Privacy & Cookies

Privacy policy

 

Bowel Cancer UK and Beating Bowel Cancer is the UK’s leading bowel cancer charity. We are determined to save lives, improve the quality of life and support all those affected by bowel cancer. We enable and fund research, provide information and support to patients and their families, educate the public and professionals about the disease and campaign for early diagnosis and best treatment and care for all.

 

We take great care to preserve your privacy and safeguard any personal details you share with us. We aim to be clear when we collect your data and not do anything you wouldn’t reasonably expect. This Policy explains how we collect and use your personal information. Examples of your personal information would include your name, address and email address.

 

By understanding more about you and what you want from us, we are able to make sure that the experience you have of helping us is both positive and rewarding. Your personal information can help us to plan more effectively and efficiently so that we are in the best position possible to save lives and improve the quality of life for all those affected by bowel cancer.

 

We have now moved to an ‘opt-in only’ marketing policy. This means that we will only communicate with those that have explicitly stated that they are happy for us to do so via their preferred channel (s) (email, text, phone or post) and for their preferred areas of interest (fundraising, research, policy and campaigns and improving people’s understanding of bowel cancer).

 

We are totally committed to protecting your information and using it responsibly. Please read our policy carefully to understand how we collect, use and store your information.

 

The processing of your information is carried out by or on behalf of Bowel Cancer UK trading as Beating Bowel Cancer.
Bowel Cancer UK is a registered charity in England and Wales (1071038), Scotland (SC040914) and a registered company in England and Wales (3409832).

Contacting us:

If you have any questions about this privacy policy and how we use your information you can contact us by writing to us at:

Data Protection
Bowel Cancer UK
Willcox House
140-148 Borough High Street
London
SE1 1LB

Or by emailing us at dataprotection@bowelcanceruk.org.uk or by calling us on 0207 940 1760.

WHY WE USE YOUR INFORMATION

We will only use your information where we have a legal basis to do so and will always respect your rights.
Where we use your information, it may be because you have consented to us doing so or because we consider we have a legitimate interest to do so. Where we do rely on a legitimate interest to use your information, we will always ensure that this is done in a way so as not to be intrusive or cause distress, and that respects your rights. Other reasons may include using information because we have a legal obligation to do so or because we have to fulfil contractual obligations.
Some examples are shown below:

  • You have given us your consent to use the information for a specified purpose, such as sending you health promotion materials.
  • We have a legal obligation to use your information, for example to claim Gift Aid.
  • We need to use your information to fulfil a contract with you, but this is unlikely to apply to you if you support us through donations or volunteering
  • We are using your information in pursuit of a legitimate interest, for example:
    • To ensure we meet our regulatory requirements as a charity
    • To manage our financial transactions and prevent fraud

HOW WE USE YOUR INFORMATION TO MEET YOUR REQUESTS AND SUPPORT YOU

To respond to or deal with any requests, complaints or queries you make to us

 

If you contact us directly, we will use the information you give to us to handle your enquiry or request. This may include responding to your query or feedback, or sending you relevant information, such as health information or fundraising materials. We may also keep a record of conversations we have with you, feedback you provide and any marketing materials we send out to you. This can help us to handle queries more efficiently.

 

We may contact you again in the future if we feel there is something that is of legitimate interest and that it would be fair and reasonable to do so based on our previous interactions and you have not already opted out.
You can let us know if you want to change this by following the process as shown in the section below called ‘To manage your contact preferences’.

 

To process donations, claim Gift Aid and maintain a record of your past or potential future financial contributions
This includes keeping a record of any pledges, gift agreements or any other indications that you are planning to donate to us. We have to keep a record of any donations we receive for audit purposes, and we are legally required to maintain Gift Aid information. We may need to use your details to prevent fraud.

 

To provide you with information and support for any events, fundraising and campaigning activities or volunteering opportunities you sign up to

 

If you have completed a form to register or enquire about an event or activity, or to sign up to our campaigns, we will consider this as a request to send you details about the event, activity or campaign.

 

Where you have asked for details of an event, we will send you information including, where relevant, ideas for fundraising and reminders on key information about the activity.

