Beder Therapy Vouchers
Donate

Privacy Policy

BEDER – WEBSITE PRIVACY POLICY

Beder (“Beder”, “we”, “us” or “our” in this Policy) are committed to respecting your privacy and protecting the personal data (as set out below) that we obtain and hold about you and others. 

This privacy policy (“Policy”) explains how we will process the personal data relating to you that you provide to us when you visit our website, namely the website at www.beder.org.uk or in relation to any query or communication that you may send to us, or that we may collect from others about you when you visit our website. 

1. Introduction 

The website is operated by Beder, a charity registered in England and Wales with charity number 1187475 whose registered office is 2 Amity Grove, Flat 2, London, SW20 0LJ. The website allows customers to purchase merchandise and tickets to events supporting Beder’s charitable causes, among other things (“Services”). Where we decide the purpose or means for the processing of the personal data that you provide when using our website, we are the “data controller” for the purposes of the European General Data Protection Regulation 2016 (“GDPR”). Our website may contain hyperlinks to third party websites. These websites operate fully independently from us, and we cannot accept any responsibility or liability for the privacy practices of such third parties nor the availability of these external sites or resources. The appearance of such links on our website is not an endorsement. Should you use any of these websites, such use is at your own risk and we would recommend that you review their respective privacy policies and Terms and Conditions. 

2. What information will we collect about you? 

Information provided by you when using our Services You may give us information about you by creating an account, filling in forms when using our Services, signing up to our newsletter, or contacting us with e-mail and other similar inquiries. Such information can include: 

Analytics and Cookies 

Our website uses cookies and other mechanisms to collect and log analytical information, to help analyse how visitors use the website and to compile statistical reports on website activity. This processing is crucial to the running of our online charity and any business related thereto. Please see our cookie policy www.beder.org.uk/cookie-policy for more information. 

When you visit our website, our analytics service providers may collect the following data, which will be anonymised and aggregated before reporting back to us: 

3. How we use your personal data 

Providing the Services to you as a prospective or existing customer 

We may use and retain your personal data where we need to perform the contract we are about to enter into or have entered into with you, such as:

In order for you to purchase products via our website, we use the third-party payment provider Wix (“Payment Provider”), to collect, store and process payment information from you, including your name, email address, credit card number and bank account details. Our servers will not collect or have access to your payment details. Any purchases you make via the Site will also be governed by the Payment Provider’s terms and conditions and/or privacy policies. 

We may also use your personal data in accordance with out legitimate interests for our charitable purposes and improve the efficiency of our Services and internal processes on our website. 

Contacting Us (Your Enquiries) 

If you contact us via our website, to make an enquiry or otherwise, in certain situations we will ask you to provide a limited amount of personal data about yourself, such as your name, email address, and your message enquiry. We will use this information to respond to your enquiries, for example: 

In line with the legitimate interest we have in promoting our charity, we will process your enquiries to reply to your query, including providing you with information about the Services we offer. 

We may also process enquiries to take steps you ask of us with a view to entering into an agreement to provide you with our Services. You are under no obligation to provide us with any details, but if you choose to not provide us with relevant information, we may not be able to respond and/or provide the assistance that you request. 

Newsletter and Mailing List 

If you ask to be added to our mailing list by subscribing to our newsletter, we will keep you updated with information on news, offers, and updates about our Services. 

In line with the legitimate interest we have in promoting our charity, we will use the email address you give us via our website to provide you with this information. If you would like to be removed from that list please let us know by clicking unsubscribe at the bottom of any marketing email that you receive. 

There may also be circumstances where we will ask you for your prior consent in respect of our use of your personal data or where we may rely on an alternative lawful basis to process your personal data in which case you will be notified at the time. 

Analytics 

We use website analytics to understand visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. We undertake such monitoring in the pursuit of our legitimate interests in improving our website, and to provide a better service and source of information to visitors. 

Please see our cookie policy www.beder.org.uk/cookie-policy for more information. 

All content you submit to us 

If you send us objectionable content or otherwise behave in a disruptive manner when using our website, we may process personal data included in your messages to respond to and stop such behaviour. 

We only process personal data in this way for the legitimate interests of ensuring that use of our website is lawful, does not disrupt our systems, does not harass our staff or other individuals, and to enforce our legal rights and to comply with our legal obligations. 

Where we reasonably believe you are or may be in breach of the law (for instance, because content you send amounts to harassment or is defamatory), we may use your personal data to inform relevant third parties such as your email/internet provider or law enforcement agencies about the content. 

Where we process personal data in this way, we will hold that personal data on our systems for as long as is reasonably necessary to achieve these objectives. 

