The National Pro Bono Centre (“NPBC”) respects your privacy and is committed to protecting your personal data. The NPBC is required to comply with the law concerning the management and storage of personal data, which is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Compliance with the UK GDPR is overseen by the UK data protection regulator which is the Information Commissioner’s Office (ICO). The NPBC is accountable to the ICO for its data protection compliance.
This website is not intended for children and we do not knowingly collect data relating to children.
The information we collect about you
We may collect your non-sensitive information through our interactions with you. We do not collect any special categories of personal data. This includes details about your race or ethnicity, religious beliefs, political opinions, health information etc. We also do not collect any information about criminal convictions and/or offences.
The information collected is limited to what is adequate, relevant and necessary for the purpose for which it is collected. This may include, but is not limited to, the following directly and indirectly obtained information:
How do we use this information?
We intend to use the information you provide in the following ways.
We will inform you if we intend to use your personal data for any other legitimate business purpose.
In some circumstances we may anonymise or pseudonymise your personal data so that it can no longer be associated with you.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required to do so by law or for regulatory reasons.
We will not share your information with third parties for marketing purposes.
Legal bases for processing your data
When we process your personal data, we rely on one or more of the following lawful grounds:
Fundraising and marketing
We will always aim to respect your preferences when sending you any form of communication. Marketing communications from The National Pro Bono Centre, made on the basis of our legitimate business interests, will also include instructions on how to opt out of receiving further emails from us. You can also contact us at firstname.lastname@example.org.
We do not intentionally transfer your personal data outside the UK or the European Economic Area or as otherwise permitted under international “data-bridge” or “adequacy” decisions made by the UK government relating to the flow of personal data from the UK to another country without the need for further safeguards; for example, the UK Extension to the EU-US Data Privacy Framework. However, if you are visiting our website from a country outside the UK or EEA, this is likely to result in the transfer of information across international boundaries. By visiting this website and communicating electronically with us, you consent to these transfers.
Keeping your data secure
We use all reasonable efforts to safeguard your personal data both electronically and in hard copy. However, submitting your details through the internet cannot be guaranteed to be entirely secure and therefore you submit any information to us via this method at your own risk.
We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality and will be bound be a controller/processor agreement.
Also, we will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. An example of this is where we keep records of donations subject to Gift Aid for at least 6 years in order to comply with HMRC rules. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
Our retention periods are reviewed on a regular basis.
Links to third-party websites
Your legal rights
To exercise any of your legal rights listed below, please contact us using the details found at the end of this policy. You have the right to:
Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. This request will be carried out free of charge and within one month, unless it is clearly unfounded, repetitive or excessive. In such instances we may require longer to process your request and a nominal fee may be charged to cover the costs of providing you with this information. In this instance we will notify you and keep you updated.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, although we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Such requests are subject to any applicable legal and ethical reporting or document retention obligations imposed on us.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third-party) and you want to object to processing as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
Request the transfer of your personal data to you or to a third-party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
We would appreciate the chance to deal with your concerns in the first instance, so please contact us using the below contact details. However, should you wish to escalate your concern, you have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues, the website for which is www.ico.org.uk.
Full name of legal entity: The National Pro Bono Centre
Registered Charity No. 1137708
Email address: email@example.com