Without data our work to support refugees simply could not operate, so we are hugely grateful to you – our supporters, staff, volunteers and partners – for entrusting us with your personal data to help make our fundraising and advocacy possible.
We take your privacy very seriously and this policy outlines how we ensure all personal data is handled securely, safely and in a way that is consistent with our obligations and your legal rights.
Whether you are a supporter, donor, volunteer or staff member, this Privacy Notice refers to all individuals as “you” for convenience.
If you can’t find the information you are looking for, please don’t hesitate to contact our Supporter Care team who are ready to assist. You can find our contact details below.
Who we are
United Kingdom for UNHCR is dedicated to raising funds and awareness to help protect forcibly displaced people around the world. The funds we raise support the humanitarian work of the United Nations High Commissioner for Refugees (UNHCR).
United Kingdom for UNHCR is a charitable incorporated organisation with its principal office in England at WeWork, 131 Finsbury Pavement, London EC2A 1NT.
We are regulated by the Charity Commission (England and Wales) and our charity registration number is 1183415. We are also an approved member of the Fundraising Regulator and signatory to its code of conduct, as well as a member of the Institute of Fundraising.
What is “personal data”?
In technical terms, personal data is any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier.
In simpler terms, personal data is any information about you that enables you to be identified.
Personal data covers obvious information, such as your name and contact details, but it also covers less obvious information, such as identification numbers, electronic location data, and other online identifiers.
Without collecting data, our charitable activities would not be able to operate. At the same time, we ensure that any personal data we collect is protected and remains private.
What type of personal data do you collect?
To support our fundraising and UNHCR’s humanitarian work, there are several categories of personal data we need to collect:
- Identity data: such as your title, name, surname, date of birth
- Contact data: such as your phone number, postal address, email address
- Financial data: such as credit card details, bank account numbers, UK tax payer status
- Technical data: such as cookies and how you use our website
- Marketing data: such as your personal preference on how you would like us to contact you
- Other necessary data: such as data legally required from our employees and volunteers, such as proof of right to work, or emergency contact details
How does UK for UNHCR use my data?
We only use your personal data where we have a legal basis for doing so. For example, where you have given us your consent or we have a legitimate interest in using personal data to support our work to raise funds for UNHCR’s humanitarian work and advocate for the refugee cause. How we use your data depends on the purpose for which you provide it to us. For example:
- To accept and process your requests to make one-off or regular donations
- To manage Gift Aid in line with your donation
- To keep you updated on how your donations have been used
- To update you on UNHCR’s work around the world, our appeals and our advocacy for the refugee cause
- To respond to requests you make of us, such as updating your personal details, contact preferences or requests for information about our work
- To let you know about our events and send you details when you have registered to attend
- To maintain your details if you have registered an interest in leaving a legacy gift to support UNHCR’s work
- To maintain your personal contact details if you represent a trust, foundation, corporate or any other organisation in communication or partnership with us
- To respond promptly to any feedback or complaints
- To manage job applications and our staff and volunteers, including payroll, training and development
- To manage and improve our website by analysing how you use it, when you have consented to relevant cookies
- To let you know about opportunities to feed back on our work and your support, such as surveys and research you may wish to contribute to
- To maintain our records and ensure your details and contact preferences remain up to date
- To deliver online advertising that is in line with your interests, such as emergency appeals, and in line with your preferences.
You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the UK data protection legislation and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.
We will only use your personal data for the purpose for which it was originally collected unless we reasonably believe that another purpose is compatible with that. If we do use your personal data in this way and you wish us to explain how the new purpose is compatible, please contact our Supporter Care team and we are happy to assist.
If we need to use your personal data for any purpose that is unrelated to, or incompatible with, the original purpose, we will inform you and explain the legal basis for this.
How do you collect personal data?
We collect personal data only with your consent and use it for the purpose for which you provide it. You are free to withdraw that consent at any time. You can manage your preferences by contacting our Supporter Care team.
