Blood Pressure UK is dedicated to protecting your personal data and being honest and transparent about what information we hold about you and how we process this data. We can assure you we strictly comply with all General Data Protection Regulation so your data is safe with us.
We will look after any personal information that you share with us, whether this is collected online or via phone, email, in letters, face to face or in any other correspondence. This is central to our values as an organisation. We pride ourselves on our ethical approach to fundraising. Blood Pressure UK has never and will never knock on your door, stop you in the street or ring you to ask for donations (or pay someone else to).
If you have given us your data, you can be confident that:
- We only use personal information in the ways we need to and that is expected of us
- We will only communicate with you about our work, including how we are spending your money and how you can continue to support us
- We will only contact you if you have given consent
- We will make it easy for you to tell us how you want us to communicate with you, including how to opt out from future communications. We promise your request will be dealt with straight away
- We will never release your information to organisations outside of Blood Pressure UK for their marketing purposes
- We take all reasonable care to safeguard your personal information through security policies, encrypted computer equipment, lockable filing cabinets and secure business processes
- What information Blood Pressure UK stores about you
- How we use that information
- How we store your information
- Details about sharing/being in receipt of your information
- Your choices regarding the information you provide to us
- How you can change your mailing preferences
Please feel free to contact us at any point if you would like more information about our privacy and cookies policy.
Please email: email@example.com or call 020 7882 6255 and we will be happy to help.
Blood Pressure UK is the only charity solely dedicated to lowering the nation's blood pressure to prevent disability and death from stroke and heart disease.
Our vision is that everyone will know their blood pressure numbers, in the same way that they know their height or weight, and take steps to keep them healthy both now and in the future.
Blood Pressure UK is an operating name of the Blood Pressure Association
Registered as a Charity in England and Wales (1058944) and in Scotland (SC040230)
Registered as a Company limited by guarantee in England and Wales. Company No: 03251531
Registered Office: Wolfson Institute of Preventive Medicine, Charterhouse Square, London EC1M 6BQ
The information we collect
Information supplied by you
This comes in many forms such as when you engage with our social media, make a donation to us, contact our adviceline, register for an event or provide us with personal information. This can be given online, verbally, via a letter, email or other methods. When you register, we’ll ask for personal information, such as your name, postal address, email address, telephone numbers and occasionally Date of Birth (DOB) to store with your account. We store this information on our secure database so we can carry out your request and for internal purposes so we can track when we actioned your request – for instance if you do not receive what you have requested, we can check to see if this was actioned against your record.
Information we get from your use of our website
Like most websites, we use “cookies” to help us make our site – and the way you use it – better. Cookies mean that a website will remember you. They’re small text files that sites transfer to your computer (or phone or tablet). They make interacting with a website faster and easier – for example by automatically filling your name and address in text fields.
In addition, the type of device you’re using to access our website and the settings on that device may provide us with information about your device, including what type of device it is, what specific device you have, what operating system you’re using, what your device settings are, and why a crash has happened. Your device manufacturer or operating system provider will have more details about what information your device makes available to us.
Information from third parties
Depending on your settings or the privacy policies for social media and messaging services like Facebook, WhatsApp or Twitter, you might give us permission to access information from those accounts or services.
We do not usually collect ‘sensitive personal data’ such as race, health information etc unless there is a clear reason for doing so, such as participation in a marathon or similar fundraising event or where we need this information to ensure that we provide appropriate facilities or support to enable you to participate in an event.
If you become an employee for Blood Pressure UK, we may ask you questions about your race, religious beliefs etc and this is to ensure we operate as an equal opportunities employer and also that we are aware of any medical conditions you may have that you will need assistance with such as wheelchair access etc.
We may also collect sensitive personal data if you make the information public or if you tell us about your experiences relating to heart disease (for example, if you choose to act as a case study); however we will always make it clear to you when we collect this information, what sensitive personal data we are collecting and why.
People who visit our website
We have an option for visitors to set up an account with our Webshop much like you would if you regularly purchased from a shopping site. If you set up an account on our website (to make a payment) then the following will apply:
We will collect information such as your name, postal address, email address, telephone number and occasionally your DOB. Once you set up an account you will not be anonymous to us when you subsequently sign in. This is put in place to make the website much more user friendly for supporters.
Your bank details
If you use your credit or debit card to donate to us, buy something or pay for membership online or over the phone, we will ensure that this is done securely.
We do not store your credit or debit card details at all, following the completion of your transaction. All card details and validation codes are securely destroyed once the payment or donation has been processed. Only staff authorised and trained to process payments will be able to see your card details.
