Terms & ConditionsPrivacy Policy

Information you give us directly

You may give us your personal information directly when:

• you or someone on your behalf, makes a donation;
• you register to participate in an event;
• you communicate with us (by post, email, phone etc.);
• you subscribe to our mailing lists and/or email newsletters;
• a relative provides your name and contact details as an emergency contact, for example when your relative attends an event with us and fills out an emergency contact details form.

Information you give us indirectly

Opportunity may indirectly collect information from you, but only when shared via a third party. These may include:

• Third-party payment processors that process donations for us, for example CAF and Stewardship;
• Independent event organisations, for example fundraising platforms like JustGiving and Virgin Money Giving;
• Survey platforms that we may use, for example TypeForm;
• Processors acting on our behalf who provide us with services, our business partners, advertising networks, analytics companies and search information providers.

In some situations, these third parties will pass your personal data to us – for example, your donation if you are donating via our website – or will help us to process your personal data on our behalf. In the latter instance, these companies will be our data processors.

Please check any and all privacy policies provided to you before you give your data to third parties.

Suppression Services

We collect information from the following third party suppression services:

• The Mail Preference Service (MPS)
• The Telephone Preference Service (TPS)
• The Fundraising Preference Service (FPS)

We use this information to ensure that we do not respectively send unsolicited mail, phone calls and marketing material to people who do not wish to receive it, unless they have given us explicit consent to do so (in spite of being on the above lists).

Website

When you visit our Website, we are able collect different types of personal data that can be used, together with other information, to indirectly identify you.

This includes your IP address, cookie identifiers, time zone setting and location, browser type and version, operating system and the type of platform and device that you are using to access our Website.

Please note that whilst we are able to collect all of this information, we do not currently process and analyse IP addresses within our scope as Controller.

Please see Cookies for more information.

If you donate to us, we may collect, store and use:

• your title, full name and contact details (including postal address, email address and telephone number)
• your bank or credit card details. Please note that if you make a donation online, your card information is not held by us and is collected by our third party payment processors who specialise in the secure online capture and processing of credit/debit card transactions.
• information as to whether you are a qualifying UK taxpayer so that we can claim gift aid.

If you attend an event, we may collect:

• your title, full name, contact details (postal address, email address and/or telephone number);
• information regarding your charitable interests/interests in general;
• your health data (if you choose to share this with us and specifically for the reason of ensuring your safety).
• a photograph and/or video footage of you (with your permission)
• online identifiers
• an emergency contact

If you participate in market research, we may ask you questions regarding your experience with us, or survey questions relating to your experience.

When we communicate with you via any means, we may collect other personal information about you that is shared with us. This includes, for example, your date of birth, gender, marital status, occupation, religion, information regarding your health (if you choose to share this with us) and any other personal information that you provide to us.

Where you have left us a legacy, we will process any information regarding next of kin if you have provided this to us in advance.

When you access Opportunity’s social media sites or interact with us on social media platforms, i.e. Facebook, Twitter, Instagram and LinkedIn, we may obtain information about you. For example, when you publicly tag us in a photo, like a post/tweet or re-share/re-post something that we originally posted, we will receive information like your name and social media handle, dependent upon the private preferences you have set up on these types of platforms.

To view the privacy policies of these sites and/or change your privacy settings, please refer to the appropriate privacy policies below:

Facebook: https://en-gb.facebook.com/policy.php

Twitter: https://twitter.com/en/privacy

LinkedIn: https://www.linkedin.com/legal/privacy-policy

Instagram: https://help.instagram.com/581066165581870

When you access our website, we collect a variety of personal information (mentioned in the previous section of this Policy). Please see below more detailed information about cookies, log files and third-party links.

Cookies

A “cookie” is a small piece of data stored on your computer’s hard drive when you visit our website. Opportunity International uses cookies to analyse our website’s overall traffic patterns and improve our visitors’ online experience. We do not use cookies to store or collect any personal information. Many browsers provide an option to block or remove cookies. You can visit our website successfully while blocking cookies, but leaving cookies enabled in your browser will help us to improve our site’s usability and effectiveness.