 

Where appropriate, we will use the information you provide to identify any help we can offer, specific to the activity that you have signed up for and to provide necessary information to event organisers. Where this includes information about your health and other sensitive information, we will only use this information if you have consented to us doing so.

 

We may also receive information through event organisers or through third party websites such as JustGiving or VirginMoneyGiving so we know you are fundraising for us.

 

As part of the sign up process, you will also be given the opportunity to consent as to the communications channel (Email, Phone, Post or Text) and to the area of our work that you want to hear about (give or raise money for us, campaign for us, updates on our services and health promotion work or on our research).

 

Where you have taken part in an event and have not opted out to hear from us in the future, we may contact you to hear about a similar event if we think it’s fair and reasonable that you might have a legitimate interest in it.

 

You can let us know if you want to change this by following the process as shown in the section below called ‘To manage your contact preferences’.

 

To manage our recruitment

 

When applying for a role with us by email and / or through a recruitment agency the personal data you provide as part of the recruitment process will only be held and processed for the purpose of the selection processes and in connection with any subsequent employment unless otherwise indicated. By submitting your personal information you are consenting to us holding and using it. You will be asked to provide certain information including your name, contact details, employment history and qualifications. This information is mandatory in order for us to consider your application, communicate with you about your application and where successful, follow up with references or meet our statutory and internal monitoring and reporting responsibilities. We may also review social media profiles of applicants, such as LinkedIn, to the extent that it is relevant to your application. Unsuccessful applicant data will be held confidentially for a period of six months before it is deleted.
If you begin employment with us, we will put together a file about your employment. We keep the information in this file secure, and will only use it for matters that apply directly to your employment.

 

Once you stop working for us, we will keep this file according to our record retention guidelines. You can contact us to find out more about this.

HOW WE USE YOUR INFORMATION TO TELL YOU ABOUT OUR WORK

 

To send you marketing communications by email or text messaging, where you have agreed to receive this

 

Where you have provided an email address or a mobile phone number and consented to being contacted in this way, we will send you information by those channels. This information will then be specific to the areas of the charity’s work that you have asked to hear about. This could cover ways to give or raise money for us, to campaign for us, updates on our services and health promotion work or on our research.

 

By providing your email address, you will automatically receive our monthly newsletter providing updates on all that the charity does.

 

To contact you by phone and post

 

Where it is appropriate and relevant, and you have provided us with a postal address and agreed we can contact you, we will occasionally write to you with information. As above, this information will then be specific to the areas of the charity’s work that you have asked to hear about. This could cover ways to give or raise money for us, to campaign for us, updates on our services and health promotion work or on our research.

 

By providing your postal address and agreeing to contact, you will also automatically receive our newsletter providing updates on all the work that the charity does.

 

We do not currently contact supporters by phone for marketing purposes but we may decide to do so in the future. Depending on the length of time that has elapsed since providing your original consent we may need to write to ask you to re-consent. When and if we do we will not contact you by phone for marketing purposes if your number is registered with the Telephone Preference Service, unless you have agreed to receive calls from us.

 

To manage your contact preferences

 

If at any point you would like to opt-out of receiving communications from us, or would like to change the ways (such as email or post) that we use to contact you, please contact our Data Protection representative, Simon Hawkins at admin@bowelcanceruk.org.uk or write to him at Data Protection, Bowel Cancer UK, Willcox House, 140-148 Borough High Street, London SE1 1LB.

 

We will keep a record of any requests to stop receiving marketing from us to ensure that we do not communicate with you in the future, unless you tell us you want to hear from us again.

 

To make sure we speak to you in a way that is relevant to you, and to understand our supporters more broadly

 

We try to ensure that our communications are as effective as possible so that we make the best use of the money we spend on them. This means communicating with people in different ways, appropriate to them.

WHAT DO WE DO IF YOU CHOOSE TO TELL US ABOUT YOUR EXPERIENCE OF BOWEL CANCER

 

Where you have provided information about your experience of bowel cancer, including through a survey, focus group, questionnaire, or when we are talking to you by phone or email, we will explain what the information will be used for and whether it will be held anonymously or not. If the information will be held in a way that could be connected to you personally, we will ask your permission to store and use what you tell us.

