Christian Aid is committed to protecting your data and your privacy. We aim to ensure that any information you give us is held securely and safely.
Please read this policy carefully, along with our Terms and conditions and any other documents referred to in this policy, to understand how we collect, use and store your personal information.
Christian Aid (Registered Charity 1105851/SC039150) operates a wholly owned trading subsidiary, Christian Aid Trading Ltd (Registered Company Number 01001742), which supports the efficient fundraising and income-generation activities of the charity, and whose activities are also covered by this policy.
Christian Aid holds and processes personal details in accordance with the Data Protection Act 1998 and is registered with the Information Commissioner. Christian Aid Trading Ltd, our trading arm, is also registered with the Information Commissioner.
If you have any questions about this policy or how your data is handled, please write to:
The Data Protection Officer
PO Box 100
Telephone: 0207 523 2041 (during office hours, Monday to Friday, voicemail available for messages outside these hours)
Our Data Protection Officer is William Denton.
Christian Aid takes data protection very seriously.
As you use our website, get in touch with us, or take part in our campaigns and activities, we collect information. This deepens our understanding of what you are interested in and helps us to improve the quality and relevance of all of our communications with supporters.
Christian Aid and its subsidiary will never share your information with another organisation for their own marketing purposes and we will never sell your information for any reason whatsoever. We know that this is important and want to reassure you that you are always in control of how we use your personal information in regard to marketing and fundraising activities.
We do however need to collect and use your personal information for carefully considered and legitimate business purposes, which will help to ensure that we can run Christian Aid efficiently, raise funds effectively and deliver our charitable programmes around the world.
This policy will set out what data we collect, how we will use it, what the legal basis for this is, and outline what your rights are in respect of your personal data.
The main reason we will use your personal information will be to help us effectively carry out our charitable activities, through your involvement in our campaigns and events or to help us raise funds to carry out our work around the globe.
We will always endeavour to be clear, honest and transparent with you whenever we collect and use your personal data. The overview below summarises the different reasons why we may collect and use your data. We may not use your personal information for all of these purposes, it will depend on the nature of your relationship with us, and how you interact with Christian Aid as an organisation:
- Fundraising, campaigning and marketing: Like all major charities, we have a range of fundraising and marketing activities that are designed to raise income or promote the aims and objectives of the charity. We use a range of marketing activities and channels such as direct marketing and face-to-face activity, advertising (print, broadcast and digital) and public relations for marketing, fundraising, and income generation. This may include talking to you about specific disaster appeals, promoting ongoing campaigns in which you can play an active role, competitions, commercial trading activities, sponsorships, events or volunteering opportunities. We may also ask if you are able and prepared to Gift Aid any of your donations.
- Delivery of core charitable services: Delivery of our core charitable activities may require the recording of our beneficiaries' contact details, their eligibility for our charitable services, records of financial transactions and communications. We may also need to use your personal information for the prevention of fraud and to identify any misuse or abuse of our services.
- Management of volunteers: If you are one of our valued volunteers we may need to use your personal information to manage your volunteering activities, deliver training, involve and update you on our projects and campaigns and to ensure your safety. This may include sending you newsletters or information about our fundraising appeals so that you are best equipped to perform your role and advise the public about our work.
- Retail trading: Through the Present Aid website Christian Aid offers individuals the chance to purchase a range of ethical gifts. If you interact with this service, we may use your personal information for the marketing of similar products to you in future. We will also use your information to process the purchase of any items and for the recovery of Gift Aid, where you have completed a Gift Aid declaration.
- Analysis, targeting and segmentation: In order to fund our vital work responding to emergencies and providing aid to people around the globe, we have to communicate our aims and objectives and ask people for financial support. Efficiency is very important to us, as we value every single donation. Therefore, we only want to send communications that are genuinely interesting and relevant to you. We will make use of information you have given us and your interactions with our services, to help us predict your interests and tailor and personalise our communications in the future. This may also involve the use of focus groups in order to understand our supporters better.
