When you participate in one of our online campaign actions (such as signing a petition or writing to your MP), you provide us with personal data such as your name, email and postal address. We will retain this information, together with a record of the action you took, for the purposes of analysing and reporting on our campaigns activity and to enable us to tailor our communications to you (where applicable).
If you opt-in to receive email updates about our campaigns, we will email you regularly with information about our campaigns and the actions you can take to support them. We will also add your details to our organisation-wide supporter database, which enables us to get a full picture of your relationship with St Mungo’s and to tailor our communications to you accordingly. You can opt-out of these emails at any time, and you’ll need to renew your consent every two years for us to keep emailing you (we’ll send you a reminder when the time comes).
We collect your information under two legal bases:
- Consent - for us to contact you regarding future campaigns.
- Legitimate interest – for us to tailor the types of communications you receive according to your activity.
Our online campaign actions are create using the Engaging Networks platform, and any data you submit on a campaign page will be stored and processed by Engaging Networks. As a result, your data will be stored at a destination outside of the European Economic Area (EEA) in Canada which is a recognised country by the ICO.
Occasionally third party organisations collect data on our behalf as well as for their own use. In these circumstances we may receive your personal data from third party organisations for our marketing purposes, but only where you have consented to this. Third party organisations we may receive data from include online petition platforms such as Care2 and Change.org. These organisations have their own privacy policies which you should read before signing up to them. Information we receive from these sources will consist of your full name and email address and – if you provided it to them – your postal address.
Where you have provided us with your personal details, we may provide your email address in an encrypted format to third party organisations collecting data on our behalf (as described above) for the sole purpose of ensuring that no duplicate data are collected. Our contract with such providers will require them to make no other use whatsoever of your data.
We never sell your data to any third party organisation to use for their own purposes.
If at any time you (i) are not currently subscribed to receive campaign updates by email and (ii) have not taken one of our online campaign actions for three years, we will anonymise or delete your personal data from our campaigner database. Please note that your personal data may still be held in another database by St Mungo’s if you have another relationship with St Mungo’s (e.g. donor, volunteer).
The personal information we collect might include name, date of birth, email address, postal address, telephone number and credit/debit card details. Data Protection law recognises that certain categories of personal information are more sensitive. These are known as special categories of data and cover data concerning health, race, religious beliefs and political opinions.
We do not usually collect special categories of data about our supporters unless there is a clear reason for doing so such as participation in a run or walk or similar fundraising event or where we need to ensure we provide the appropriate facilities or support to enable you to participate in an event.
We collect your information under the following legal bases:
- Consent – we will always ask for your consent to contact you for marketing and profiling purposes.
- Legitimate interest – charity governance including reporting and compliance, providing information about our services and research, and contacting you via post.
- Legal obligation – we are required by law to retain information when a donation is submitted with Gift Aid, and where we record actions for a regulatory reason.
- Contract – this is used when you set up a direct debit donation.
Information we collect from you
You get in touch with us directly, for example to take part in a fundraising event, make a donation or communicate with us for another reason. This could also be through an organisation we work with who contacts you on our behalf.
Your information is passed on to us, with your permission, by an independent fundraising organisation; for example, if you raise money for the ICR by running in the Virgin Money London Marathon or donate to us through the Just Giving website. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Information we collect from other sources
We combine information you provide to us with information available from other sources. This, for example, enables us to contact you in the event that you change your address or phone number, or gain a better understanding of your interests.
The information we receive from other organisations may depend on the permissions you have given them, so you should regularly check these.
This information comes from the following sources:
- Third party organisations — You may have provided permission for an organisation to share your information with third parties, including charities. This could be when you buy a product or service or register with them.
- Social media — Depending on your settings on services like Facebook, WhatsApp or Twitter, or their privacy policies, you might give us permission to access information from those services.
- Public information — This might be from a wide variety of sources such as newspapers and magazines, the internet, Companies House, etc.
We will use your personal information for:
- Processing donations.
- Complying with our legal obligations policies and procedures.
- Providing and personalising our services.
- Dealing with your enquiries and requests and responding to complaints.
- Fundraising, including personalising and sharing information about the work of our charity, making financial requests and promoting our fundraising events, products and services.
- For administrative purposes.
- Undertaking due diligence that protects the charity and/or supporter from risk or harm.
- We will never sell or share your details.
For example, google-based searches when, as mentioned, we already have a relationship or strong legitimate interest prior to entering into a relationship with a donor or potential donor. And, where the information will be used solely in order for us to communicate with them in an appropriate, tailored manner.
Fundraising, in particular being able to communicate with you about the work we do is critical to our ability to provide services to people who are homeless.
We use the details you provide to us to communicate with you about our work to end homelessness and rebuild lives. We would also like to tell you how your support is helping and other ways you can help in the future whether that’s through volunteering, events or fundraising. From time to time we might also send you appeals asking for a donation.
We promise that will only communicate with you in the way you wish us to and we will always respect your privacy. You can change your mind at any time and it is quick and easy to let us know that you no longer want to hear from us by calling the Supporter Care Team on 020 8600 3000 or email us at firstname.lastname@example.org. We will always respond to your wishes in a sensitive, timely, courteous and professional way.
We may provide your data (including your name and email address) to social media channels. This is to check if you have an account and to build ‘lookalike’ audiences. Our adverts may then appear when you use the social media platform. We only work with social media platforms that use encrypted 'hashed' data so all data remains anonymised. These tools allow us to speak to and engage with supporters about our work.
Please be assured that we will take appropriate measures to keep your personal information safe and secure and we promise not to over contact. We will never pass your personal information on to other organisations for them to use for their own marketing purposes.
For internal uses of your non-sensitive data, where it has not be appropriate to obtain your consent or there are no legal reasons for us to so, we will collect your information as a legitimate interest of St Mungo’s. This is because when you, for example, request to receive services or products from us, we have a legitimate organisational interest to use your personal information to respond to you and there is no overriding prejudice to you by using your personal information for this purpose. However we will always provide you with the option to opt-out of hearing from us.
We will never send marketing emails to you without your consent.
You have a choice about whether you want to receive information about the Charity’s work and fundraising activities. We will not use your personal information for marketing purposes if you have indicated that you do not wish to be contacted and we will never be in touch for marketing purposes via email or telephone unless you have given us your consent. You can change your marketing preferences (such as email or post at any time), by contacting the Supporter Care Team on 020 8600 3000 [or email us at email@example.com.
- Only information that we actually need is collected and it is only seen by those who need it to do their jobs.
- We will only disclose data to third parties when obliged to disclose personal data by law, or the disclosure is ‘necessary’ for purposes of national security, taxation and criminal investigation, or we have your consent.
- We never sell or share your data to third parties.
- Personal information is retained only for as long as it is required for the purpose collected.
- Wherever we hold your information on the basis of your consent, we will look to re-obtain your consent every two years.
- We will keep your information up to date.
- Your information will be protected from unauthorised or accidental disclosure.
- We will provide you with a copy of your personal information on request (please see below for information on access rights and requests).
- Inaccurate or misleading data will be corrected as soon as possible.
- These principles apply whether we hold your information on paper or in electronic form.
- We will never sell or share your details.