How we use your information
This privacy notice explains how Magic Bus UK (the Data Controller) collects your data and how we use it. It explains the legal basis for us processing your data and applies to information we collect about:
- Visitors to our website: www.magicbusuk.org
- People who make a donation to Magic Bus UK
- People who sign up to receive the Magic Bus UK direct marketing
- People who attend Magic Bus UK events
Our Legal Basis for Processing Your Data
When you make a donation, or set up a direct debit, we will process your data under the legal basis of “Contract”. As we must process your personal data in order to complete your donation, we do not require your consent to begin processing. However, your data will be securely deleted 6 years once the payment process has finished. For Gift Aid, we are required to hold your data for 6 years by HMRC, after which it will be destroyed. For more information about how we use your data when you make a donation, please see the section titled “People who make a donation to Magic Bus UK”.
For direct marketing, such as sending you emails or letters, making phone calls etc., we will only ever process your data using the legal basis of “Consent”. This means we will only ever contact you with your express consent and we will no longer do so if you ever choose to withdraw your consent. For further details regarding direct marketing, please see the section titled “People who sign up to receive the Magic Bus UK direct marketing”
We may also use “Legitimate Interest” as a legal basis for contacting you. We will only use this basis if we have to get in touch with you, but cannot do so using any other legal basis. We will also never send you any electronic direct marketing using Legitimate Interest. If we do decide to use Legitimate Interest as a basis for contacting you, we will carry out a “Legitimate Interest Assessment” to ensure that us contacting you is lawful and does not infringe on your rights.
Visitors to Our Website
This website (including this privacy notice) contains a number of links to external websites. This privacy notice does not cover those websites and Magic Bus UK is not responsible for the content of those websites.
To opt out of being tracked by Google Analytics across all websites, please visit http://tools.google.com/dlpage/gaoptout.
People Who Make a Donation to Magic Bus UK
- Name and Title
- Billing Address
- Email Address & Telephone Number
- Debit/Credit Card Details
- Declaration of Tax Payer Status (for those including Gift Aid in their donation)
This data will be shared with our payment provider, “Blackbaud Merchant Services”, only for the purposes for processing the payment.
If you agree to include Gift Aid with your donation, your details will be shared with HM Revenue and Customs only for the purposes of verifying taxpayer status and reclaiming tax on our behalf.
When you make a donation, we will also ask you if you would like to sign up to receive Magic Bus UK direct marketing. For information regarding this, please see the section below titled “People who sign up to receive Magic Bus UK direct marketing”.
Once the payment process is complete, the information that we have taken will be destroyed after 6 years.
Magic Bus UK will never share this data with anyone beyond our payment provider Blackbaud Merchant Services, and HM Revenue and Customs.
People Who Sign Up to Magic Bus UK Direct Marketing
Magic Bus UK will never contact you without your express consent. When we ask for your consent, we will make it clear how we will contact you (via email, telephone, post etc.) and what we will be contacting you about. In general, Magic Bus UK will be likely to contact you about:
- Direct Marketing (Newsletters, Campaigns, Fundraising requests etc.)
- Invitations to Events
- Market Research Surveys
Magic Bus UK promises to never share your data with other organisations for marketing or fundraising purposes. However, we will share your data with the companies Microsoft, MailerLite and Blackbaud only for the purposes of securely processing and storing your data. As Microsoft and Blackbaud are organisations based in the United States, we may transfer your data outside of the European Economic Area (EEA) when we store your data on their systems. All three companies are covered by the US – E.U. Privacy Shield Framework, which ensures your data remains private and secure outside of the EEA.
In addition to using your personal data to contact you, your data will be used for the purposes of analysing our marketing campaigns, preparing for and analysing Magic Bus UK events, and maintaining records of your consent.
Your data will be held for these purposes indefinitely or until you withdraw your consent.
Consent can be withdrawn or changed at any time. To do so, please contact firstname.lastname@example.org and we will ensure your data is appropriately altered/destroyed with immediate effect. Alternatively, you can withdraw consent at any time by clicking “Unsubscribe” at the bottom of any marketing email you receive from us.
People Who Attend Magic Bus UK Events
There may be photography and video recordings taken at Magic Bus UK events for our benefit. These images may be used:
- In future publications and presentations
- Promotional Videos
- Digital and Social Media Channels
These images will be used at any time, normally within a 5-year period. Please note that our website and digital channels may be seen throughout the world, and not just in the United Kingdom, where UK law applies. If you are going to be attending a Magic Bus UK event and do not with your images to be used in this way, please make your wishes known to a Magic Bus UK member of staff on the day, or contact us at email@example.com.
Magic Bus UK Ambassadors and Major Donors
If you have signed up to be a Magic Bus UK Ambassador, or have recently made a large donation to Magic Bus UK (£1,000+), we may share your data with Magic Bus India so that our founder, Matthew Spacie, can get in touch with you about our work. This data will be shared securely only with those people needed to help Matthew stay in touch with you. It will only be used for this purpose, and Magic Bus India will destroy their copy of your data after they have contacted you.
If you do not wish to hear from Matthew, please let us know at firstname.lastname@example.org, and we will ensure your details are not shared with Magic Bus India.
How We Keep Your Data Secure
If you use a credit or debit card to make a donation to us, this information is passed securely to our payment provider. This is done in accordance with industry standards and your details are not stored on our website.
However, please be aware that there are always inherent risks in sending information by public networks or using public computers and we cannot 100% guarantee the security of data (including personal information) disclosed or transmitted over public networks.
Magic Bus UK promises to never share your data with other organisations for marketing or fundraising purposes. However, we will share your data with the companies Microsoft, CloudAlly, MailerLite and Blackbaud only (where applicable) for the purposes of securely processing and storing your data. As Microsoft, and Blackbaud are organisations based in the United States, we may transfer your data outside of the European Economic Area (EEA) when we store your data on their systems. Both companies are covered by the US – E.U. Privacy Shield Framework, which ensures your data remains private and secure outside of the EEA.
You have the Right to Rectification. If any of your data is incorrect or out-of-date, please get in touch with use at email@example.com, and we will ensure your data is updated.
You have the Right to Restrict Processing. If you desire, you can demand that we immediately stop processing your data. In this instance, we will continue to store your data, however we will not do anything with it.
You have the Right to Withdraw Consent and the Right to Erasure. If you wish to withdraw consent for us contacting you, or if you wish for us to erase all the data we hold about you, please get in touch with us at firstname.lastname@example.org, and we will comply with your request in a secure manner.
If you feel your rights have been infringed in any way or that Magic Bus UK has failed to maintain the standard outlined here, you have the right to submit a complaint to the Information Commissioners Office (ICO) who will investigate further.
Changes to Our Policy
If you feel our response is unsatisfactory, that we have failed to maintain the standard outlined here, or infringed your rights in any way, you are entitled to submit a complaint with the Information Commissioners Office (ICO), who will investigate further.
Telephone: +44 (0)207 922 7717
Address and registered office: 7-14 Great Dover Street, London SE1 4YR
Registered charity number: 1124753
Company number: 6580717