Privacy policy

Please read through this Privacy Policy in conjunction with our website Terms and Conditions. By browsing and using any information from this website, you are agreeing to comply and be bound by our Privacy Policy and also our Terms and Conditions, if you do not agree to comply and be bound by them, please do not use this website.

Who we are

Harry’s Hydrocephalus Awareness Trust (Harry’s HAT) is a registered charity (no 1183086).
‘We’, ‘us’, ‘the charity’ and ‘our’ means Harry’s Hydrocephalus Awareness Trust (Harry’s HAT).
‘You’, ‘your’ and ‘yours’ means the person(s) accessing the Website.

We are committed to protecting any personal information you provide to us. Any personal information you provide will be processed in the ways described in this privacy policy. If you have any questions regarding your personal data, please contact us on info@harrys-hat.org.

How we use your information

The Charity uses any one of the following lawful basis for processing your personal information:

You have consented to us processing your data
There is a contractual relationship with you
We are legally obliged to process your data
We believe it’s in the legitimate interest of either you as the data subject, or us as the Charity, to process your data. Legitimate interest can be used where there is a reasonable purpose to process an individual’s data. For more information on legitimate interest, please see the ICO’s website or contact us
We believe it is in the public interest to process your data and this interest is supported by clear law e.g. safeguarding.

The Charity gets its authority to process your personal information from the legal requirements set out in the following legislation (laws):

Data Protection Act 2018
General Data Protection Regulation
Privacy and Electronic Communications Regulations.

Your personal information is processed and stored in accordance with the legal requirements in the corresponding laws. We will only keep your information for as long as reasonable and necessary for the relevant activity, which may be to fulfil our statutory obligation and for existing good practice.

Personal information is information that can be used to identify you. Examples of the information we may collect about you includes:

your name
your contact details (including postal address, telephone number, email address)
your date of birth
your gender
information relating to your health
if you volunteer for us or apply for a job with us, information necessary for us to process applications and assess suitability (which may include things such as employment status, previous experience depending on the context, as well as any unspent criminal convictions or pending court cases you may have)
your financial information such as bank account details
your Gift Aid declaration
a record of our communications with you
your communication preferences
your giving history
your interests, and reasons for your support

We collect information about you in the following ways:

when you, or someone on your behalf, makes a donation to us
when you register to participate in an event either directly with the Charity or through a third-party and have indicated that you wish to fundraise for us
when you agree to 3rd parties such as CAF to provide us with your details
when you engage in our social media and advertising
when you voluntarily give the Charity your personal information
when you participate in a competition either directly with the Charity or through a third-party and have indicated that you wish to be contacted by us
when you apply for a charity grant
when you subscribe to our charity publications or email newsletters
when you read or download information from our website.

Guest blog posts

Photography, images and film provided to us for guest blog posts is taken and used with your consent.

We will discuss with you how your, and/or your child’s, image and information is going to be used and ensure you are happy for it to be used in this way. You can ask us to stop any time by sending us a written request.

Event photography

Where an event is organised by the Charity, we will take photographs and/or film to use for marketing purposes. We display clear signage at events to state that there is a photographer present and for what purposes we will use the media captured. If you do not want your photograph taken, please either tell the photographer at the time, if it is convenient to do so, or contact the Charity after the event.

Sensitive personal data

Certain types of personal information are in a special category under data protection laws, as they are considered to be more sensitive.

The definition of sensitive personal data is data consisting of racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation.

We only collect this type of information if there is a clear reason for us to do so.

How we may share your information

Harry’s Hydrocephalus Awareness Trust (Harry’s HAT) may disclose personal information if required to do so by law, and where possible, we will inform you of our obligation before doing so. For example, to Government bodies for tax purposes or law enforcement agencies for the prevention and detection of crime, subject to such bodies providing us with a relevant request in writing.

Statistical information on our services are provided to funders and other reputable third parties and for other lawful purposes. These statistics will not include any personally identifying information.

Your rights

You have certain rights in respect of the personal information we hold about you:

to be informed about how and why your personal data is processed
to access your data
to rectification of your data
to erasure of your data
to restrict processing of your data
to data portability
to object to processing your data
not to be subject to fully-automated decision-making including profiling

Any information rights request are processed by the Data Protection Officer. Request should be made in writing and your request (including providing information on whether the rights apply in the particular circumstances) will be responded to within the applicable statutory time period. If we are not sure of your identity, we may require you to provide further information in order for us to confirm who you are.

Complaints

You can make a complaint or raise a concern about how we process your personal information by contacting our Data Protection Team via info@harry’s-hat.org or 07961 00 1710.