4. Do we share your information? 

We keep your information confidential, but may disclose it to our personnel or subcontractors insofar as it is reasonably necessary for the purposes set out in this Policy. If we provide your personal data to third parties, we shall only do so provided that they do not make independent use of the information and provide the same confidential treatment as we do. We only permit them to process your personal data for specified purposes and in accordance with our instructions. All our third-party service providers are required to take appropriate security measures to protect your personal data. 

In addition, we may disclose your personal data to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention). 

If we are involved in a merger, acquisition, or sale of all or a portion of our charity or assets, the personal data we hold may be included as part of that sale, in which case you will be notified via email, your account and/or a prominent notice on the website of any changes in ownership or use of your information, as well as any choices you may have regarding that information. Except as provided above, we will not provide your information to third parties. 

5. Your rights in relation to your personal data which we process. 

You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay, and within one month at the latest, in response to any requests submitted by you to us: 

To make a request in relation to any of the aforementioned rights, please send your requests to inspire@beder.org.uk  

6. Children 

We do not use the website to knowingly solicit information from or market to children under the age of 13. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us at inspire@beder.org.uk.  We will delete such information within a reasonable time. 

7. Security 

We will take appropriate technical and organizational measures to ensure a level of security appropriate to the risk that could be encountered via the use of our website and Services taking into account the likelihood and severity those risks might pose to the rights and freedoms of our website visitors and customers. 

In particular, we will take precautions to protect against the accidental or unlawful destruction, loss or alteration, and unauthorized disclosure of or access to the personal data transmitted, stored or otherwise processed by us. Please be aware that, while we make the security of our website and your personal data a high priority and devote considerable time and resources to maintain robust IT security, no security system can prevent all security breaches. When you choose to share your personal data with us, you accept the aforesaid and provide your information at your own risk. 

8. International Data Transfers 

We are an English and Welsh charity and our servers are located in the EEA and the information that we collect directly from you will be stored in these servers. 

There are agreements in place to ensure that personal data is processed using appropriate safeguards that meet the requirements of data protection laws. Such appropriate safeguards may include standard data protection clauses adopted by a data protection regulator and approved by the European Commission, such as the European Commission’s standard contractual clauses. 

If you would like to find out more about these safeguards or if you have any other queries or comments in relation to this Policy, please let us know by emailing us at [Insert email address]. To find out more about the standard contractual clauses, please visit: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en 

9. Retention Periods or Criteria 

We will hold your personal data for as long as is necessary for the relevant purpose for which that personal data was obtained, or as otherwise described in this Policy. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. If you would like us to stop using or holding your personal data and/or would like to request its deletion, please email us at inspire@beder.org.uk 

10. Changes 

This Policy may be updated from time to time. We will notify you of any changes by posting the new Policy here www.beder.org.uk/privacy-policy and, where feasible, by letting you know by email or your account. 

11. Contact Us 

Questions, comments and requests in relation to this Policy are welcome and should be addressed to razzak@beder.org.uk 

Last Updated: September 2020

BEDER & MEELA PRIVACY POLICY

In this policy, you’ll find important information about your personal rights to privacy, and how and why we use your personal information.

It’s up to you whether you choose to give us your personal information. But if you don’t, we may not be able to give you a complete service.

In this Privacy Policy, “Beder” means Beder (registered charity in England & Wales (1187475), whose registered offices are at 42 Northway, Morden, SM4 4HF.

OUR PROMISE TO KEEP YOUR INFORMATION SAFE

At Beder, we’re committed to protecting your privacy. We promise to respect any personal information you share with us (or that we receive from other organisations) at all times, and we promise to keep it safe.

HOW WE PROCESS YOUR DATA

This policy sets out how we process your data. It also explains your rights and options around how we use your personal information.

WE COLLECT INFORMATION ABOUT YOU:

…WHEN YOU GIVE IT TO US DIRECTLY

This might be when you

…WHEN YOU GIVE IT TO US INDIRECTLY

This is when your personal information is given to us by third parties. These might be:

You’ll always hear from them when this happens, and you’ll be told how and why we intend to use that information.

You might tell us through a third-party website (such as the London Landmarks Half Marathon) that you’d like to fundraise for Beder by taking part in an event.

When this happens, we’ll contact you by phone or email to check how you’d like to hear from us in the future, and to offer you support with your fundraising efforts.

…WHEN IT’S AVAILABLE PUBLICLY

Some information about you may be in the public domain, using public registers such as Companies House, the electoral roll and press reports. For example:

We may collect personal information to conduct supporter research and this is on occasion through our existing network. We may also analyse information you provide to us with other freely available public information to create a profile of supporter interests, preferences and level of potential donations so that we can contact you in the most appropriate way and with the most relevant information (for more information about this use, see How will you combine and analyse the information we collect about you?)