For example, we receive your personal data when you:
- Make a donation and provide your personal details, eg by phone, post, online or in person
- Subscribe to receive our communications, such as our newsletters
- Participate in our community fundraising programme, including third party fundraising platforms such as JustGiving
- RSVP to invitations to attend events we organise
- Visit our website
- Interact with our social media channels, such as engaging with posts or leaving comments
- Contact our Supporter Care team or submit forms on our website with requests for information or assistance
- Apply for job vacancies with our charity, whether paid or voluntary
We may also collect personal information about you that is legally and publicly available, such as from company websites, social media accounts or public registers (eg Charity Commission) or the Post Office’s National Change of Address database to help keep our records up to date.
Sharing data with third parties
As a charity, we also rely on external suppliers to help deliver our work. These organisations process personal data on our behalf, such as delivering communications, publicising our appeals and helping to process donations. Examples include payment platforms, mailing houses and our Supporter Care helpline.
We have strict measures in place to ensure our suppliers operate the required safeguards to ensure your personal data is protected and treated in accordance with the law. This includes contractual obligations and stringent data protection requirements.
In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
How long will you keep my personal data?
The exact length depends on the purpose for which you provided your personal data, but our general guiding principle is to hold your data for the period required for that purpose. For example, to keep you informed of our work, keep a record of legacy wishes or to process donations.
If you apply for a job with us, we will always seek your permission before keeping your details on record.
There are also legal requirements that our charity is required to comply with, such as retaining Gift Aid details for no less than six years after the most recent donation.
If you have a specific query about how long your data will be kept, please don’t hesitate to contact our Supporter Care team who will be happy to assist.
How is personal data stored?
The security of your personal data is our priority. To protect your data, we take a number of important measures, including the following:
- limiting access to your personal data to those employees, volunteers and third parties with a legitimate need to know, and ensuring that they are subject to duties of confidentiality and GDPR regulations
- holding data only in secure environments and using secure methods for any data transfers required to deliver our services
- procedures for dealing with data breaches (the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, your personal data) including notifying you and/or the Information Commissioner’s Office where we are legally required to do so;
We do not directly store any credit or debit card details taken for online donations. Any such payment data is handled securely by our payment processing providers who meet the required Payment Card Industry (PCI) Security Standards.
In almost all instances, we will only store or transfer your personal data within the European Economic Area (the “EEA”). This means that your personal data will be fully protected under the data protection legislation or to equivalent standards by law. In some exceptions, your data may transfer outside of the EEA, such as when you click on website links with UNHCR’s global website. UNHCR’s global website has its own privacy and cookie policies, which you can view here.
For further information about the particular data protection mechanisms we use when transferring your personal data please contact our Supporter Care team.
What are my rights?
Under the data protection legislation, you have the following rights, which we will always work to uphold. These include your right to:
- be informed about how we process your personal data
- access and be given a copy of the personal data we hold about you
- require us to correct any personal data that we hold about you if any of it is inaccurate or incomplete
- be forgotten: in certain circumstances you have a right to have your personal data erased from our records
- restrict (i.e. prevent) the processing of your personal data
- object to the way we process your personal data (e.g. for direct marketing)
- withdraw consent: if we are relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time
- data portability: the right in certain circumstances to have us transfer your personal data to another organisation
- not be subject to a decision based solely on automated processing (including profiling) which produces legal effects on you. We do not use your personal data in this way.
It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed if you would like it updated.
If you wish to make a complaint about our use of your personal data, please contact our Supporter Care team and we will assist you. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office.
How can I access my personal data?
If you want to know what personal data we hold about you, you can ask us for a copy of it. This is known as a subject access request (“SAR”).
Please contact our Supporter Care team to request an SAR form and they can support you through the process.
We will aim to respond to your SAR within 28 days. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
How do I contact you?
Our Supporter Care team is on hand to help answer any questions or provide further information. You can get in touch via the follow methods:
Phone: +44 203 950 4011
Post: UK for UNHCR, WeWork, 131 Finsbury Pavement, London EC2A 1NT.
Changes to this Privacy Notice
We may change this Privacy Notice from time to time. Please visit this page to keep up to date. Our last update was in October 2020.