- Research: We may collect data in order to carry out research on our supporter base. This is in order to improve our communications and ensure that we understand how best to interact with our valued supporters. The primary way in which we do this is through the Closer Panel. Information we gather from individuals as part of this process is kept separately from our marketing database and is only used for research purposes.
- Profiling: In some limited circumstances we may combine the personal information you have given us with information available in the public domain to create a profile of your interests and preferences where they are relevant to your potential engagement with Christian Aid. Information collected for these purposes may include information about your corporate directorships, shareholdings, published biographical information, employment, philanthropic interests and networks, charitable giving and relevant media coverage. We do this to help us understand the ways in which our supporters can support our work sooner, and more cost effectively. The use of publicly available sources helps us determine what support we should ask you for and helps us engage you in activities that are relevant to your areas of interest and influence. We may gather information about you from publicly available sources such as Companies House, the electoral register and the media to help us understand more about you as an individual and your ability to support Christian Aid. You can opt-out of your personal information being used for profiling or analysis by contacting firstname.lastname@example.org
- Due diligence research: Christian Aid’s trustees have a duty to ensure that there is no reputational or financial risk to accepting a donation or other kind of support. We may therefore use publicly available sources to carry out due diligence on you to ensure that we are fundraising within the law. For more information on the circumstances this may apply in and the type of information required please visit the Charity Commission.
- Staff administration: Christian Aid employs a number of staff both in the UK and abroad, who are crucial to both delivering our programmes and raising the funds to provide our charitable services as well as providing a range of professional and technical support. We process the personal information of our employees for recruitment, staff administration, remuneration, pensions and performance management purposes.
Christian Aid, like all organisations in the UK, needs a lawful basis to collect and use your personal data. The law allows for six legitimate purposes which organisations can rely on to legally process people’s personal data. Of these, only three are relevant to charities for the type of activities listed above:
- Information is processed on the basis of an individual’s consent.
- Information is processed in line with a contractual relationship.
- Information is processed on it being a legitimate interest for Christian Aid to do so.
We may also share your personal information when we are compelled to do so by a legal authority acting in compliance with the law.
Christian Aid will always ask for your consent to send you marketing by email, SMS and Whatsapp. We will also ask you for your consent before contacting you by telephone for the purpose of marketing.
Should we ever ask you to provide any sensitive personal data about yourself, for example any health condition that may be relevant if you are taking part in a Christian Aid event, we will always seek your explicit consent to process this data.
Where you give us consent to process your data we will always keep a clear record of how and when this consent was obtained, and you can withdraw this consent for all channels and activities at any time by contacting our supporter care team on email@example.com or on 020 7620 4444.
The vast majority of relationships with our supporters and beneficiaries are voluntary and not contractual. This purpose primarily relates to how we process the data that we hold in relation to our staff, and in some circumstances, our volunteers.
The law allows personal data to be legally collected and used by an organisation if it is necessary for a legitimate business interest of the organisation - as long as its use is fair and balanced and does not unduly impact the rights of the individual concerned.
There are times when it is just not practical to ask a person for consent. In many situations, the best approach for Christian Aid and our supporters, beneficiaries, and volunteers is to process personal data because of our legitimate interests, rather than consent.
If you want to change our use of your personal data for marketing and fundraising activities, you can do so at any time by contacting our supporter care team on firstname.lastname@example.org or on 020 7620 4444.
What are Christian Aid’s legitimate interests?
- Delivery of our charitable purposes as set out in our amended charitable objects (November 2007).
- Transfers between Christian Aid and our wholly-owned subsidiary Christian Aid Trading Ltd.
- Reporting criminal acts and compliance with the legal instructions of law enforcement agencies.
- Internal and external audit for financial or regulatory compliance purpose.
- Statutory reporting.
Publicity and income generation:
- Conventional direct marketing by direct mail and other forms or marketing, publicity or advertisement.
- Unsolicited commercial or non-commercial messages, including campaigns, income generation or charitable fundraising.