…WHEN YOU VISIT THIS WEBSITE

When you visit this website, we automatically collect the following personal information:

technical information, including:

We collect and use your personal information by using cookies on our website – please see our Cookie Policy.

WHAT IS PERSONAL INFORMATION?

We collect, store and use the following kinds of personal information:

WHAT IS SENSITIVE PERSONAL INFORMATION (SPECIAL CATEGORY DATA)?

The General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018 (“DPA18”) recognises certain categories of personal information as sensitive and therefore requiring more protection.

For example, this includes information about your health, religious beliefs, ethnicity and political opinions.

In the course of providing support to individuals, Beder may process sensitive personal data. In other limited cases, we may collect and/or use your sensitive personal information.

In each case, we will only do so if we have a valid reason and the GDPR/DPA18 permits it, as described in how and why we will we use your personal information.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use your personal information to:

HOW CREATING A RECORD FOR YOU HELPS US TO BE MORE RELEVANT

We may use your personal information to create a record of your interests and preferences.

This means we can make our contact with you more relevant, timely and appropriate.

It also helps us understand the background of our supporters to help us make sure that what we’re asking is appropriate.

HOW WE COMBINE AND ANALYSE THE INFORMATION WE COLLECT ABOUT YOU

Before contacting you, we may use data analysis to interpret your data and predict how likely you are to be interested in or responsive to a particular campaign or fundraising message. Where we have identified that you have the capacity and/or affinity to support Beder at a higher level, we may collect additional information about you (see How we use your information) and combine, analyse and compile that information into a profile of you in order to assist us in engaging with you in a more personalised way.

We typically look at and combine information published in the media but other commonly used publicly available sources including company resources, the Electoral Register and any data you choose to make public on LinkedIn such as your professional memberships and networks. We may also use any publicly available data that you share on social media. We may use additional information such as geographical information for measures of affluence where available. In order to do this efficiently, we may use trusted third-party specialist companies that collate and analyse information from public registers alongside statistical social-economic data to automate some of this work. This helps us to understand more about your interests and level of potential engagement or donation.

You can opt out of your data being combined and analysed for marketing purposes by contacting our team, whose details may be found at the end of this privacy notice.

Please note that before seeking or accepting major donations we are required to conduct a minimum level of due diligence. This is in accordance with our legal and regulatory obligations and our internal risk management policies and procedures. This means that if you opt out of analysis of your data, we may still conduct some analysis that is required to enable us to accept donations from you.

MARKETING TO YOU AND TALKING ABOUT FUNDRAISING

We use your details to give you information about our work, events, services and/or products which we think might interest you.

For example, we might contact you about goods or services you’ve purchased or used in the past, or send you updates about our fundraising appeals, volunteering opportunities and latest campaigns.

Where we do this via email, SMS or phone (if you are registered with the telephone preference service), we’ll only do this with your prior consent.

DONATIONS AND OTHER PAYMENTS

When you use our secure online donation or payment pages, you’ll be directed to a specialist supplier company, who will receive your credit card number and contact information to process the transaction. We don’t retain your credit or debit card details.

CHILDREN’S INFORMATION

Where we capture children’s data online, we’ll seek parental consent for any children under 13. We won’t actively market to under 18s.

HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

In general, if we no longer need your information for the reasons you gave it to us, we remove your personal information from our records six years after the date it was collected.

But we’ll remove it sooner if:

WHAT HAPPENS IF YOU ASK FOR YOUR DATA TO BE REMOVED?

If you ask to receive no further contact from us, we’ll keep some basic information about you to make sure we don’t send you unwanted materials in the future.

EXCEPTIONS

Please note that special rules apply to health records, which may often be kept for longer than six years.

OUR LAWFUL GROUNDS FOR PROCESSING YOUR INFORMATION

The GDPR/DPA18 requires us to rely on one or more lawful grounds to process your personal information. These are the grounds we think are relevant:

WHAT DO WE MEAN BY “LEGITIMATE INTERESTS”?

The GDPR/DPA18 allows us to collect and process your personal information if it is reasonably necessary to achieve our or others’ legitimate interests, as long as that processing is fair, balanced and does not unduly impact your rights.

BEDER’S LEGITIMATE INTERESTS

In broad terms, our “legitimate interests” means running Beder as a charitable entity in pursuit of our aims and ideals. For example, by:

YOUR LEGITIMATE INTERESTS

“Legitimate interests” can also include your interests, such as when you have requested information or certain goods or services from us, and those of third parties (for example, beneficiaries of our work and services).

HOW DO WE BALANCE THESE INTERESTS?

When we legitimately process your personal information in this way, we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws.

