, telephone number, your age or the corporate entity you represent
- information you enter onto our website or in hard copy form at an event
- records of your correspondence with us if you have contacted us
- financial information such as your bank or card details
- whether you have a relationship to another supporter.
We may also collect sensitive personal information about you, such as details about a health condition or disability, where it will mean we can communicate with you appropriately in the future. We may also collect this information if you plan to attend an event.
When your political affiliation or religious beliefs are of public knowledge, we may also record that information against your profile. If they are not in the public domain, we will only do so where we have your consent or drawn this specifically to your attention.
When you attend an event or activity, we may take photographs and videos of you. Your image may be used in print and digital formats, including print publications, websites, film and social media. We will always inform you if photography or filming is being carried out by us at an event. Event participants have the right to decide whether their images are taken and how these may be used and stored by us.
Where you become a sponsor through Chosen, any images we have of you may be viewed not just in the United Kingdom but also in some overseas countries where World Vision operates, and which may not provide the same level of protection to the rights of individuals as EU/UK legislation provides.
Your information may be given to us by third parties, for example fundraising sites. They will do so pursuant to their own policies on data protection and privacy. It is a good idea to check their privacy policy when you provide your information to them to fully understand how they will process your data and may share it with others.
How we use your information and on what basis
The Data Protection Act 2018 requires organisations to have a valid lawful basis in order to process personal data. Generally, World Vision UK will process your data on one or more of the following lawful bases:
- Where the processing of your personal data is necessary for the performance of a contract or legal agreement to which you are party, or where a contract forms the basis of your interaction with World Vision UK.
- Where you have provided your consent to us to use your personal data in a particular way. For example, in connection with your choices to receive marketing communications by email or text. We may seek your explicit consent for the processing of your data if you share sensitive personal data with us.
- Where the processing is necessary for the purpose of a legitimate interest pursued by us or a third party and your privacy rights do not override the legitimate interest. Our “legitimate interests” include pursuing the objectives of World Vision UK through our work to help the most vulnerable children in the most difficult places overcome poverty and experience fullness of life, and fundraising through direct marketing campaigns, emergency appeals and special events. However, "legitimate interests" can also include your interests, such as when you have requested information from us, and those of third parties, such as our beneficiaries.
For example, we rely on legitimate interests for activities such as: sending marketing communications by post or telephone (unless you have told us that you would prefer not to hear from us in this way), contacting you as a representative of an organisation about a charity partnership or in order to organise an event, and analysing your interaction with us to improve our internal business processes.
- Where processing is necessary to comply with a legal obligation. For example, we may rely on this legal basis for processing your personal data in relation to HMRC obligations.
- Where processing is necessary in order to protect the vital interests of the data subject or of another natural person, such as in a medical emergency, for example, if someone is taken ill at one of our events.
We will process your data for one or more of the following reasons:
- To administer your purchase or donation or support your fundraising, including processing Gift Aid.
- To maintain our relationship with you and update you on the impact of your support to us.
- To provide you with the services, activities or information you have indicated you are happy to receive or which you have asked for.
- To comply with applicable laws and regulations, and requests from statutory agencies.
- For internal administrative purposes and to keep a record of your relationship with us.
- For the purposes of internal research to improve our effectiveness.
- For marketing purposes, to provide you with information about us, our fundraising campaigns, the opportunity to leave a gift in a will, our events, our services, and any other information, products, activities or services that we provide or provide access to, such as supporter updates.
- To provide you with information about volunteering opportunities.
- To invite you to attend an event.
- To manage your communication preferences with us.
- To provide you with information about goods or services we feel may interest you.
- To notify you about changes to our service or fundraising opportunities.
- To undertake appropriate due diligence on the individuals and organisations we work with.
Where the law allows us to do so and to improve the quality and accuracy of the information you have provided to us, we regularly check the accuracy of the data we already hold about you (such as your telephone number, email address or address) against external data lists which are in the public domain (for example the Royal Mail). We may also use third parties to check this on our behalf. If we obtain updated details, we will combine this with the information we currently hold about you.
We may use unautomated profiling and screening techniques to analyse your personal information and create a profile about you, your interests and preferences from publicly available information. The types of information collected about you from the public domain will include:
- your age
- your qualifications
- a wealth band which will be an estimate of your wealth based on publicly available information
- your trusteeships and the type of charity of which you are a trustee and your company directorships
- your donation history
- your primary business organisation.
Occasionally we may use the information you provide to us to improve the accuracy and relevancy of any digital advertising you receive. This could include securely providing contact details such as your name and email address to digital advertising networks or social media companies such as Facebook, Google and Twitter. We may also use your information to enable us to display adverts to potential supporters who have similar characteristics to you, such as lookalike audiences. Information shared with third parties is always carried out in accordance with data protection laws and regulations.
You can stop your information being used for this by contacting us.
Where you have asked us not to use your information for targeted digital advertising, you may still see adverts related to World Vision. This is because certain social media sites or advertising networks may select you based on information they hold, such as your age and location, or websites you have visited, without using information that has been provided by us.
Where is your information stored?
World Vision UK has appropriate physical, technical and procedural safeguards in place in relation to the storage of data.
Information about you will usually be stored in the United Kingdom or the European Economic Area (EEA). In cases where we need to store data outside the EEA, we will use reasonable endeavours to ensure the recipient of the data implements GDPR-compliant measures to protect your information.
Online payment transactions will be encrypted. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
The transmission of information via the internet is not completely secure (though note that online payment transactions are securely encrypted). Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
How long do we keep your data?
