1. Privacy and Data Protection Statement
CRIBS International respects the privacy of the data that we use to inform you of fundraising initiatives and update you on our activities and achievements. This statement explains how we store and process the data that we collect about you.
2. Data Controller
CRIBS International is comprised of a UK Charitable Incorporated Organisation, registration number 1173021, with an associated Company registered in England and Wales, registration number 10644387.
CRIBS International’s website is www.cribsinternational.org. The society may be contacted by emailing cribsinternational@gmail.com, or by writing to the CRIBS International, 55 Den Lane, Springhead, Oldham, OL4 4NN.
3. The Data that we Store
CRIBS International and its data processors holds only data that you have provided to us through contributing to our funds or expressly indicating a desire to hear about our activities and achievements.
(a) the contact details that you have provided, consisting of name, address, telephone number(s), and email address(es).
(b) the dates and amounts of past donations, together with whether or not they were eligible for Gift Aid.
(c) Signed Gift Aid declarations.
4. How we Store the Data
(a) Electronic records
Electronic records of past donations are held by three of our data processors:
-PayPal
-BT MyDonate
-GoFundMe
-Stripe
Electronic confirmation that you would like to be updated about our activities and achievements are held by our emailing data processor:
MailChimp
Further information on our data processors can be found in Section 8 of this Privacy Statement.
(b) Paper records
Some of our records, such Gift Aid authorities, are also retained in paper format and are held securely by a volunteer who manages our GiftAid claims to HMRC.
We may need to keep this paper-based information for a period of up to seven years after the end of the financial year in which the transaction occurred so that we can respond to any enquiries from HMRC about our income or applications for Gift Aid.
5. How we process your data
We use the data in our and your legitimate interests to inform you of fundraising initiatives and update you on our activities and achievements. You may opt out of these communications at any time, either by using the links provided in the emails, or by a separate request to us.
We also use your data to fulfil our legal obligations in connection with recovering Gift Aid funds from HMRC.
6. We do not share your data
CRIBS International does not share any of its supporter data with any other individuals or organisations, other than to fulfil your specific instructions or to deliver the specific functions set out under Third Party Data Controllers below.
Examples of fulfilling your specific instructions include sharing your GiftAid declarations to HMRC if they require us to.
When you contact us, we will keep your information confidential and only disclose it to those with an express need to know. We will not pass your contact details to any third party unless you request us to do so.
7. Website Cookies
We do not set any cookies for public usage of CRIBS International’s website. Nor do we collect information about you through your use of CRIBS International’s website. The only information we receive is that which you expressly send us or our data controllers, for example by donating to us or signing up to receive emails.
8. Third Party Data Controllers
We use third parties as data processors for processing donations, and for managing the emails that we send to update you, our supporters. Where we use data processors we provide them with only the minimum information they need to act on our behalf to fulfil the specific function required.
(a) Processing donations: For processing donations, we use PayPal, BT MyDonate, GoFundMe, and Stripe. Each of these organisations provides statements that they are compliant with UK and EU privacy law.
BT MyDonate: https://www.btplc.com/mydonate/aboutmydonate/Privacypolicy/
PayPal: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
GoFundMe: https://www.gofundme.com/privacy
Stripe: https://stripe.com/gb/privacy
Third party advertising cookies are used by other parties to customise advertising presented to you on other websites. They are known as marketing cookies. Under GDPR, your consent to receive these must be confirmed by an affirmative action.
BT MyDonate is fully GDPR compliant and does not set any marketing cookies.
PayPal currently assumes opt-in to marketing cookies. To opt out of these, please visit https://www.paypal.com/myaccount/profile/flow/cookies/
Both GoFundMe and Stripe require Third Party Cookies to be enabled to opt out of marketing cookies. We currently only use GoFundMe and Stripe where there is no alternative.
(b) Update emails: To inform you of fundraising initiatives and update you on our activities and achievements we use MailChimp (incorporated in Atlanta GA, USA).
The only information that we provide to MailChimp is a list of names and email addresses. No other information is provided to them.
MailChimp uses single pixel gifs, also called web beacons, in emails that they send to you on our behalf. We use the data from these to confirm that these emails are relevant to you, our supporters. We only use this information at an aggregate level.
To unsubscribe from these emails, you will be directed to a MailChimp web page. This will set cookies that are used to compile reports in an anonymous form to help MailChimp improve their website. These cookies are not shared with other parties or used for advertising.
You can also unsubscribe from these emails by sending cribsinternational@gmail.com an email with the subject line “Unsubscribe from Update Emails”. To do that, please click here.
You can find MailChimp’s Privacy statement here:
https://mailchimp.com/legal/privacy/
In this statement, emails that we send using MailChimp to you, our supporters, come under Section 3, Privacy for Contacts.
9. Your Rights
Under GDPR, you have the following rights:
-The right to be informed
-The right of access
-The right to rectification
-The right to erasure
-The right to restrict processing
-The right to data portability
-The right to object
-Rights in relation to automated decision making and profiling.
You can find out details of what these rights cover and how to exercise them here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights
If you have a complaint or a query, please raise it with us first by emailing us: cribsinternational@gmail.com.
If appropriate, you can contact the regulator, the Information Commissioner via their website https://ico.org.uk/for-the-public/.
10. Privacy and Data Protection Statement Version
This Privacy Statement is dated 25 May 2018. CRIBS International reserves the right to update it from time to time. If we make substantive changes that impact you, we will inform you by email.