Introduction and General Terms
unitedmedhelp is committed to safeguarding your personal data and protecting any personal information we obtain, whether you are a financial supporter, shopper, volunteer, or campaigner. This Privacy Policy outlines how and why we collect, use, and protect personal information when you interact with us in these roles. If you engage with us in other capacities, such as enrolling in specific programs, applying for jobs, or as a member of staff, separate Privacy Policies may apply.
Who We Are
unitedmedhelp is a registered charity in England and Wales (charity number 1153499) with its registered 57 Wensleydale Avenue Ilford IG5 0NB. This Privacy Policy pertains to information obtained by unitedmedhelp, for which the foundation acts as the Data Controller.
unitedmedhelp’s Purpose
unitedmedhelp aims to end the injustice of poverty by providing humanitarian aid during crises, funding long-term community development programs, conducting research, and campaigning for sustainable solutions to poverty. Our supporters help achieve this mission through fundraising, donating money or goods, purchasing items from our shops, campaigning for change, and volunteering in various capacities. We actively inform supporters about how they can contribute to achieving our mission.
Why We Hold and Process Personal Data
We hold and process supporters’ personal data for several purposes, such as recording donations and communications, sending marketing information about our projects and appeals (with consent or legal allowance), supporting volunteers, recording campaigning actions, enabling community-based fundraising, claiming Gift Aid on donations, fulfilling contractual obligations (e.g., online purchases), ensuring safety at events or shops, complying with legal obligations, and managing organizational needs. We also ensure that we respect preferences to not receive unwanted information.
Explaining the Legal Bases We Rely On
Under GDPR, there are several legal bases for collecting and processing personal data. unitedmedhelp primarily relies on consent and legitimate interest for its activities.
Consent: Wherever possible, we seek your consent to send marketing information, clearly outlining what you will receive and allowing you to select preferred communication channels (e.g., email, SMS, post, or telephone). For example, if you donate online to an emergency appeal, we will ask whether you wish to stay updated on our projects and activities.
Legitimate Interest: In some cases, we process your data to pursue our legitimate interests in ways that are reasonable and do not infringe on your rights or freedoms. This includes sending postal marketing updates about our work, emailing customers of our online shop about related offers, using data to provide relevant content via social media, analyzing past support to offer future opportunities, and reaching out to businesses for corporate partnerships.
For activities beyond marketing, we may rely on legal compliance to process data. For instance, if you sign up for Gift Aid, we process your information to submit claims to HMRC. These legal bases ensure that all data processing is carried out transparently and responsibly while respecting your preferences and rights.
Consent, Legitimate Interest, and Data Protection Policy
At unitedmedhelp, we are committed to safeguarding and respecting your privacy. This policy outlines how we collect, use, and protect your personal data, as well as your rights regarding this data.
Consent and Legitimate Interest
We may ask for your consent when you engage with our campaigns or programs. Your consent is important, and we give you clear choices on the information you provide. In certain cases, we rely on legitimate interest, such as fulfilling tasks related to your participation in our programs, ensuring public interest (e.g., monitoring equality and diversity), or safeguarding individuals in our care. We may use your data to help us communicate with you more effectively, personalize your experience, and provide relevant updates.
Marketing Communications
We will only send you personalized marketing communications if we have obtained your consent or if we are permitted to do so under applicable laws. When you support us, we will provide clear options on how you would like to receive information (e.g., by post, email, SMS, or phone). You may opt out of marketing communications at any time, and we will honor your preferences. If you consent to receive marketing, this will generally last for up to 24 months, after which we will request refreshed consent. For those making regular donations or leaving legacy gifts, consent may be extended unless revoked by you.
Data Collection and Use
We collect personal data directly from you when you make a donation, volunteer, or participate in an event, and sometimes indirectly when you interact with third-party platforms. The information we collect may include, but is not limited to, your name, contact details, donation history, and any other data necessary for providing our services. In certain situations, we may also collect sensitive data, such as health information, where necessary for participation in events or background checks for volunteers.
Cookies and Tracking Technologies
We use cookies and similar technologies to collect data about how you use our website and services. This allows us to enhance your experience and offer tailored communications. You have the option to control your cookie preferences and opt-out of non-essential cookies.
Data Security
Your privacy and data security are a top priority. We employ a range of security measures, including encryption and restricted access to personal data, to protect your information. Personal data may be shared with trusted third-party service providers, but they are only authorized to use it in accordance with our instructions and for specific services. We will never sell or share your data for marketing purposes without your explicit consent.
Data Retention and Transfers
We retain personal data for as long as it is necessary for the purposes outlined in this policy or as required by law, typically for a period of up to seven years for donation records. Your personal data may be transferred to countries outside the European Economic Area (EEA), but we will ensure that appropriate safeguards are in place to protect your privacy.
Your Rights
You have various rights regarding your personal data, including the right to access, update, or delete your data, and the right to withdraw consent at any time. You also have the right to object to or restrict the processing of your data. If you wish to exercise any of these rights or update your preferences, please contact us at info@unitedmedhelp.org.uk or by mail at:
unitedmedhelp
57 Wensleydale Avenue
Ilford
IG5 0NB
Here’s an updated section with the additional points you requested, neatly formatted:
Opting Out of Direct Marketing
You have the right to stop the use of your personal data for direct marketing activities, through all channels or selected channels. We will always comply with your request.
Where we send direct marketing based on our legitimate interest, you may request us to stop. In the case of postal marketing sent on this basis, we will always honor your request to opt out. Similarly, where we send email marketing on a soft opt-in basis (as described in the “How and When We Collect Information About You” section), we will also comply with all requests to opt out.
Right to Be Forgotten
You have the right to request the deletion of your personal data from our systems, to the extent that we are permitted to do so by law or regulatory guidelines. For example, under HMRC rules, we are required to retain financial data for a period of seven years for audit purposes. Therefore, we will not be able to delete donation details until this retention period has elapsed.
Opting Out of Profiling
Upon request, we will cease using your personal data for profiling purposes, such as determining whether you might be interested in particular updates or other marketing materials. Please note that such a request may lead to you no longer receiving marketing communications or updates from us in the future.
Subject Access Requests
You have the right to request a copy of the personal information we hold about you. We will provide this information as soon as possible, and within one month, unless there are specific reasons why this would not be feasible. If any delays are expected, we will inform you promptly.
Checking Your Identity
To ensure the confidentiality and security of your information, we may ask you to verify your identity before processing any requests made under this Privacy Notice.
If you have authorized a third party to submit a request on your behalf, we will ask them to provide proof of your permission to act on your behalf