Read our full Cookie Policy here.

Log files

Like most standard website servers, we use log files. This includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks to analyse trends, administer the site, track visitor’s movement in the aggregate, and gather broad demographic information for aggregate use. IP addresses are only linked to personally identifiable information when online credit card transactions are conducted (i.e. when publications are purchased or donations made). We do not share individual information gathered though log files with third parties.

Third party links

This Website contains links to other sites, plug-ins and applications. Clicking those links or enabling those connections may allow third parties to collect or share data about you. Please be aware that we have no control over and are not responsible for the contents or privacy practices of such other sites. We encourage our visitors to be aware when they leave our Website and to read the privacy statements of each and every website that collects personally identifiable information. This Policy applies solely to information collected by this Website.

When personal information is publicly available

We supplement information on our supporters, with information from publicly available sources like corporate websites, public social media accounts, Google and Companies House. This allows us to create a better picture/understanding of someone’s interests, giving potential and support. For more information about how we do this, please see Building Profiles.

Sensitive Personal Data

The UK GDPR recognises certain categories of personal information as sensitive. This includes: race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, sex life, sexual orientation and criminal offence data.

During the course of our normal fundraising activities, we do not usually collect sensitive data about you unless there is a clear and valid reason for doing so and data protection laws allow us to do so.

For example, we may ask for your health information if you are taking part in a sporting event with us or, if you volunteer the information, we may record your religion or sexuality etc. if it is of significance and only if you give your consent for us to do so.

In any event, Opportunity will not collect and process any sensitive personal data without the explicit consent of our supporters.

At Opportunity, our life-changing work is only made possible thanks to the kindness and generosity of our supporters. To ensure that our fundraising efforts are as effective as possible, we may analyse the personal information of our current supporters, along with high-net-worth individuals/individuals of interest who have the potential to support our cause.

Profiling is a common technique used in the charity sector that involves analysing the personal information of (potential and current) supporters to create a profile of their philanthropic interests and other interests/preferences. This gives charities a better understanding of who their supporter base is and why they give to them.

At Opportunity, we are looking to understand the (potential) wealth of our supporters, connections that they have and any information that may pose a reputational risk to our organisation.

Once we have this information, we are able to tailor and target our communications in a way that is timely and relevant to you, to include using this information to detect and reduce fraud and credit risk.

When building profiles, we may collect:

• your title, full name and contact details (address, email address, phone number);
• your social media handles;
• your previous responses to marketing information;
• any publicly available criminal offence data (to conduct due diligence);
• views that you have expressed and/or your position(s) on certain issues;
• any other information that is publicly available, for example, your marital status, roles that you have held, geographical and demographical data etc.

We may collect this information in a number of different ways, via:

• search engines, e.g. Google, Bing etc.
• social media sites, e.g. LinkedIn, Facebook, Instagram, Twitter etc.
• (online) newspapers/magazines and news channels, e.g. The Times, BBC
• Companies House
• a referral from a current supporter

For prospective supporters/donors, we collect personal information to decide whether or not to proceed with first contact. After profiling, we aim to contact the prospective donor and follow up with them three times if we have not received a response. If, after that time, we have not heard back, we will remove all personal data collected on the individual, apart from their name and note to say no further response was given. If we have received a negative response, we will record this information.

If we decide not to proceed with first contact with a prospective donor, we will not retain any information, apart from their name and the decision not to proceed.

Opting out of profiling

You have the right to opt out of profiling. If you make this request, we will stop processing your personal information to decide whether you would be interested in receiving certain marketing material. Please note that such requests may mean that you will not hear from us in the future.

