Privacy policy

This is the privacy policy of Global Action Plan.

Global Action Plan is a registered charity, charity number 1026148, company number 2838296. Global Action Plan are data controllers and processors of your information under the conditions of the Data Protection Act 2018. The 2018 Act replaces the 1998 Data Protection Act from May 25 2018.

Personal Details - newsletters and forms

To ensure that we communicate with our supporters through their preferred channels, and to enable us to share updates about our work, we need to collect different types of information, including personal data. We understand the trust that our supporters place in us when sharing their data, and we will always do our utmost to respect that trust and protect their personal information.

When you sign up to the Global Action Plan newsletter, or submit your details through a form to gain access to downloadable content, your data will be processed through Mailchimp. For more information on how this data is stored, please see the Mailchimp privacy policy.

Personal information submitted through these forms will be used to email you content that you have requested, the details of which will be specified on each sign up occasion. We will occasionally ask for further information such as your organisation, location, or where you heard about us. This information is used to help us improve our programmes by ensuring we are creating content that is relevant to you. We always aim to ask for the least amount of information possible, will never sell this data, and will not share it without your consent.

Cookies

Cookies are small bits of text that are downloaded to your computer or mobile device when you visit a website. Your browser sends these cookies back to the website on each subsequent visiit so the site can recognise you and then tailor what you see on the screen.

We like to keep track of what pages and links are popular and which ones don’t get used so much to help us keep our sites relevant and up to date. It’s also very useful to be able to identify trends of how people navigate through our sites and if they get error messages from web pages.
This group of cookies, often called “analytics cookies” are used to gather this information. These cookies don’t collect information that identifies a visitor. The information collected is anonymous and is grouped with the information from everyone else’s cookies. We can then see the overall patterns of usage rather than any one person’s activity. Analytics cookies only record activity on the site you are on and they are only used to improve how a web site works.
Some of our websites and some of the emails you might get from us also contain small invisible images known as “web beacons” or “tracking pixels”. These are used to count the number of times the page or email has been viewed and allows us to measure the effectiveness of its marketing and emails. These web beacons are anonymous and don’t contain or collect any information that identifies you.

Cookies are also used to improve your browsing experience. These cookies allow the website to remember choices you make, such as your language or region and provide enhanced features. This website also uses cookies to keep track of how you are viewing the pages, to ensure that you don't have to expand content over and over.


You may avoid the use of cookies by selecting the appropriate settings on your browser (more details of how to change this will depend on which browser you are using (e.g. Google Chrome or Microsoft Internet Explorer). You can also delete cookies through your browser settings.

How we hold and process your personal data
To ensure that we communicate with you through your preferred channels (e.g. post, email, phone or text message), you can update your preferences at any time. To change your preferences, please contact us on [email protected] or call us on 020 7420 4444.

To be compliant with the Data Protection Act 2018, we need to have a legal basis through which we may hold and process your data. Having completed the relevant assessments, Global Action Plan is using legitimate interest as our legal basis for all postal communication, and for telecommunication where we have existing, GDPR-compliant consent. For all other telemarketing, email and text messaging our legal basis for processing will be consent.

Sharing your data
We will never sell your details to other organisations.

If you’ve given your specific consent for us to share your data, we may share your contact details with the named partners that you have consented to.

If you sign a petition which involves a hand in, for example a petition to be handed in to the government, it may be necessary to include some contact details on the petition hand in. These details will not be shared further. Otherwise we would only disclose your data if we are obliged to do so by law.

We will sometimes use approved third party partner agencies to process information on our behalf, such as a mailing house to post communications to supporters. Third parties with which we share your information are only authorised to use that information to fulfil their contractual obligations to us. They are not permitted to use it for any other purpose. We retain full responsibility for how your personal information is used and we conduct comprehensive checks on these companies before we work with them and periodically throughout the duration of our relationship.

Keeping your details up to date
The accuracy of your information is important to us. If you change your home or email address, or if any of the other information we hold is inaccurate or changes in any way, or even if you simply wish to check that the data you have shared with us is up to date, please contact us on 020 7420 4444 or email us at [email protected].

