This policy was last updated: 23rd May 2018
deafPLUS takes your privacy very seriously and we want you to understand clearly how we use the Personal Information we collect about you. We are a “data controller”. This means that we are responsible for deciding how we hold and use Personal Information about you, and for explaining this clearly to you. When you share information with us, we will always tell you how we will use it depending on how and why we are collecting the information.
We always act on your instructions and we aim to put you in control of your relationship with us. Our aim is to communicate and work with you in a way that makes you want to stay involved with us for as long as possible, as you see the value and impact of your relationship with us.
We will not share your data for others’ marketing purposes
Please be assured that you will not receive offers from other companies or organisations as a result of giving your details to us. We will not sell, rent or lease any Personal Information we collect to any third parties.
How to stop or change how we communicate with you
If at any time you wish to stop or change how we communicate with you, or update the information we hold, please do get in touch. We will provide you with contact details or you can use the details at the bottom of this policy.
deafPLUS takes your privacy very seriously and we want you to understand clearly how we use the Personal Information we collect about you. When you share information with us, we will always tell you how we will use it depending on how and why we are collecting the information.
What we collect, why we collect it and how we use it
The type of Personal Information we collect will depend on why you are providing it and how we are using it – for example if you are making a donation, purchasing a product or service (eg training), asking about volunteering opportunities or receiving support from us.
As an organisation we collect and use Personal Information for a variety of reasons and in a variety of ways, depending on the activity you are taking part in when you share the information.
When we collect Personal Information, we will always explain clearly what information we are collecting, why we are collecting it and how we will use it.
If you do not provide us with your Personal Information, we may not be able to provide you with any of our services.
We will always make sure we have a lawful basis for processing your Personal Information. For more information on the lawful bases to process your Personal Information click here.
If you receive a communication from us that mentions our “Legitimate Interest”, then please be assured you are still in control of how we use your Personal Information. “Legitimate Interest” is one of the lawful bases we can rely on to process your Personal Information, and when we use this basis we have to consider your privacy rights and whether these outweigh our legitimate interests. You can easily stop or change how we use your Personal Information, and we will explain how you can contact us to do so. Click here to find out more about what we mean by Legitimate Interests.
We may obtain your information in the following ways:
Directly from you
If you give us your information directly for any reason – such as making a donation, becoming a member or volunteer, purchasing a product or requesting support from us, we will ensure you are given all the important information about how we will use and look after your information at the time.
When you visit our website
When you access deafPLUS’s Social Media
We might also obtain your Personal Information through your use of social media such as Facebook, Twitter or LinkedIn, depending on your settings or the privacy policies of these social media and messaging services. To change your settings on these services, please refer to their privacy notices, which will tell you how to do this.
When the information is publicly available
We might also obtain personal data about individuals who may be interested in giving major gifts to charities or organisations like deafPLUS. In this scenario, we may seek to find out more about these individuals, their interests and motivations for giving through publicly available information. This information may include newspaper (eg Sunday Times Rich List) or other media coverage, open postings on social media sites such as LinkedIn, and data from Companies House. This is a form of profiling (see below) to build up a picture of donors. We will not retain publicly available data relating to major donors without informing them, which will be done at the earliest practical opportunity.
Profiling and Automated Decision making
Profiling is any form of automated processing of personal data to build up a picture of a person, in particular to analyse or predict aspects about that person’s economic situation, personal preferences or interests. We may use the information we hold about you based on your interactions with us in order to build our relationship with you, offer you the right help or information and personalise things we offer to you.
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. We will always inform you if we are processing your information in this way.
Who we share your information with
We do not sell, rent or lease the Personal Information we collect to any third parties.
Depending on why you provided us with your Personal Information and how we are using it, we may need to share your information with other organisations or individuals, such as those that provide services on our behalf (e.g. printing and delivery of mailings, delivery of products, information on your support or communication needs to a hospital if you are admitted).
We will only provide these organisations and individuals with the Personal Information necessary to fulfil the purpose for which it was provided.
We have systems and processes in place to ensure your Personal Information is maintained confidentially and securely and that it is used only for purposes for which it was provided.
Depending on why you provided us with your Personal Information and how we are using it, we may need to transfer your information outside the EEA, (for example some of systems we use to hold Personal Information may be provided by an organisation that stores the data on computer systems held outside the EEA). Although the country may not be subject to the same data protection laws as companies based in the UK, we will endeavour to make sure they provide an adequate level of protection in accordance with UK data protection law, or ensure that safeguards are put in place to protect your personal information. If you wish to know more about any transfer outside the EEA or the safeguards in place please contact us using the contact details provided or at the bottom of this policy.