- Unsolicited communications to Churches and other organisations, for example schools, with whom we work closely in order to publicise our appeals and campaigns.
- Personalisation to tailor and enhance the supporter experience in our digital and postal communications.
- Exercise of the right to freedom of expression or information, including in media and the arts.
- Analysis, targeting and segmentation to develop fundraising strategy and improve communication efficiency.
- Processing for research purposes.
- Profiling, including the use of publicly available information.
- Employee and volunteer recording and monitoring for recruitment, safety, performance management or workforce planning purposes.
- Provision and administration of staff benefits such as pensions.
- Physical security, IT and network security.
- Maintenance of suppression lists.
- Processing for historical, research or statistical purposes.
Financial management and control
- Processing of financial transactions and maintaining financial controls.
- Prevention of fraud, misuse of services, or money laundering.
- Enforcement of legal claims.
Purely administrative purposes
- Responding to any solicited enquiry from any of our stakeholders.
- Delivery of requested products, resources or information packs.
- Administration of direct debits and other existing financial transactions.
- Administration of Gift Aid.
- Providing 'thank you' communications and receipts.
- Maintaining 'do not contact' lists
When we use your personal information, we will always consider if it is fair and balanced to do so and whether it would be within your reasonable expectations that we would use your data in this way.
We will balance your rights and our legitimate interests to ensure that the way in which we use your data never goes beyond what you would expect and is not unduly intrusive or unfair.
What information we collect
We collect and use personal information such as names and address details, as well as other contact information such as email addresses and telephone numbers. We also collect information about the services you use on our website, any purchases or financial transactions you make and any marketing preferences you give.
We maintain a record of communications that we send to you, and will also log any communications that you send to us. In some limited cases we may collect some publicly available information about you, including company directorships, and your interests. If you attend a Christian Aid event it is possible that your photograph may be taken. If you call our supporter care team, your call may be recorded for quality and training purposes.
If you have made a donation to Christian Aid and kindly agreed to Gift Aid that donation we must record the fact that you are a UK tax payer and we have to maintain a record of the amount of Gift Aid we have collected.
Sensitive personal information
Under data protection law, certain categories of personal information are recognised as sensitive, including health information, race, religious beliefs, and political opinions (‘sensitive personal data’). In limited cases, we may collect sensitive personal data about you.
We would only collect sensitive personal data if there is a clear reason for doing so, as outlined earlier in this policy, such as where we need this information to ensure that we provide appropriate facilities or enable you to participate in an athletic event (such as a marathon, where we would need prior knowledge of any relevant medical conditions).
We will only use sensitive information provided to us for the purpose it is provided.
Credit and debit card information
If you use your credit or debit card to donate to us, or buy something online, we pass your card details securely to our payment-processing partner as part of the payment process. We do this in accordance with the Payment Card Industry Security Standard and don’t store the details on our website or databases.
Where does this information come from?
The vast majority of personal data we hold is given to us directly by our supporters, customers, beneficiaries and volunteers in the course of them interacting with our services, websites, or fundraising activities. We may also receive your personal information when you donate to Christian Aid through third party services such as Just Giving, Virgin Money Giving, or BT Donate.
We may occasionally use third party organisations to provide us with further details of individuals who have expressed an interest in Christian Aid and have agreed to receive communications from Christian Aid.
In some situations we may update our supporters, clients and volunteers personal information using other agencies; for example, to check we have a valid and deliverable postal address, or to check if you are on the telephone preference service or fundraising preference service.
Christian Aid removes personal data from our systems in line with our data retention policy. The length of time each category of data will be retained will vary on how long we need to process it, the reason it is collected, and in line with any statutory requirements.
After this point the data will either be deleted or rendered anonymous. In certain specific situations, for example where a supporter has kindly pledged a legacy to Christian Aid in their will, we will maintain their details up to the time when we need to carry out the legacy administration and communicate effectively with their family.
