We are committed to protecting your privacy, and promise to respect your personal information and do all we can to keep it safe
We aim to be clear about how we obtain your details and only process them in ways we believe you would reasonably expect.
This includes not selling or sharing personal details with third parties for the purpose of their marketing.
We also aim to communicate with you respectfully, effectively and efficiently.
Our forms give clear choices and we include information on how to change your communication preferences whenever we contact you.
This helps us send you news of our work only if you have explicitly stated you are happy for us to do so in ways that are most convenient to you (email, SMS, phone, post).
How we collect information about you
When you give it to us directly including
When you contact Mildmay to make a donation, register to receive news about our work, or you telephone, email, write to or text Mildmay, engage with Mildmay via social media channels, sign up for one of our events, or order our resources online.
When you attend a meeting or an event, fill out a questionnaire, or have a conversation with us and provide us with information about yourself.
When you give to us indirectly
When other organisations have permissions to share or it is available publicly
In addition to the details you give us, we may seek further information about you that is publicly available from external sources. We use this to gain a better understanding of our supporters to enable us to update you about our work and how you can get involved In the most appropriate ways.
The information we get from your other organisation may depend on your privacy settings or the responses and permissions you give, so you should check them regularly.
This information comes from the following sources
Depending on your settings or the privacy policies for social media and messaging services like Facebook, Twitter or Instagram, we might have permission to access information about you.
Other information that is available publicly
This may include information found in publicly available sources such as Companies House, LinkedIn, the Charity Commission, companies, grant-making trusts and government websites, biographical directories and information that has been published in reputable media.
When we collect information as you use our website
Like most websites, we use ‘cookies' to help us make our site, and the way you use it, better. Cookies are small text files that sites transfer to your device (computer, phone or tablet) and make interacting with a website faster and easier – for example, by automatically filling in your address and email address in text fields.
Mildmay may store information about you and your activity in cookies. If you want to delete any cookies that are already on your computer, please refer to the instructions for your web browser to locate the file or directory that stores cookies.
If you wish to restrict or block web browser cookies that are set on your device, you can do this through your browser settings, the help function within your browser should tell you how.
Alternatively, you may wish to visit www.aboutcookies.org, which contains comprehensive information on how to do this on a wide variety of desktop browsers.
What personal information we might collect from you
If you support Mildmay – make a donation; sign up to receive news of our work, volunteer, take part in an event:
Your contact details, including postal address, email, telephone numbers, along with your preferences as to which of these we should use to contact you in the future
Your date of birth
Bank account details if you make a regular donation by direct debit or standing order
Debit or credit card details used to donate to us – this could be online, over the phone or by mail. We will process your information securely and in accordance with Payment Card Industry Standards. Your details are only used to complete the transaction requested, we do not store your debit or credit card details. If you have provided them physically they are securely destroyed once your donation or payment has completed.
Your gift aid status
Your position within an organisation or charitable trust (if relevant)
How we use this information
The information we gather helps us to send you what you want when you want it and send updates and information about our work.
It also helps us to shape our fundraising activities to ensure our communication is relevant and timely.
We will use your personal information to:
Provide you with the information, resources you have requested
Keep you up to date with the work you are supporting and to ask for financial and non-financial support.
Administer your donation, including processing Gift Aid
Ensure we know you prefer to be contacted
Keep a record of your correspondence, donations history, questions you have asked us, or comments you have made.
Understand how we can improve our services, and the resources or information we send out.
Contact you in your capacity as a representative of an organisation such as a business, church or charitable trust.
Ensure that potentially vulnerable people are treated appropriately practically with regard to financial giving and legacies.
If you have made a substantial gift to our work, we may contact you to thank you and to discuss how you might want to develop your interest in our work. This would be to include having a discussion with you about the methods of contact most suitable for you.
We never sell or share personal details to third parties for the purpose of their marketing.
Since April 2018, we process any new supporters’ data based on the consent you have given us.
Protecting your personal information
The security of your information is very important to us. We ensure that there are appropriate controls and procedures in place to protect your personal details. For example, information you submit on a physical form or when filling out online forms is encrypted and stored on a secure server. We also use encryption and secure servers when you make a donation via our website.
However, despite all the security and protection we put in place, the internet cannot guarantee to be 100% secure. Therefore, you submit data at your own risk.
We undertake regular reviews of who has access to information we hold to ensure that your details are only accessible by appropriately trained and authorised staff.
Your information may occasionally be passed to service providers that perform function on our behalf, such as sending postal mail and email or analysing data. These companies may use your information to perform these functions and may not use it for other purposes. We carry out comprehensive checks on these companies before work with them and put a contract in place that sets out our expectations and requirements, especially regarding how they manage the personal data they have collected or to which function for which it has been transferred has been carried out.
If required, we may need to disclose your details to the police, regulatory bodies or legal advisors.
Due to the nature of servers and cloud-based storage all over the world, this may mean that, during the processing of your data, it leaves the European Economic Area (EEA) Although they may not be subject to the same data protection laws s in the UK, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. By submitting your personnel information, you are agreeing to this potential transfer, storing or processing at a location outside the EEA.
We will only ever share your data in other circumstances if we have your explicit, informed and unambiguous consent.
Keeping your information up to date
When possible, we use publicly available sources to keep records up to date and accurate. We also take appropriate measures to ensure that information is only kept for as long as is necessary and only for the purpose for which it was given. We will also only use it when regulations permit us to do so.
However, we would really appreciate it if you let us know if your contact or personal details change, as this gives us consent to use the updated information and continue to communicate with you.
How long we will keep your information for
We will hold your personal information on our systems for as long as is necessary to carry out the activity relevant to your interaction with us.
We will keep a record of any donation you have made for at least seven years.
Legacy gifts are vital to Mildmay's work. We may keep information provided by you or your solicitor indefinitely, both to administer the gifts and to communicate to the families of people leaving legacies.
If you ask us to cease communications with you, we will keep a record of your contact details and appropriate information to enable us to comply with your request.
Right of Access
You have the right to ask for a copy of the information we hold about you. If there are any discrepancies in the details we provide, please let us know and we will correct them.
If you want to access your information, send a description of the information you want to see and proof of your identity by post to The Data Protection Officer at the address below.
We are unable to accept these requests by email so that we can ensure that we only provide personal information to the right person.
Changes to this notice
We may change this Privacy Notice from time to time. If we make any significant changes in the way we treat your personal information, we will make this clear on the Mildmay website(s).
If you have any questions, comments or suggestions about this notice, please contact:
The Data Protection Officer
19 Tabernacle Gardens
London, E2 7DZ