We hold and process supporters’ personal data for a number of different reasons:

• Your details
  • to keep your personal details up to date, e.g. your email address etc.; and
  • to keep an internal record of all interactions and communications between Opportunity and our supporters – to document their relationship with us.
• Donations / Gifts
  • to process and keep a record of your donations (‘giving history’);
  • to confirm receipt of your donation(s), unless you have stated otherwise;
  • to say thank you for your gift;
  • to provide details of how your donation might be used;
  • to check donations for the purposes of prevention of fraud and/or other crime; and
  • to claim gift aid on donations
• Marketing & Fundraising
  • to keep you up to date with our work, to let you know of upcoming events and ways in which you can support us;
  • to ensure that we do not send unwanted information to you or members of the public if you have informed us not to do so; and
  • to keep your marketing / communication preferences up to date.
• Market Research
  • to invite you to volunteer to participate in surveys or research about Opportunity or our work
•  Financial / Legal rules
  • we retain home addresses (past and new) for the purposes of claiming gift aid for a minimum of 6 years in line with government rules
  • we retain all financial information for a minimum of 7 years for the purposes of having complete financial records

The UK GDPR sets out six lawful reasons that organisations can rely upon to process and collect personal data of individuals. When engaging in this process, we will always make it clear to you which basis we are relying upon.

Within the course of our fundraising activities, Opportunity relies on the following legal bases:

Consent

Where possible and if the situation permits, we will ask for your explicit consent to use and store your personal information in a certain way. This will only occur in situations where we can offer you genuine choice about how we process your data.

We will always make it clear for what purposes we would like to use your data and make it easy for you to withdraw your consent at any time.

For example, if you sign up to an online event, you will be asked whether you would like to keep updated about our work and, if so, how you would like to us to communicate with you (either by email or post).

Legitimate Interest

In certain situations, we process personal information to pursue our legitimate interests. We ensure that these interests never override the interests or fundamental rights and freedoms of our data subjects and that they might be reasonably expected by individuals.

Reasons include:

• To market our charity – We may process your personal data to send you marketing material in the post. This is always in compliance with e-privacy legislation and you can opt-out of this at any time.
• To send administrative messages - Opportunity processes personal data to send administrative messages to our supporters. This may include; updating our supporters regarding our privacy policy, asking them to update their personal information and to implement any instructions that they may give us e.g. withdrawing their consent for a particular purpose, to update their details, to receive a statement of giving etc.
• To build a picture of past and current events – Opportunity will retain your personal data for one month if you have attended a past event with us. If the relationship continues after the event, we will retain this information beyond a month, but if not, then we will only retain your name and a note stating that you attended the event.
• To build profiles - Processing personal data is necessary to ‘build profiles’ of our current supporters and prospective supporters. See Building Profiles for more information.
• To carry out due diligence/criminal checks - Processing personal data is necessary when we conduct due diligence or when we are carrying out criminal checks. This usually occurs when we are due to receive a large donation from a donor.

Legal Compliance

If the law requires us to do so, we may need to process and store your personal data.

For example, when you enrol onto the HMRC Gift Aid Scheme, we will process your data for the purposes of submitting a Gift Aid claim.

Public Interest/Task

In limited situations, we may use your personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

It is likely to be in the public interest to collect data to prevent crime or dishonesty, ensure that we are fair in our practices by carrying out equality and diversity monitoring, or safeguard the wellbeing of people with whom we work.

If you would like to find out more about the bases that Opportunity relies upon to process your personal data, you can contact us.

Opportunity will hold and keep your personal information on our systems for no longer than is necessary. The length of retention is determined by relevant operational and legal considerations and is in line with the particular processing activity in question. For example, we will keep gift aid forms for a minimum of six years to comply with HMRC rules and regulations.

Legacy income is vital to the running of the charity. We may keep personal data provided to us indefinitely in order to carry out legacy administration and communicate effectivity with the families of people leaving us legacies. This also enables us to identify and analyse the source of legacy income that we receive.

We review our retention period(s) on a regular basis and update our retention policy as and when required.

If you would like to know more about this, please contact us.

