Privacy Policy

 

Privacy Policy

This is the privacy policy of FARA Foundation (known as FARA Charity or FARA), which is a company registered in England and Wales (company number 07432706) and its registered office is on the 2nd Floor, Suite 1, 8 Waldegrave Road, Teddington TW11 8HT. It is also registered with the Charity Commission (registration number 1139349).

FARA is committed to transforming the lives of marginalised children and young people from Romania’s poorest communities. We are also committed to protecting and respecting your privacy. This privacy policy explains what personal information we collect and how we will use it.

This privacy policy contains the information in the following sections:

  1. Why do we hold and process your personal data
  2. What personal information do we collect?
  3. How do we deal with online donations and events?
  4. How do we use your personal information?
  5. Where do we store your personal information and how it is kept secure?
  6. Who do we share your personal information with?
  7. How long do we keep your personal information?
  8. Your rights in relation to the personal information we hold
  9. Contacting Us
  10. Changes to this privacy policy

 

  1. Why do we hold and process your personal data?

We hold and process your personal data for a number of reasons:

  • To record the financial donations and/or donations of goods made by our supporters, whether online or in our shops
  • To support FARA representatives, for example when participating in fundraising events
  • To record the fundraising and/or campaigning activities of our supporters
  • To support community-based fundraising and campaigning
  • To record our communications with our supporters
  • To claim Gift Aid on donations
  • To fulfil contractual obligations entered into with supporters e.g. for online purchases or purchases in our shops
  • To keep people safe, whether they are visitors to our shops, staff or participants in events
  • To comply with legal obligations
  • To manage our organisation
  • To respond to or fulfil any communications, requests, complaints or queries from you
  • To establish, defend or enforce legal claims.

 

  1. What personal information do we collect?

We only collect personal data relevant to the transactions or interactions you have with FARA. Whatever your interaction with us this information will be minimal and linked to the purpose for which we need it.

Both financial donations and donations of goods may be Gift Aided. If you wish to make a Gift Aided donation to FARA we will need to collect the following information from you: contact details (name, address, email address, telephone number, date, how you signed up) and whether you are a UK taxpayer.

If you make a donation to us (either Gift Aided on non-Gift Aided), purchase an item in store or online or take a campaign action, you may be offered the option to be added to our supporter database and to join our mailing list. We also offer people the opportunity to sign up to our mailing list on our website.

If you agree to be added to the database and join the mailing list to receive news and information about our fundraising and how your help makes a difference to the lives of children and young adults in Romania, we will collect your name, postal or email address and may record your preferences as to the types of information you would like to receive.

If you visit one of our shops or sites or donate items to one of our shops we may capture you on CCTV, or you may give information to our staff (for example via a questionnaire, feedback form or customer survey).

If you telephone, email, write to or text FARA, or engage with FARA via social media channels, we may receive and retain personal information, the nature of which will depend on the nature of your contact but is likely to include your name, contact details and the reason for your communication.

If you participate in an event, we may take your photograph or video or interview you.

If you are a campaigner or work with any of our team which runs a campaign, we may collect information such as correspondence with you regarding campaigning, details of your background and activities with us or relating to the issue, the events you attend, or how we would like to work with you.

If you contact us by email, phone, or post, to discuss or ask for assistance with donating money or goods, legacies or to find out more about our work, we may retain your name and contact details to enable us to respond to any such query.

We may also collect your name and contact details from third parties who supply services to us or who assist us in the running of FARA.  These include: Nisyst, who provide the ChariotWeb point of sale till system in our retail stores, which we use to assist in processing Gift Aided and non-Gift Aided stock donations; Beacon Apps Ltd, trading as Beacon, who host our supporter database and support us with online donations, and Online Giving Ltd, trading as Enthuse, who support us with fundraising event participation.

We do not collect any special category data (for example about your political views, sexual orientation, health information), unless we do so with your consent.

  1. How do we deal with online donations and events?

The following parties may process your personal data on our behalf for the purposes detailed below:

  • If you wish to donate to FARA online, as a one-off or to set up a recurring gift, you will be directed to the website of our partner, currently Beacon.
  • If you take part in an event to fundraise for FARA, you will be directed to the website of our partner, Enthuse.

We do not pass any personal data to Beacon or Enthuse, and we do not receive any personal information from them, when an anonymous donation is made. If a donation is not made on an anonymous basis, we will receive from Beacon or Enthuse the name, address, and email address of the donor to enable us to thank them for their donation and contact them once in respect of whether they wish to receive future updates as to our work. We may also receive dates of birth, gender, job information, links to social media profiles, interests, supporter preferences, financial information, attendance of events and marketing information from Beacon. We may also receive from Enthuse other data captured by custom fields or other data added by you to fundraising pages, along with other data collected and processed by Enthuse in relation to their events product (except data relating to card payments and technical details). Please consult Beacon’s and Enthuse’s individual privacy policies for further information.

All your transactions are secure and meet strict compliance standards including HMRC, the Charity Commission, Payment Card Industry (data security standards) and data protection legislation. This means any data sent to and from our secure servers, is encrypted to prevent any possible fraud. We do not keep credit card details following a transaction.

We do not allow our third-party service providers to use your personal data for their own purposes and we only permit them to process your personal data for specified purposes and in accordance with our instructions.