As mentioned above, Christian Aid will never sell your personal information and will never share it with another organisation for their own marketing purposes. However, there are a number of legitimate situations where we may share your information with third parties whom we have contracted to fulfil specific services for us.
This will include organisations such as mail fulfilment houses and email broadcasters who will send out our marketing materials on our behalf. In all of these situations we ensure that we always have a written contractual agreement in place that will ensure that those organisations can only use the data provided for the specific purposes we direct them to do, and that they have in place strict security requirements in order to protect your personal information.
Your data protection rights
Where Christian Aid is using your personal information on the basis of your consent, you have the right to withdraw that consent at any time. You also have the right to ask Christian Aid to stop using your personal information for direct marketing purposes. Simply contact our supporter care team on email@example.com or on 020 7620 4444 and they will amend your contact preferences. The law also gives you a number of other rights in relation to your personal data:
Right to be Informed: You have the right to be told how your personal information will be used. This policy document, and shorter summary statements used on our communications, are intended to be a clear and transparent description of how your data may be used.
Right of Access: You can write to the Data Protection Officer asking what information we hold on you and to request a copy of that information. Currently the Data Protection Act 1998 gives us 40 days to respond. From May 2018 we will have 30 days to comply once we are satisfied you have rights to see the requested records and we have successfully confirmed your identity.
Right of erasure: From May 2018, you have the right to be forgotten (i.e. to have your personally identifiable data deleted). In many cases we would recommend that we suppress you from future communications, rather than data deletion.
Right of rectification: If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated.
Right to restrict processing: In certain situations you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
Right to data portability: Where we are processing your personal data under your consent the law allows you to request data portability from one service provider to another. This right is largely seen as a way for people to transfer their personal data from one service provider to a competitor and is unlikely to be relevant to your relationship with Christian Aid.
Right to object: You have an absolute right to stop the processing of your personal data for direct marketing purposes.
Right to object to automated decisions: In a situation where a data controller is using your personal data in a computerised model or algorithm to make decisions 'that have a legal effect on you', you have the right to object. This right is more applicable to mortgage or finance situations. Christian Aid does not undertake complex computerised decision making that produces legal effects.
We maintain a high level of physical and electronic security in relation to the collection, storage and disclosure of your information. We take reasonable steps to ensure that any information we hold about you is protected. We use Secure Socket Layer (SSL) software, which encrypts information given over the internet to protect all personal data as soon as it is possible.
The software scrambles data transmitted between your computer and our server, where it is unscrambled securely. While we make every reasonable effort to ensure that information sent to us is done so securely, we cannot warrant the security of information transmitted to us through the internet. When you transmit information to us via the internet, you do so at your own risk.
Use of IP addressesWe collect IP addresses to obtain aggregate information on the use of this website. An IP address is a number assigned to your computer by a web server when you're on the web. When you are on our site, we have a server that logs your computer's IP address. We only use the information we find out from tracking IP addresses in the aggregate, such as how many users entered a specific area of our site, and not to track a specific IP address to identify an individual user.
Changes to Christian Aid's privacy statementFrom time to time, we will make changes to this statement to keep it up to date and relevant. Please make sure you check regularly to see what's changed. This statement was last updated on 18 December 2017.
What to do if you are not happy?
In the first instance, please talk to us directly so we can help resolve any problem or query. Our friendly Supporter Care team can help, or you can contact our data protection officer by emailing firstname.lastname@example.org You can also register with the fundraising preference service (FPS).
This service is run by the Fundraising Regulator and allows you to stop email, telephone, addressed post, and/or text messages from a selected charity or charities by using the online service at fundraisingpreference.org.uk or by calling 0300 303 3517. Once you have made a request through the FPS, we will ensure that your new preferences take effect within 28 days.
You can also contact the Fundraising Regulator directly to complain by using the online complaints form on their website. You also have the right to contact the Information Commissioners Office (ICO) if you have any concerns about Data Protection using their help line 0303 123 1113 or at ico.org.uk