Opportunity ensures that there are appropriate organisational and technical measures in place to protect and safeguard your personal data, both physically and electronically. For example, our customer relationship management database is encrypted and password-protected, we implement different levels of security access and two-factor authentication is active on all accounts.

We undertake regular reviews of our security measures and routinely monitor our network.

We have contracts with external companies that may process your personal information on our behalf. These are called ‘Data Processors’. Before we enter into a contract with these companies, we carry out comprehensive checks to ensure that they handle your personal information with care and competence and, importantly, share the same values as us. They also have a legal obligation to safeguard your personal data and are liable to ensure that your data is processed securely.

Please note that our data processors may use sub-processors to process your data on our behalf. They too are held to the same standard.

As a general rule, Opportunity will not disclose any of your personal information, except where we have your permission or under special circumstances, for example, when we believe in good faith that the law requires it.

When you make a donation via our secure online donation page(s), our third-party payment processor will require personal information such as your credit card number and contact information in order to complete the transaction.

Opportunity does not sell or rent user information to anyone. From time to time, we agree with other like-minded organisations to write to some of each other’s supporters, for the mutual benefit of both. Our supporters are given the opportunity to opt in to this arrangement.

As mentioned in the previous section, we employ data processors to process personal information on our behalf. These external companies will only receive personal data that is essential for the completion of their services/activities.

We do not transfer personal data to any third countries or international organisations.

Under UK data protection law, you have certain rights over the personal information that we process and hold on you. Here is a summary of the rights that we think apply:

The right to access

You have the right to confirmation that we process your personal data and the right to request a copy of the personal information that we hold about you. This is known as a Subject Access Request (‘SAR’).

You can make a request in writing, verbally or on social media. If you wish you make a request and require reasonable adjustments, please let us know and we will do our best to suitably adapt the information.

The right to rectification

You have the right to ask us to rectify personal information that you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

The right to erasure (also known as the ‘right to be forgotten’)

You have the right to ask us to erase your personal information in certain circumstances.

The right to restrict processing

You have the right to ask us to restrict the processing of some or all of your personal information in certain circumstances. This is an alternative to requesting erasure of data.

The right to data portability

You have the right to ask that we securely transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

The right to object

You have the right to object to the processing of your personal information in certain circumstances.

Please note the following when exercising your rights:

Fee

You are not required to pay a fee to exercise any of your rights. However, a ‘reasonable fee’ can be charged in certain situations.

Identification

To protect the confidentiality of your information, we may ask you to verify you identity before proceeding with any request that you make under this Policy.

If you have authorised a third party to submit a request on your behalf, we will ask them to prove that they have your permission to act.

If this is the case, we will let you know that we require identification before responding to your request.

Response

We will always respond to your request without any undue delay and within one month of receipt of your request or within one month of receiving suitable identification or a fee.

Extension

If your request is complex or we receive are a number of requests from the same individual, we may extend our response time by a further two months. We will always let you know if this is the case and give you an explanation as to why we need to extend our response time.

Refusal

In certain situations, we may refuse to comply with a request. If this happens, we will let you know, explain our decision and inform you of next steps.

To make a request

If you would like to exercise any of your rights, please contact us

We regularly review and, where necessary, update our Policy.

The date of the latest version of this Policy will always be stated at the top of the Policy.

If material changes have been made to this Policy, we will notify you by placing a clear notice on our website and/or directly notify our current supporters.

If you have any concerns about our use of your personal information, you can make a complaint to us:

By post: Opportunity International UK, Angel Court, 81 St. Clements, Oxford, OX4 1AW

By email: [email protected]

If you are unhappy with how we have used your data, you can also complain to the Information Commissioners Office (ICO), the UK data protection regulator.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

If you have any queries or concerns about how we use your personal information, you can contact us via email at [email protected].

For any other queries, concerns or if you would like to update your personal information, you can get in touch with us:

By post: Opportunity International UK, Angel Court, 81 St. Clements, Oxford, OX4 1AW

By email: [email protected]

By telephone: 01865 725 304