If we receive an email containing any credit or debit card details, it will be immediately deleted, no payment will be taken and you will be notified about this. All purchases or donations should be completed through the donation page, our web shop (http://bpassoc-shop.org.uk/), via firstname.lastname@example.org or call 020 7882 6255
In certain instances, we collect and use your personal information by relying on the legitimate interest legal basis. This is because when you, for example, request to receive services or products from Blood Pressure UK, we have a legitimate organisational interest to use your personal information to respond to you and there is no overriding prejudice to you by using your personal information for this purpose. This is also the case where we process your donations in support of Blood Pressure UK’s objectives, for our internal administrative purposes, and where we need to take steps to protect our network security or risk of fraud.
In most instances, however, we will rely on obtaining your consent to our use of your personal information. This is the case, for example, where we seek to obtain your consent to receive email marketing about Blood Pressure UK.
We always try and send you relevant information about Blood Pressure UK - what we do, how we spend your money and how you can support us. We never bombard our supporters – we send out very little direct mail – often only twice a year with our Positive Pressure members magazine, and our emails are kept to a minimum, generally 4 e-Positive Pressures and 2 further communications, so as not to bother you.
You are always in control:
We pride ourselves that you always have and always will be in control as to whether you want to receive information about our work, how we raise funds and the ways you can support us. If you do not want us to use your personal information in these ways please indicate your preferences at the time we collect your data, whether that be verbally, by post or via email, text or on our website.
You can opt-out of our marketing communications at any time by clicking the ‘unsubscribe’ link at the end of our marketing emails sending us an "opt-out" text message, following the instructions we provide you in our initial text.
You can change any of your communication preferences at any time, including telling us that you no longer want to hear from us, via email@example.com or call 020 7882 6255
We will not use your personal information for marketing purposes if you have indicated that you do not wish to be contacted by us for such purposes. However, we will retain your details on a suppression list to help ensure that we do not continue to contact you.
Blood Pressure UK may securely disclose/receive your personal information in the following circumstances:
We may share your postal address to a mailing house if they are posting out our magazine or event packs on our behalf. This will only be the case for our Positive Pressure Magazine and Know Your Numbers event and only because we do not have the resources to manage the mailing in-house
We may share your contact information to a data cleansing company to ensure that we are not sending any communications out to deceased or gone away individuals
We may share/receive display name/profile information following interactions with our social media platforms. These are subject to user’s privacy settings for each of their social media networks
We may receive your data from third parties who provide a service to us, some of which are data processors. This includes trusted companies and other entities that act as fundraisers for Blood Pressure UK. All this personal data will have only been shared with us if you gave them permission at the time of data collection and we need this data to action your request. These include CAF (charities aid foundation), Charitable Giving, Charities Trust, Justgiving, Virgin Money Giving, Funeral Directors, Remember a Charity
These third parties comply with data protection laws. We enter into contracts with all of our data processors and regularly monitor their activities to ensure they comply
We may share your data where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example to government bodies and law enforcement agencies), or in order to enforce or apply our rights (including in relation to our website or other applicable terms and conditions) or to protect Blood Pressure UK, for example in cases of suspected fraud, breach of contract or defamation
We use due-diligence when working with any third party to ensure, like us, they adhere and comply with the General Data Protection Regulation.
Rest assured, we will never share, sell or swap your details with any third parties for the purposes of their own marketing.
Where we store your personal data
All information you provide to us is stored on our secure servers and on our secure database Subscriber (Dataware). All of our laptops are encrypted to ensure that if any were stolen or lost, any information would be safe. No personal details are saved on local drives. Any payment transactions will be encrypted. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Once we have received your information, we will use strict procedures and security features to prevent unauthorised access such as cyber-attacks.
How long do we keep your data?
Personal data processed for any purpose shall not be kept for longer than is necessary for that purpose.
- Review the length of time we keep your personal data;
- Securely delete information that is no longer needed for this purpose; and
- update, archive or securely delete information if it goes out of date.
- We keep paper financial records for as long as required to operate the service in accordance with legal requirements and tax and accounting rules. Once your data is no longer required, we will destroy it securely.
- In terms of financial records on our CRM, this cannot be deleted as we keep records for our financial auditing purposes and to ensure we are transparent with recording the money we receive. Please note that your credit/debit card details are not saved on our CRM, only your name, contact details and what you have donated.
Contact Us About Your Data
If you would like to have your data removed from our system, or you have another enquiry about the data we hold, please contact us at firstname.lastname@example.org.
Data Protection Officer: Katharine Jenner
Effective date: Aug 2020
Review date: April 2021
Approved: Professor Graham MacGregor CBE
Data Protection Officer: Katharine Jenner
Version Control: V1