New Philanthropy Capital – Privacy Statement
Your privacy is important to New Philanthropy Capital (UK registered charity number 1091450, company registration number 4244715) (“NPC”). This privacy statement provides information about the different types of personal information that we collect and the ways in which we use it, although please note that not all of this will be applicable to you. If in doubt please feel free to check by contacting us using the contact details included at clause 13.
11. Other sites
We may hold information relating to you from a number of sources, and will collect personal information about you:
a. When you give it to us directly
For example, personal information that you submit through our website by signing up to our blog or email newsletter, or contacting us to make a donation, or any personal data that you share with us when you communicate with us by email, phone or post.
b. When we obtain it indirectly
Your personal information may be shared with us by third parties, including our business partners, our sub-contractors in technical and payment services, advertising networks, research providers and search information providers.
C. When it is publicly available
Your personal data may be available to us from external publicly available sources. This may include information available on Companies House, Charity Commission and other charity registers, Who’s Who, Debrett’s guides, electoral rolls, reputable media articles, publications and company websites and professional networking sites such as LinkedIn. Depending on your privacy settings for social media services, we may access information from those accounts or services, including from Facebook, Instagram and Twitter. We may use this information to manage our client and Supporters’ Circle records efficiently and effectively. Clause 5 below provides more information.
d. When you visit our website
2. What personal information do we use?
We may collect, store and otherwise process the following kinds of personal information:Your name and contact details, including email address, postal address, telephone number, and social media identity;
a. Information about our services which you use, such as NPC events and meetings with NPC staff that you have attended and your communication preferences;
b. Information about your computer/ mobile device and your visits to and use of this website, including, for example, your IP address and geographical location;
c. Details of your qualifications and experience;
d. Your gender and date of birth, when freely given by you during the course of our interactions with you;
e. Your interests in philanthropy, including donations and support made to other organisations; and
f. Any other personal information which you choose to share with us as per clause 1.
Special categories of data
The EU General Data Protection Regulation (“GDPR”) recognises certain categories of personal information as sensitive, and therefore requiring more protection. These categories of data include information about your health, ethnicity, and political opinions. In certain situations, NPC may collect and/or use special categories of data (for example in order to make adjustments for any disabilities or dietary requirements you may have when attending our events). We will only process these special categories of data if there is a valid reason for doing so and where the GDPR allows us to do so. For instance, by seeking your explicit consent to use such data.
3. Lawful processing
We are required to have one or more lawful grounds to collect and use the personal information that we have outlined above. We consider the grounds listed below to be relevant:
Where you have provided your consent for our use of your personal information in a certain way, for example where we ask for your consent to send you our newsletter.
b. Legal obligation
Where the processing of your personal information is necessary for us to comply with a legal obligation to which we are subject, for example where we have to share your personal information with regulatory bodies which govern our work.
C. Contractual relationship
Where it is necessary for us to process your personal information in order to perform a contract to which you are a party (or to take steps at your request prior to entering a contract), for example where you a client, or you volunteer with us or provide associate consulting services.
d. Legitimate interests
Where applicable law allows us to collect and use personal information on the condition that to do so is reasonably necessary for our legitimate interests (and the use of your personal information is fair, balanced, and does not unduly impact your rights). We may rely on this ground to process your personal information when we believe that it is more practical or appropriate than asking for your consent. For instance, we rely on the legitimate interest ground to process your personal data
- in order to protect the security of our networks e.g. when we receive external emails we will scan such emails for any threats.
- As part of our work to grow and maintain our Supporters’ Circle. Further information can be found in clause 5.
- In order to capture your contact details when you have expressed a desire to remain in contact with NPC without wanting to opt-in to our direct mailing.
NPC may use your personal information:
a. to provide you with services, products or information that you have requested;
b. to provide updates about our work, services, activities, publications or products (where necessary, and only where you have provided your consent to receive such information)
c. to invite you to NPC events which we feel that you might be interested in
d. to process your donations;
e. to answer your questions/ requests and communicate with you in general;
f. to further our charitable aim in general, including for fundraising activities and asking for volunteer support;
g. to analyse and improve our work, services, activities, products or information (including our website) or for our internal records;
h. to process your application for a job or volunteer role when you apply by contacting us via our website;
i. to audit and/ or administer our accounts;
j. to satisfy legal obligations which are binding on us, for example in relation to regulatory, government and/ or law enforcement bodies with whom we may work, or due diligence checks before accepting major donations;
k. for the prevention of fraud or misuse of service;
l. and for the establishment, defence of enforcement of legal claims.
We may analyse your personal information to create a record of your interests and preferences to help us manage our records efficiently and effectively in support of NPC’s mission. This allows us to ensure that communications (e.g. by post, telephone, email, text or social media) are appropriate and relevant to current and prospective clients and members of our Supporters’ Circle, and to generally provide you with an improved user experience.