We won’t use your personal information for activities where our interests are overridden by the impact on you. For example, where use would be excessively intrusive (unless, for instance, we are otherwise required or permitted to by law).

PROCESSING SENSITIVE PERSONAL DATA

The GDPR/DPA18 prohibits the processing of sensitive personal data (special category data) unless additional conditions are met.

We think the following conditions are relevant, in each case in accordance with the relevant safeguards:

WILL WE SHARE YOUR PERSONAL INFORMATION?

We never share, sell or rent your information to third parties for marketing purposes.

However, in general we may disclose your personal information to selected third parties in order to achieve the other purposes set out in this policy.

These may include (among others):

In particular, we reserve the right to disclose your personal information to third parties:

SECURITY, STORAGE AND ACCESS TO YOUR PERSONAL INFORMATION

We promise to keep your personal information safe and secure.

We have appropriate and proportionate security policies and organisational and technical measures in place to help us do this. For example, we require specialist suppliers who process secure payments to comply with the Payment Card Industry Data Security Standard (“PCI DSS”) standards.

WHO CAN SEE MY PERSONAL INFORMATION?

Only appropriately trained staff, volunteers and contractors can access your information. It is stored on secure servers with features to prevent unauthorised access.

WHERE IS MY PERSONAL INFORMATION STORED?

In general, the personal information that we collect from you will be stored at a destination within the UK.

However, we use agencies and suppliers to process personal information on our behalf.

Your personal information may therefore be transferred or stored outside, and/or otherwise processed by contractors operating outside, the UK who work for us or for one of our suppliers.

Please note that some countries outside of the UK have a lower standard of protection for personal information, including lower security requirements and fewer rights for individuals.

Where your personal information is transferred, stored and/or otherwise processed outside the UK, we’ll take all reasonable steps necessary to make sure the recipient implements appropriate safeguards (such as by entering into standard contractual clauses) designed to protect your personal information and to ensure that your personal information is treated securely and in accordance with this Policy.

Unfortunately, no transmission of your personal information over the internet can be guaranteed to be 100% secure.

YOUR RIGHTS

These are your rights in relation to how we process your personal information:

Right to be Informed

You have the right to be told how your personal information will be used. This policy and other policies and statements used on this website and in our communications provide you with a clear and transparent description of how your personal information may be used.

Right of Access

You can write to us to ask for confirmation of what information we hold on you and to request a copy of that information.

Provided we are satisfied that you are entitled to see the information requested and we’ve successfully confirmed your identity, we’ll give you your personal information (subject to any exceptions that apply).

Right of Erasure

You have the right to ask us to delete your personal information, and we’ll do this when you ask us to. In many cases, we’ll check to see if you’re happy for us to make it anonymous first, rather than delete it completely.

Right of Rectification

If you believe our records of your personal information are inaccurate, you have the right to ask us to update those records.

You can also ask us to check the personal information that we hold about you if you are unsure whether it is up to date.

Right to Restrict Processing

You have the right to ask us to restrict the processing of your personal information if there is disagreement about its accuracy or legitimate usage.

Right to Object

You have the right to object to processing where we are:

Where we rely on your consent to use your personal information, you have the right to withdraw that consent at any time.

This includes the right to ask us to stop using your personal information for marketing or fundraising by electronic means (for example to be unsubscribed from our email newsletter list).

Right to Data Portability

Where we are processing your personal information:

Rights Related to Automated Decision-Making

Where we take automated decisions (i.e. with no human involvement) in relation to your personal information, you have the right to ask us for human intervention or to challenge any such decision.

HOW TO EXERCISE YOUR RIGHTS

To exercise any of these rights, please send a description of the personal information in question using the contact details below. We reserve the right to ask for:

Please note that you may only use/benefit from some of these rights in limited circumstances. For more information, we suggest that you consult guidance from the Information Commissioner’s Office (“ICO”) or please contact us.

You have the right to make a complaint to the ICO about us or the way we have processed your personal information. Find further information on how to exercise this right or contact them.

CHANGES TO THIS NOTICE

We may update this Policy from time to time so please check back periodically. We will notify you of significant changes by placing a notice on our website. This Policy was last updated in May 2023.

LINKS AND THIRD PARTIES

We link our website directly to other sites. This Policy does not cover external websites and we are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external websites you visit via links on our website.

When you make a donation through Text to Donate, your donation will be managed by your network provider in accordance with their terms and conditions and privacy policy. For more information on our Text to Donate subscription service, please see the mobile Terms and Conditions.

HOW TO CONTACT US

If you are a supporter, you can find contact details here: inspire@beder.org.uk

If you would like more information about how we keep data safe and secure, you can find more information here.

If you would like more information about this policy, your privacy or the way that Beder processes your personal information, please contact us here:  inspire@beder.org.uk