Star Throwers is committed to protecting your personal data and being transparent about what we do with it, no matter how you interact with us. Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the “GDPR”).
Who are we?
Star Throwers is a cancer support charity dedicated to empowering people with cancer, and their loved ones, through personalised information and wellbeing support.
With respect to GDPR, Star Throwers is the Data Controller and Steven Ho, General Manager, is the charity’s Data Protection Officer whose responsibility it is to determine how your personal data is processed and for what purposes.
What data do we collect and process?
In the course of your interactions with Star Throwers, be it in person; via telephone; via electronic communications (e.g. email, social media); correspondence you send us via post; forms you fill in online or offline (e.g gift aid declarations), donations we receive offline or online (e.g. through our website or online fundraising platforms such as Virgin Money Giving), we may collect and store information about you, typically your name, address, email, and telephone number(s). Furthermore, we may also record relevant information from conversations and correspondence we have with/from you e.g. why you are interested in supporting Star Throwers.
Why and how do we process your personal data, and what are the legal bases for doing so?
We use your personal data for the following purposes:
- To process donations received: If you have made a donation we will use your personal data in order to acknowledge your donation, administer standing orders, and claim Gift Aid if a Gift Aid Declaration has been received.
Legal basis: Legal Obligation (for Gift Aid Claims) and Legitimate Interest – to satisfy your reasonable expectation to receive an acknowledgement and process your donation
- To respond to requests: If you contact us with a query regarding information about Star Throwers or ways to support Star Throwers, or to inform us about what you are planning to do to support Star Throwers (e.g. a fundraising event), we will use your personal data to respond to your query and liaise with you regarding your fundraising.
Legal basis: Legitimate Interest – it is necessary for us to read and store your contact details and message so that we can respond appropriately as you would reasonably expect
- To keep you informed about Star Throwers: we may also use your personal data to keep you informed of Star Throwers’ latest activities and achievements, upcoming fundraising events and opportunities to support Star Throwers.
Legal basis: Consent – we will only use your personal data for the purpose above (otherwise known as ‘direct marketing’) if you have given us specific consent to do this. Consent can be subsequently withdrawn at any time (see Rights below)
Most browsers automatically accept cookies but you can modify your browser settings to decline cookies.
Legal basis: Legitimate interests – we believe you would reasonably expect a website to remember and recognise your device in order to provide you with a consistent website browsing experience, and it is in our legitimate interest to track the way people use our website to better enhance our website in the future.
Who do we share your data with?
Your personal data will be kept strictly confidential and will only be shared on a need-to-know basis with staff members and volunteers within Star Throwers. We may also share some of your personal data with the following third parties where required and/or appropriate:
- HMRC – name, address, donation amount – for Gift Aid Claims
- Google Analytics – I.P address, website preferences – for website analytics
We will always ensure that only the minimum required information is given.
How do we protect your
We are committed to ensuring personal data is secure. We have put security measures in place to attempt to protect against the loss, misuse, and alteration of personal information under our control. For example, we put administrative procedures in place to only allow authorised personnel to access systems containing personal information. If you have access to parts of our websites or use our services, you remain responsible for keeping your user ID and password confidential.
How long will we keep your data?
For donations received – we will keep your personal data, including correspondence and git aid claims, for as long as the law requires us to for tax or accounting purposes (which may be up to six years after a particular transaction).
In respect of other personal information, we will retain it for no longer than necessary for the purposes for which it was collected, taking into account guidance issued by the Information Commissioner’s Office.
When we no longer require your information we will dispose of it securely.
Your Rights to your personal data
Unless subject to an exemption, you have the following rights with respect to your personal data:
- Complaints: We endeavor to respond to you within 30 days from receipt of your correspondence related to privacy matters. However, you have the right to contact the data protection supervisory authority to lodge a complaint with the UK Information Commissioner’s Office online at https://ico.org.uk/concerns/handling/
- Access: You have the right to request us to provide you details of the personal information we hold about you.
- Correction: You have the right to ask us to correct our records if you believe they contain incorrect or incomplete information about you.
- Erasure: You have the right to erasure (deletion), without undue delay, of your personal information for which you later withdraw your consent to processing, or when it is no longer needed for purpose it was originally collected.
- Processing Restrictions: You have the right to temporarily restrict our processing of your personal information if: you contest the accuracy of your personal information; you prefer we restrict its use rather than erase it; you need it to be preserved to establish, exercise, or defend a legal claim; whilst you are verifying whether we have overriding legitimate grounds to use it. You have the right to be informed before we lift the processing restriction.
- Data Portability: You have the right to ask us to provide you (in a structured, commonly used, and machine-readable format without hindrance) personal information about you that we have which you had provided to us. You may ask us to transmit it directly to another controller if it is technically feasible.
- Automated Individual Decision-making: Star Throwers does not currently employ automated processing/ profiling that produce legal effects on individuals. You have the right to object to direct marketing profiling (See “Right to Object to Direct Marketing” below).
- Right to Object to Direct Marketing: You always have the right to object to receiving direct marketing from us even if we believe that we have a legitimate interest to communicate with you in this way. You can contact us to request that we stop all direct marketing messages by calling 01953 423304, or emailing us at email@example.com. For email marketing, simply click on the unsubscribe link within any email. Requests are usually processed immediately but please allow ten (10) business days for the removal request to be processed. Even after you unsubscribe from promotional email messages, you may still receive transactional (nonmarketing) messages from us.
Transfer of Data Abroad
No data is transferred out of the UK
Automated Decision Making
No information is subject to automated processing or decision making
We will seek your consent for any and all new processing proposals.
To exercise all relevant rights, or to make a query or complaints please contact in the first instance the Data Controller (named at the top of this policy) on
01953 423304 or firstname.lastname@example.org
Policy last updated:
24 May 2018