Security
We know how much trust you place in us when you share your personal data. Because of that we place great importance on the security of your personal information and will always take appropriate precautions to protect it. This applies both to the physical security of the data that we hold, and the high level of digital security features that we use.

No data transmission over the internet can be guaranteed to be 100% secure. So, whilst we strive to protect your personal information, we cannot guarantee the security of any information which you disclose to us online and you must understand that you do so at your own risk.

We take care to protect your personal information. We take steps to ensure that access to personal information is restricted to employees who need it and that all Global Action Plan staff who handle personal information are fully trained and kept up-to-date on our data management, security and privacy practices. Our employees are notified and reminded about the importance we place on privacy, and what they can do to ensure your information is protected.

Internet based transfers and processing
The Internet works as a global environment. This means that using it to collect and process personal data often involves the international transmission of data, and on occasions processing of personal data by third parties (including social media companies) outside the European Economic Area.

Although this may happen, you can be reassured that the data will always be held securely and in line with the requirements of UK data protection legislation. However, we want you to be aware that by communicating electronically with us, you understand and agree to our processing of personal data in this way. If you do not agree to your personal data being processed by social media companies, please contact us on 020 7420 4444 or email us at [email protected].

Changes
We may make changes to this policy from time to time. If we change our Privacy Policy we will post the changes on this page, and will hold a record of the changes that we make. When we make significant changes to this policy we will communicate with our supporters to tell them what has changed. Please revisit the policy when you want to confirm how we use your personal information.

This policy was last revised 02 November 2018.

Access to your personal information
Under the General Data Protection Regulation, you have the right to request and be sent:

  • confirmation that your data is being processed;
  • access to your personal data; and
  • other supplementary information that we hold about you.

You can make a request by emailing [email protected] or by post using our contact information. We will take steps to confirm your identity before releasing any information to you. We will not charge you for providing the information that you request. We will respond to your request within one calendar month of the request, unless there are exceptional circumstances.

Your rights and acceptance of this policy
By sharing your consent preferences, and using our sites, you consent to the collection and use of information by Global Action Plan in accordance with our Privacy Policy. If you do not agree to this policy, please do not use our sites.

Any personal information submitted via our websites is treated in accordance with current UK data protection legislation (from May 25 2018, we will be working in accordance with the Data Protection Act 2018). To find out more about your entitlements under the current and future data protection legislation, visit the Information Commissioner's website .

Information retention
We will hold your personal information on our systems for as long as is appropriate for the activity that you are supporting (for example participating in a campaign or making a donation to support our work). If you ask for your personal information to be deleted we will manage your request in a transparent way, and in line with our data retention policy. We may, however, retain a secure anonymised record for research and analytical purposes.

We regularly review the data we hold to ensure it is held in line with consent of the person who shared it with us.

Email
Whilst we will take all reasonable steps to protect and secure your personal data, we cannot guarantee the confidentiality of any messages transmitted between you and us via email as these are potentially accessible by the public. We will not be liable to you or anyone else for any loss relating to any email message sent by you to us or by us to you.

Like many organisations, we can estimate how many supporters open our emails by counting how many have downloaded the images in them. We also track how many supporters click the links in our emails. By keeping track of which emails our supporters open and click, we can find out what content is popular, and therefore send more of the kind of emails our supporters read. It also means that if a supporter – like yourself – appears to have stopped opening or clicking emails, we can ask them why. This feedback helps us to improve our emails for the future.

Sensitive information
When using or subscribing to our services, you may choose to provide us with information which is defined as sensitive personal information under the terms of the Data Protection Act 2018. Examples of sensitive information include details of your ethnicity or state of health. As with all the personal information which you provide to us, we shall use and store this information carefully in accordance with this privacy policy. We will always explain why we are collecting this kind of information if we ever ask for it, and we will always ask for your consent to use this data.

This privacy policy is governed by the laws of England, Wales and Northern Ireland.