Fundraising (particularly through our Supporters’ Circle) is an important element of our charitable work so we may undertake research or analysis to assess your ability to support NPC financially. This may include an assessment of your income and/or wealth and our assessment of your willingness to make donations to particular projects or NPC more generally. We may use analysis to help us identify your likely support for particular projects. All of these activities are undertaken to ensure that we are working in a cost-effective manner and allow us to raise more funds in support of NPC’s mission.
If you would prefer us not to use your personal information in this way, please let us know by using the contact details included at clause 13.
NPC will not sell, rent or lease your personal information to others. However, we may disclose your personal information to selected third party processors (such as partners, sub-grantees or sub-contractors) for the purposes outlined at clause 4. The third party in question will be obligated to use any personal data they receive in accordance our instructions.
In particular, we reserve the right to disclose your personal information to third parties: in the event that we buy or sell any business or assets, in which case we will disclose your personal information to the prospective buyer or seller or such business or assets;
a. if substantially all of our assets are acquired by a third party, personal information held by us may be one of the transferred assets;
a. if we are under any legal or regulatory obligation to do so; and
b. in connection with any legal proceedings or prospective legal proceedings, in order to establish, exercise or defend our legal rights.
7. International Data Transfers
As we sometimes use third parties to process personal information, it is possible that personal information we collect from you will be transferred to and stored in a location outside the UK or the European Economic Area (“EEA”).
Please note that certain countries outside of the UK or EEA have a lower standard of protection for personal information, including lower security protections. Where your personal information is transferred, stored, and/or otherwise processed outside the UK or EEA in a country which does not offer an equivalent standard of protection to the UK or EEA, we will take all reasonable steps necessary (including entering into standard contractual clauses to protect your personal information or relying on the Privacy Shield for transfers to organisations in the US) to ensure that the recipient implements appropriate safeguards designed to protect your personal information. If you have any questions about the transfer of your personal information, please contact us using the details at clause 13.
NPC will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. NPC will store all the personal information you provide on secure servers.
We will generally remove your personal information from our records six years after the date that it was collected unless (a) we are required to hold for longer for legal or regulatory purposes; or (b) still required in connection with the purpose for which it was collected and/or processed. However, we will remove your personal information from our records before this date if we become aware that (a) your personal information is no longer required in connection with such purpose(s); (b) we are no longer lawfully entitled to process it; or (c) you validly exercise one of your right of erasure under clause 10.
NPC may contact you by post unless you request otherwise, and by telephone, email, text, social media or other electronic means depending on the communication preferences you have previously indicated. Where we rely on your consent to use your personal information, you have the right to:
a. Ask us for confirmation of what personal information we hold about you, and to request a copy of that information. If we are satisfied that you have a legal entitlement to see this personal information, and we are able to confirm your identity, we will provide you with this information.
b. Request that we delete the personal information we hold about you, as far as we are legally required to do so.
c. Ask that we correct any personal information that we hold about you which you believe to be inaccurate.
d. Object to the processing of your personal information where we: (i) process on the basis of the legitimate interests ground; (ii) use the personal information for direct marketing; or (iii) use the personal information for statistical purposes.
e. Ask for the provision of your personal information in a machine-readable format to either yourself or a third party, provided that the personal information in question has been provided to us by you, and is being processed by us: (i) in reliance on your consent; or (ii) because it is necessary for the performance of a contract to which you are party; and in either instance, we are processing using automated means.
f. Ask for processing of your personal information to be restricted if there is disagreement about its accuracy or legitimate usage.
If you decide you do not want to receive any further emails from NPC, please tell us and we will remove you from the mailing list. At any point you can request to unsubscribe from NPC’s mailing or remove your personal information from the database by contacting us using the details listed at clause 13.
Please note that where you ask us to delete your personal information we will maintain a skeleton record comprising your name and organisation to ensure that we do not inadvertently contact you in the future. We may also need to retain some financial records for statutory purposes, for example Gift Aid.
Please note that you also have the right to lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk/concerns
11. Other sites
NPC may update this privacy statement by posting a new version on this website. If we update this privacy statement in a way that significantly changes how we use your personal information, we will use reasonable efforts to bring these changes to your attention where we have your contact details. Otherwise, we would recommend that you periodically review this privacy statement to be aware of any other revisions.
13. How to contact us
NPC’s Data Protection Officer is responsible for monitoring compliance with relevant legislation in relation to personal data. You can also contact the Data Protection Officer if you have any questions about this privacy statement or our treatment of your personal information:
Telephone: 0207 620 4850
Post: FAO Data Protection Officer, New Philanthropy Capital, 185 Park Street, London, SE1 9BL.