We respect and protect the privacy of our users. This privacy policy tells you how we collect and use information.
Good Things Foundation is a company registered in England and Wales with company number 05887661 and a charity registered in England and Wales with charity number 1165209. We understand that you are aware of and care about your own personal privacy interests, and we take that very seriously. We value our ability to provide you with information through our interactions, whether they are face to face interactions, through our digital platforms, or one of the other ways you can choose to interact with us.
This privacy notice together with our website terms and conditions and our cookie policy explains how we collect, store, use, protect and share your personal information that you provide to us or that we may otherwise obtain or generate which relates to you. Please take a moment to review this privacy notice and, if you have any questions or concerns about how we are looking after your information, feel free to get in touch via one of the methods under the header ‘How to contact us’ below.
Personal information means any information by which you can be directly or indirectly identified. We may collect the following personal information:
When you visit our websites we collect certain information or data about you automatically using tools like Google Analytics. We collect:
Find out more about our use of cookies here.
If you sign up as a representative of an organisation to our network:
If you take part in certain funding programmes operated by us you may need to further supply:
If you want to register and use the full set of features across all our sites, you will need to give:
If you get in touch with us, we collect personal information so we can respond to your request, query or comment. So we can help you with your enquiry, we may need to know:
If you sign up for our newsletter, we’ll collect your name and email address.
If you choose to donate to us through services of organisations, such as JustGiving and Crowdfunder, we may collect personal data such as:
In addition ,we may receive your personal data such as your name, email address and postal address and details about your donations from a third party donation provider such as JustGiving or Crowdfunder if you choose to donate to us using such services .
Under data protection law, we can only use your personal data if we have a proper reason, eg:
A legitimate interest is when we have a charitable or organisational reason to use your personal data, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own. You can obtain details of this assessment by contacting us (see ‘How to contact us’ below).
The information that we collect from you is to help us to support you better and run our services well. The information also helps us to respond to you and our funders.
For our legitimate interests to deliver account services and access.
Where we have a contract, to perform our contract with you or to take steps at your request before entering into a contract
Where we do not have a contract you, for our legitimate interests being the legitimate interests of providing our services to you
To comply with our legal and regulatory obligations
Where we do not have a legal or regulatory obligation, for our legitimate interests, ie to minimise fraud that could be damaging for you and/or us
Depending on the circumstances:
—to comply with our legal and regulatory obligations
—in other cases, for our legitimate interests, ie to protect our business, interests and rights
—your consent as gathered in accordance with our ‘Cookies Policy’ below
—where we are not required to obtain your consent and do not do so, for our legitimate interests, ie to be as efficient as we can so we can deliver the best online experience to you
If you have provided such a consent you may withdraw it at any time by following the process set out in the ‘Cookies Policy’ (this will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn)
—in other cases, for our legitimate interests, ie to be as efficient as we can so we can deliver the best services to you
We may also use your personal data to ensure the security of systems and data to a standard that goes beyond our legal obligations, and in those cases our reasons are for our legitimate interests, ie to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us
For our legitimate interests, ie to be as efficient as we can so we can deliver the best services to you
—to perform our contract with you or to take steps at your request before entering into a contract
—where neither of the above apply, for our legitimate interests, eg making sure that we can keep in touch with our user about our services
For our legitimate interests of promoting our services to existing and former users
For our legitimate interests of operating at the highest standards and of providing required information by our funders
For our legitimate interests of managing our Digital Inclusion Hub Network
For our legitimate interests of providing effective and efficient customer support
Personal information revealing:
Where we process such special category personal data, we will also ensure we are permitted to do so under data protection laws.
We routinely share personal data with:
We only allow those organisations to handle your personal data if we are satisfied they take appropriate measures to protect your personal data.
We or the third parties mentioned above occasionally also share personal data with:
If you sign up to an organisation in our network, your personal information will also be shared with authorised people in that organisation.
We will never sell your information to third parties for direct marketing purposes.
The European Economic Area (EEA), UK and other countries outside the EEA and the UK have differing data protection laws, some of which may provide lower levels of protection of privacy.
Whilst we do not routinely do so it is sometimes necessary for us to transfer your personal data to countries outside the UK and EEA. In those cases we will comply with applicable UK and EEA laws designed to ensure the privacy of your personal data.
We will transfer your personal data to:
As we are based in the UK we will also transfer your personal data from the EEA to the UK.
