Our basis for processing
We are required by data protection law to have an appropriate legal basis for the processing of your personal data. When processing your personal data we rely upon:
- where you’ve given us your consent to contact you or hold your information
- for the performance of a contract or legal agreement with you
- where there is a legal obligation placed upon us – for example if you allow us to claim gift aid
- where it is in your vital interest, such as a medical emergency
- where it is in our legitimate interests to do so
Where we rely upon our legitimate interest to process your data (including contacting you), we only do so after having carefully considered how it might affect the impact upon you and your rights and having weighed this up against our need and potential benefits from contacting you.
Where you provide us with sensitive personal data, such as where you worship or any medical information about you, we will process this using one of the following permitted criteria; with your explicit consent (ie you make clear to us that you are happy for us to hold this information); where you manifestly make this information publicly available – such as on a church website; or where you have been in regular contact with us. We will hold your data securely and only those who need to, will be able to see or use this information.
For organisations such as churches, trusts or schools, we may contact you where we have a legitimate interest – ie we believe it is reasonable to do so. Again we will only do so having carefully considered how it might affect you and the potential benefits from contacting your organisation.
Where we contact you, by calling or emailing you, in a professional capacity rather than a personal one, about your church or to do with your role as a trustee for a grant awarding body for example, we will usually consider you to be a ‘corporate subscriber’ under Data Protection Regulations or Law.
As a ‘corporate subscriber’ we are permitted to contact you unless you tell us that you would like no further contact from us. We may also mail you unless you tell us that you don’t want us to do so. However, we will not make contact by calling you if you have subscribed to the Telephone or Corporate Telephone Preference Service. Further information on this (what is generally called a ‘business to business’ approach)can be obtained at the ICO website and on the Telephone Preference Service website.
We want you to receive the right level of communications in the right way for you, so you can change your preferences at any time. Please see the section ‘Your choices and telling us when things change’ below.
Partnerships and major donors
If you show us that you might be in a position to partner with our work in a greater capacity, we will collect further information based on our legitimate interest. There are more details in the next section, ‘What do we do with it?’. This helps us recommend initial discussions with a relationship manager to supporters that might value it and ensure we use our supporters’ money in the most effective ways.
As a Christian charity, we may process personal data relating to where you worship, or what role you play in a church. We will only do this where you tell us you are happy for us to use this information, or where you choose to make this public (eg. on your church website). We will never disclose this information about you outside Tearfund without your consent.