If you follow a link on our website, the other websites (including those of Beacon and Enthuse) will have their own privacy policies and you should check these before you submit any personal information. Other websites may use cookies to track your preferences.

Donations can also be made to us through other third-party sites including Just Giving which may share your data with us. You can read their Privacy Policy here.

  1. How do we use your personal information?

We will use your personal information for the following purposes:

  • For reasons related to administering any donations you have made, the completion of commercial or other transactions you have entered into with FARA or the activity or online content you have signed up for.
  • To confirm receipt of a donation.
  • For internal record keeping so as to keep a record of your relationship with us.
  • If you ask to be added to our database, we will use the information you provide to send you news about our work in Romania and our fundraising activities in accordance with your stated preferences. We will do so on the basis that you have consented to us processing your information in this way. You can stop receiving such communications from us at any time as these communications provide easy ways to unsubscribe or update your preferences. You can in any event, unsubscribe or update your preferences at any time by emailing  [email protected] or calling +44 (0) 20 8973 0910
  • To provide logistical and fundraising information to people who are taking part in a fundraising event in aid of FARA, such as race events.
  • To communicate with FARA representatives.
  • To implement any instructions you give us with regard to withdrawing consent to send fundraising information.
  • If you have made a donation to FARA and asked for this donation to be Gift Aided, then the personal data you supply will be used to enable us to claim Gift Aid. We may also use any personal data supplied by donors to contact them to thank them for their donation and to enquire as whether they would like to receive further communication from us. We process your information in these circumstances on the basis that we have a legitimate interest in doing so.
  • In relation to any correspondence you have entered into with us whether by letter, email, text, social media, message board or any other means, we will use any personal data supplied solely for the purpose of endeavouring to answer that enquiry or contact you about any content you provide.
  • To ensure that the data we hold about you is accurate and up to date, we may occasionally use information sources that are in the public domain to verify your contact details.

We will not use your personal information for any purpose not explained in this privacy policy.

  1. Where do we store your personal information and how it is kept secure?

Some of the information you provide to us will be transmitted electronically, e.g., information provided by email. We would remind you that information transmitted via the internet is not completely secure and although we will do our best to protect any information transmitted in this way, we cannot guarantee its complete security. We have put in place appropriate security measures to prevent your personal data being accidentally lost, accessed, or used in an unauthorised way, altered, or disclosed. All information you provide to us is stored on our secure servers located in the United Kingdom. No information you provide to us is transferred to, or stored at, a destination outside the United Kingdom or European Economic Area. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

  1. Who do we share your personal information with?

We may share your personal information if we are under a specific legal obligation to do so (for example where we are required to provide your details to HMRC in order that we may claim Gift Aid on your donations).

We may need to share limited information with our service providers who help us to prepare and send you our communications or process your donations, credit notes and other responses. However, we do not allow these organisations to use your data for their own purposes and we take care to ensure that they keep your data secure and delete it when it is no longer needed.

We may share your data with other suppliers and advisers (for example, to obtain legal or other professional advice). We may also disclose your details where we are under a legal or regulatory duty to do so (for example with the police or regulatory bodies) or where we consider it necessary to protect the rights, property or safety of FARA, its personnel, visitors, users or others.

We use the services of email services providers to send news and fundraising emails out to those who have consented to receiving information about the work of FARA. Except as set out above, we will not share your personal information with any other party (whether for marketing or otherwise).

Our e-commerce website   https://shop.faracharity.org/  is managed for us by Shopify. Please see the privacy policy at https://shop.faracharity.org/pages/privacy-policy for information about how personal data collected via that website is used.

  1. How long do we keep your personal information?

We will keep your information for the following periods of time:

Purpose for which personal information was givenHow long do we keep it?
To make a donation (Gift Aided or non-Gift Aided) 6 years from the end of the accounting period in which the last claim was made
To sign up for email or postal updates about fundraising and similar matters For the duration of consent (to be deleted upon consent being   withdrawn) unless deleted by us earlier as part of a periodic database cleanse process
To ask for assistance with making a donation (financial or goods) leave a legacy in a will or make a general enquiry to find out more about our work 6 years
To sign up to an event or to campaign For the duration of consent (to be deleted upon consent being   withdrawn) unless deleted by us earlier as part of a periodic database cleanse process
To interact with us using publicly available content, such as via social media channels Retained in accordance with the retention policies of the relevant social media channel unless you ask us to delete it sooner

 

  1. Your rights in relation to the personal information we hold.

You have the right to:

  • Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. Request the transfer of your personal data to you or to a third party.
  • Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services or information to you. We will advise you if this is the case at the time you withdraw your consent.
  1. Contacting Us

If you would like to communicate with us about any of these matters, or if you have any other queries about the matters mentioned in this privacy statement, please contact us using one of the following options:

Website:www.faracharity.org
Email:[email protected]
Post: FARA Foundation, Charity Head Office, 2nd Floor, Suite 1, 8 Waldegrave Road, Teddington TW11 8HT

Telephone: +44 (0) 20 8973 0910

You also have the right to complain to the Information Commissioner about the way in which we collect and use your personal data: www.ico.org.uk/concerns or telephone 0303 123 1113.

  1. Changes to this privacy policy

This privacy policy is effective from April 2025. We may change this privacy policy from time to time by updating this webpage.

 

Last updated April 2025