 

We will use this information for the purposes explained to you at the time of its collection. For example, to better understand the issues that are important to our supporters which helps shape our communications and activities.

 

Where you provide more detailed information we may want to use this in our communications including PR and media activity, digital and social media, campaigning, fundraising materials and internal communications, to help us raise awareness of bowel cancer, bowel cancer research and the issues effecting patients. We would never use your story without obtaining your consent first. If a suitable opportunity arises for us to use the information you have given us we will contact you to discuss the use of your story in further detail.

 

Where you have given appropriate consent, we will use information to better support you in an activity you are doing for us; or to ensure that we do not send you any communications or ask you to take part in any activity that would not be appropriate.

SHARING YOUR INFORMATION WITH OTHER ORGANISATIONS

 

We will never share your information with third parties for their own purposes, unless this is explained to you at the time we collect your information, you give us your permission to, or we are legally required to do so. For example, we are legally required to provide your data to HMRC if you have agreed to us claiming Gift Aid on your behalf.

 

We also use suppliers known as ‘data processors’ to process data on our behalf, for example to send out mailings. When enlisting the services of such suppliers we ensure that they are under a contractual obligation to only use your information in accordance with our instructions and for no other purposes.

TRANSFERRING YOUR INFORMATION OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)

 

Sometimes organisations who work on our behalf may manage information outside the EEA. In those circumstances, we will make sure that we have a valid reason for doing so under current Data Protection legislation and that all of your personal data is protected to UK standards.

 

HOW LONG WE KEEP YOUR INFORMATION

 

As a general rule, we will hold your information for a period of up to seven years from the end of your relationship with the charity in accordance with our data retention policy. In some circumstances, this will be shorter. For example, information related to unsuccessful job applications is destroyed after six months. In some circumstances, this will be longer, for example, pension information of former employees. If you would like to know how long we hold any specific information, then please contact us and we can provide further details.

PAYMENT CARD INFORMATION

If you use your credit or debit card to donate to us, buy something or pay to register your place at an event online or over the phone, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard. You can find out more information about PCI DSS here.

 

This is the international standard for safe card payment processes. Our online payment solutions are carried out using a ‘payment gateway’ which is a direct connection to a payment service provided by a bank. This means that when you input card data into the payment page, you are communicating directly with the bank and the bank passes your payment to us. This means that your payment card information is handled by the bank and not processed or held by us.

 

Following the completion of your transaction, we do not store your credit or debit card details. All card details and validation codes are securely destroyed once the payment or donation has been processed. Only staff authorised and trained to process payments will be able to see your card details.

 

If we receive an email containing any credit or debit card details, it will be immediately deleted, no payment will be taken and you will be notified about this. All purchases or donations should be completed through the donation page or shop on our website (bowelcanceruk.org.uk).

 

We use either SagePay or Paypal as our payment gateways and you can find out more about them here (https://www.sagepay.co.uk/policies/security-policy) and (https://www.paypal.com/uk/webapps/mpp/paypal-safety-and-security)

COOKIES

Like most websites, we use “cookies” to help us make our site – and the way you use it – better. Cookies mean that a website will remember you. They’re small text files that sites transfer to your computer (or phone or tablet). They make interacting with a website faster and easier – for example by automatically filling your name and address in text fields.

 

LINKS TO THIRD PARTY WEBSITES

 

This Privacy Policy applies solely to the personal information collected by us and does not apply to third party websites.
We are not responsible for the privacy policies of third party websites. We advise users to read the privacy policies of other websites before registering any personal information.