We may also need to disclose your Personal Information to another organisation if we are required to do so to meet a legal obligation.
How we keep your Personal Information secure
All Personal Information we hold about you will be kept securely, using a variety of security technologies and organisational procedures to help protect your Personal Information from unauthorised access, use or disclosure.
How long we keep your Personal Information
We will only keep your Personal information for as long as it is required for the purpose we collected it, including if it is needed for any legal, accounting or reporting purposes. We will let you know how long we keep your Personal Information.
Your rights and controlling your Personal Information
You have the right to:
For further information on your rights – click here
If you are unhappy with how we handle your Personal Information, or how we handle any requests you make, please contact our Data Protection Officer using the details below.
If our Data Protection Officer cannot address your concern, you can complain to the Information Commissioner’s Office: or call 0303 123 1113.
Changes to this Policy
Contact our Data Protection Officer
Our Data Protection Officer can be contacted by calling 020 7 790 6147 or writing to Data Protection Officer, deafPLUS, Trinity Centre, Key Close, London E1 4HG.
Data Protection law says that we must have a ‘lawful basis’ to use your Personal Information. There are 5 lawful bases that we might rely on depending on why and how we are using your information, which are described below.
|Lawful Basis||Description||When this is likely to apply|
|Consent||You have given your Consent to the processing of your Personal Information for one or more specific purposes||If you take an action to agree or confirm you are happy with our use of your data – this may be clicking a button, replying to an email, or by providing us with your information.|
|Legitimate Interests||If deafPLUS has a genuine and legitimate purpose to process the Personal Information, unless this is outweighed by harm to your individual’s rights, interests and freedoms.
Click here to find out more about what we mean by Legitimate Interests.
|If we feel we have a “Legitimate Interest” in using your information, as long as this does not unfairly go against what is right and best for you. If we rely on our legitimate interest, we will tell you what that is and you have the right to object.|
|Contractual||Processing of Personal Data is necessary for the performance of a contract with you or to take steps that you request before entering into a contract (e.g. to supply goods or services you have requested).||If we need your Personal Information to provide a service to you, or to provide or deliver a product to you, or for any other contract we may have with you.|
|Legal Obligation||Processing of Personal Data is necessary for deafPLUS to comply with a legal obligation.||If we have to use your Personal Information in a certain way, or share it with another organisation, to comply with the law.|
|Vital Interests||Processing of Personal Data is necessary to protect your vital interests.||If we need to use your Personal Information to protect your life.|
“Legitimate Interests” means the interests of our organisation in achieving our aims. For example, we have an interest in communicating with our supporters to provide information on our work helping those confronting deafness, tinnitus and hearing loss and how to support our life-changing work, including fundraising, campaigning and volunteering.
When we process your Personal Information for our legitimate interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. Our legitimate interests do not automatically override your interests – we will not use your Personal Information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law)
If you have any concerns about the processing of your Personal Information based on our legitimate interests, you have the right to object. For more information on your rights, please click here.
Find out below when you have each of the following rights.
To ask that we delete your Personal Information
To object to our use of your Personal Information
To limit our use of your Personal Information
To request an electronic copy of your Personal Information in a commonly used form e.g. CSV file
If you provided us with your information directly for contractual reasons or consented to how we use it, and the processing is carried out by automated means.
To obtain human involvement, obtain an explanation, input to and challenge the decision
If we are using your information to make a decision which has a legal or similarly significant effect on you and if it is made by solely automated means (including profiling)
Our web site uses a technology known as cookies to store small amounts of data on our visitors’ computers or devices. Cookies are small pieces of text data that can be placed on a visitor’s computer, normally to provide enhanced functionality and/or improved relevancy of information.
We are providing the following information in accordance with the EU Cookie Law. Details of this regulation can be found at the following address: https://ico.org.uk/for-organisations/guide-to-pecr/cookies-and-similar-technologies/
For more information about cookies, visit http://www.aboutcookies.org.
The following cookies are added by the web site itself and have the following purposes.
Cookies named PHPSESSID only contain a reference to a session stored on the web server. No information is stored in the user’s browser and this cookie can only be used by the current web site.
|Cookie Name||Purpose||Example Content||Expires|
|PHPSESSID||To store a simple message when a form is submitted that can be displayed on a different page.
For example, if an enquiry form is completed incorrectly, a message will be stored and presented to the user to indicate the errors in the submission.
When an enquiry form is submitted successfully, a message is stored and presented to the user thanking them for their enquiry.
No personal information is stored in this cookie.
|9f70g2j1n25icp20lcb3g1jbf1||When the user’s browser is closed.|