Under data protection laws, we can only transfer your personal data to a country outside the UK/EEA where:
Where we transfer your personal data outside the UK we do so on the basis of an adequacy regulation or (where this is not available) legally-approved standard data protection clauses recognised or issued further to Article 46(2) of the UK GDPR. In the event we cannot or choose not to continue to rely on either of those mechanisms at any time we will not transfer your personal data outside the UK unless we can do so on the basis of an alternative mechanism or exception provided by UK data protection law and reflected in an update to this policy.
Where we transfer your personal data outside the EEA we do so on the basis of an adequacy decision or (where this is not available) legally-approved standard data protection clauses issued further to Article 46(2) of the EU GDPR. In the event we cannot or choose not to continue to rely on either of those mechanisms at any time we will not transfer your personal data outside the EEA unless we can do so on the basis of an alternative mechanism or exception provided by applicable data protection law and reflected in an update to this policy.
If you would like further information about data transferred outside the UK/EEA, please contact us (see ‘How to contact us’ below).
Our websites may contain links to other websites and use external services to provide functionality for the website. You are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website and to be aware of and read their privacy policies.
We cannot guarantee or verify the contents of any externally linked website. You should therefore note you click on external links at your own risk and this website and its owners cannot be held liable for any damages or implications caused by visiting any external links.
Our websites also use interfaces with social media sites such as Facebook, LinkedIn, Twitter and others. These interfaces may allow the social media site to connect your visits to our websites with other personal information.
We may direct you to a third party organisation, such as JustGiving or Crowdfunder, to allow you to donate to us. You choose to donate and share data with these organisations at your own risk. These organisations have their own privacy statements which we recommend you read before sharing any information.
We have a records retention policy that sets out how long we keep your personal information. As a general rule, we keep your personal information for as long as is necessary but not for longer than we need it. We will keep your data for the following purposes:
Each type of personal data may be kept for different periods of time. For more information, please contact us.
To help protect the data we collect and store, we have security measures in place to make sure nobody accesses your data who shouldn’t.
Access to your personal information is restricted to employees and service providers who need it to provide benefits or services to you. We also train our employees about the importance of confidentiality and maintaining the privacy and security of your information (Data protection). We commit to taking appropriate action to ensure our employees’ privacy responsibilities are upheld.
We have processes in place so we know if there are any suspected breaches with our information security. We update and test our security technology on an ongoing basis. We will notify those who need to be alerted to such issues where we are legally required to do so.
Where you are given the option to share your personal information with us, you can always choose not to do so. If you choose not to provide us with your personal information, you object to our processing of your personal information, or you choose to withdraw any consent that you may have provided to processing it, we will respect such requests in accordance with our legal obligations. This may mean, however, that we may not be able to perform the actions necessary to achieve the purposes set out above, we may not be able to respond to you directly or fully resolve requests. It may also mean that you may not be able to make use of the services and products offered by us.
We need your information to help us deliver elements of our service, but you have the following rights in relation to our use of this information.
You have the right to:
You can find out more about your rights here.
If you have provided us with a consent to use your personal data you also have a right to withdraw that consent easily at any time.
You may withdraw consents by contacting us or, depending on the circumstances, press the unsubscribe policy. For example, if you don’t want to be on one of our mailing lists, you can choose to opt out at any time by following the “unsubscribe” instructions at the bottom of our promotional emails. If you have an account with us, you can also opt out by updating your preferences.
Withdrawing a consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn
Please contact us using the information below if you would like to do any of the following:
We hope we will be able to resolve any issues you may have. If you are not happy with our response then you can also contact:
If you have any questions or to raise a concern about how we handle your personal information, you may contact us using any of the methods in the section below.
You can contact us to:
A cookie is a small text file which is placed onto your device (eg computer, smartphone or other electronic device) when you use our website. We use cookies on our website. These help us:
For further information on cookies, when we will request your consent before placing them and how to disable them, please see our cookie policy.
We are registered as a Data Controller under the United Kingdom Data Protection Act 2018 and make sure that our data handling processes are compliant with the UK General Data Protection Regulation. If you choose to access this website from other locations then you do so at your own risk and are responsible for compliance with local laws of the country in which you reside.
Please contact us if you have any questions, problems or feedback regarding this Privacy Notice.
You can contact Good Things by post, email or telephone if you have any questions about this privacy policy or the information we hold about you, or to exercise a right under data protection law.
Good Thing’s contact details are shown below:
Office 514, Showroom Workstation
15 Paternoster Row
Sheffield
S1 2BX
legal.compliance@goodthingsfoundation.org
0114 349 1666
We may make changes to our policy from time to time. This policy was last reviewed: March 2023