YOUR RIGHTS

Under the General Data Protection Regulations (GDPR) you have the following rights:

  • The right to be informed – the right to receive the information contained in this policy and our data collection forms about how we process your personal data.
  • The right of access – the right to know that we are processing your personal data and, in most circumstances, to have a copy of the personal data of yours that we hold. You can also ask for certain other details such as what purpose we process your data for and how long we hold it. This can be provided for free by contacting the address shown below. The information will be made available within one month of receipt of your request.
  • The right to rectification – You have the right to request that we correct inaccurate data or complete incomplete data that we hold on you. You can make this request either by phone to 0207 940 1760 or by email or contacting the address shown below. These changes will be made within one month of receipt of your request.
  • The right to erasure – Known as the right to be forgotten. In certain circumstances you may request that we erase your personal data held by us. You can make this request either by phone to 0207 940 1760 or by email or contacting the address shown below. These changes will be made within one month of receipt of your request.
  • The right to restrict processing – You have the right to restrict the way we process your personal data in certain circumstances, e.g. if: you contest the accuracy of the data, if our processing is unlawful, to pursue legal claims, where we are relying on legitimate interests to process data. This will not affect our ability to store the data but it means that we cannot use it. You can make this request either by phone to 0207 940 1760 or by email or contacting the address shown below. These changes will be made within one month of receipt of your request.
  • The right to object – You have the right to object to us processing your data for (i) direct marketing purposes (ii) scientific or historical research or statistical purposes or (iii) based on our legitimate interests or on the performance of a task in the public interest. You can make this request either by phone to 0207 940 1760 or by email or contacting the address shown below. These changes will be made within one month of receipt of your request.

 

Where relevant, please send a description of the information you want to see by:

email to: dataprotection@bowelcanceruk.org.uk
post to: Supporter Services, Bowel Cancer UK, Willcox House, 140-148 Borough High Street, London SE1 1LB.

 

Where the request relates to the right of access, we do not accept these requests by email so we can ensure that we only provide personal information to the right person and we will require proof of identity before processing.

 

In certain circumstances (e.g. where required or permitted by law) we might not be able to provide you with access to some of your personal information, but where appropriate we will notify you of the reasons for this.

 

If you have any questions please send these to admin@bowelcanceruk.org.uk, and for further information see the Information Commissioner’s guidance here.

 

Right to Withdraw Consent at any time

 

By giving us your personal information, you consent to us collecting and using that information in the ways that we describe in this privacy policy and / or that you have specifically consented to. Where we need your consent, we will always ensure that you are as fully informed as possible at the time on what we do with your information, with which it may be shared and how long we will keep it. This is in line with the requirements of the current Data Protection Act and other relevant legislation. You can update this by following the process outlined in the section above called ‘To manage your contact preferences’.

 

Where you have for example:

  • Attended a study day / health promotion event
  • Ordered services publications through Bowel Cancer Awareness Month (BCAM)
  • Taken part in a fundraising event
  • Donated to a fundraising appeal

 

we will use a legal basis for processing called Legitimate Interests. This is where we assume that given that you have taken part in an event or donated to an appeal, you would want to hear about the same or similar events and appeals in the future unless you have already opted out of hearing from us. Using this basis alone will only allow us to contact you about this type of event or appeal.

 

You can tell us that you don’t want to receive any such communications by following the process outlined in the section above called ‘To manage your contact preferences’.

COMPLAINTS

 

If you have any complaints about how we handle your personal data, please contact us so we can resolve the issue, where possible. Read more about how to make a complaint. You also have the right to lodge a complaint about any use of your information with the Information Commissioners Office, the UK data protection regulator. Where you have a complaint about the way in which we have used your personal information in our fundraising, you can also complain to the Fundraising Regulator.

 

HOW WE KEEP YOUR INFORMATION SECURE

 

We take such measures as are appropriate to ensure the confidentiality, integrity and availability of systems, which are regularly independently tested and reviewed.

 

We hold your personal information in accordance with the security provisions of the UK Data Protection legislation. We use industry standard Secure Server Software (SSL) for your transactions with us. It encrypts all of your personal information, including credit card number, name, and address, so that it cannot be read as the information travels over the Internet.

 

If you have any questions about security please contact us on 020 7940 1760.

 

CHANGES TO THE PRIVACY POLICY

 

We may update this policy to reflect changes in how we use your information. You may wish to check this policy each time you provide us with your information. Where appropriate, we will provide you with notice of any significant changes in the way we treat personal information by sending a notice to the primary email address you have provided to us or by placing a prominent notice on our website. By continuing to use our website you will be deemed to have accepted such changes.