We will process and retain your data only for as long as is reasonable and necessary in line with our data retention policy. In determining the duration, we will follow legal and regulatory guidelines. If you withdraw your permission for us to keep your personal data, please be aware that we will inform you if we are unable to do so due to overriding legal obligations.
Who do we share your data with?
We may allow our staff, consultants and/or external providers acting on our behalf to access and use your information for the purposes for which you have provided it to us. We will only provide them with the information they need to deliver the relevant service. We will ensure your information is transferred securely and treated with the same diligence as if we were handling it directly.
We do not sell your data to third parties. In other cases, we will not share your personal data with third parties except in accordance with this privacy notice or where we have your permission.
We may disclose your information to other organisations and agencies if we are under a duty to disclose or share it to comply with any legal obligation, or to enforce or apply any agreements; or to protect the rights, property or safety of us or others.
In accordance with our Safeguarding Policy and our commitment to protect vulnerable children from all forms of exploitation and abuse, we may share details, including personal data, relating to serious breaches of our Safeguarding Policy and Procedures with statutory authorities such as the police, the National Crime Agency (NCA), the Child Exploitation and Online Protection Agency (CEOP) and the Charity Commission.
World Vision Partnership
We may need to disclose your information to other World Vision offices in some circumstances with your consent. World Vision UK is part of the World Vision partnership which works in almost 100 countries. For example, if you sponsor a child through World Vision UK, or are involved in some other World Vision activity that involves a personal link to our overseas programmes, elements of your personal data necessary to fulfil the activity will be shared with relevant World Vision offices in that country in accordance with this policy. We will only share your details with another World Vision office in accordance with data protection laws and regulations and where we have your consent to do so.
Other members of the World Vision partnership may legally be obliged to share data in accordance with their relevant domestic legislation and potential law enforcement requirements.
Your rights
We take your data rights seriously. The General Data Protection Regulation gives you the following rights:
- You have the right to be informed about the collection and use of your data.
- You can request a copy of the information that we hold about you.
- If the data that we hold about you is inaccurate or incomplete, you can ask to have it corrected.
- You can ask for the data we hold about you to be erased from our records.
- You can ask us to restrict processing of your data where certain conditions apply.
- You can ask to have the data we hold about you transferred to another organisation.
- You can object to certain types of processing such as direct marketing.
We do not carry out automated decision making and profiling.
You can exercise your data protection rights in the following ways:
- Send an email to our Data Protection Officer at dpo@worldvision.org.uk.
- Write to Supporter Services, World Vision UK, World Vision House, Opal Drive, Fox Milne, Milton Keynes, MK15 0ZR; or telephone our Supporter Services team on 01908 841010.
Instructions for unsubscribing from emails are included in each email we send.
If you are unhappy with the way we have processed your personal data, please contact our Data Protection Officer. If you remain unhappy with how your complaint is dealt with you should contact the Information Commissioner’s Office (https://ico.org.uk). You are entitled to make a complaint to the Information Commissioner’s Office without first referring your complaint to us.
What are cookies?
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Cookies are small text files that are placed on your computer by websites that you visit. World Vision UK uses cookies to enable our website to function effectively, to improve your experience and to determine and improve the effectiveness of our website and marketing campaigns.
Necessary cookies: These cookies are necessary for the website to function and cannot be switched off in our systems. These cookies do not store any personally identifiable information.
Analytical cookies: These cookies allow us to measure visits and traffic sources so we can improve the performance of our website.
Marketing cookies: These cookies may be set through our site by our advertising partners to build a profile of your interests and show you relevant advertisements on other sites.
We respect your privacy and you can choose not to allow some types of cookies.
Here is a brief overview of the types of cookies we use on the World Vision UK websites:
- CMS cookies – our World Vision UK website is created in a Content Management System (CMS) called Umbraco, which places a small number of standard Umbraco cookies on your computer as you use it. Other World Vision UK websites (for example, Must Have Gifts and My Sponsorship) are created in different CMS systems and they can create cookies too. Additional cookies will be placed on your computer if you are an editor on one or more of these CMS systems (for example, if you are a World Vision UK staff member or an IT contractor).
- Analytics – examples include Google Analytics or Hot Jar. Google Analytics cookies collect information about how visitors use a website and help us to continually improve our content and user journeys. For instance, which pages visitors go to most often and if they get error messages from web pages. These cookies don’t collect information that identifies you. All information these cookies collect is aggregated and therefore anonymous. World Vision UK uses this data to help us to understand which pages people visit on the site, which internet browsers are being used, what is popular on our website, which pages on the website are visited before people donate or sponsor a child. Hot Jar is a website tool we use to measure the way visitors to our site interact with specific pages. We use cookies to see where users click on the page so that we can make it easier for our supporters to find the information they are looking for.
- Paid advertising (including Google, Facebook and Bing) – we use cookies from trusted third parties to measure the effectiveness of paid advertising to ensure the money we spend is used effectively. They also enable us to either service advertisements to or exclude people who have visited our websites. Cookies from Google, Bing and Facebook allow us to track traffic to our website to tell us if our marketing campaigns are successful, and ensure we are spending our advertising budgets as efficiently as possible.
How to manage your cookie settings
Many web browsers such as Internet Explorer, Google Chrome or Safari, will allow some control over cookies through their settings. To manage your cookie settings, please refer to your browser software. For more information about cookies and how to delete them, visit www.aboutcookies.org or www.allaboutcookies.org