Privacy Policy

AVIATION FOR GOOD 

Privacy Notice v 03

Contents

Introduction

We are committed to protecting your privacy and promise to respect your personal information and do all we can to keep it safe. We always aim to communicate with you respectfully, effectively and efficiently. Our communicatons give clear choices, and we include information on how to change your communication preferences whenever we contact you. This helps us send you news of our work only if you have explicitly stated you are happy for us to do so in ways that are most convenient to you (email, SMS, phone). We aim to be clear about how we obtain your details and only process them in ways we believe you would reasonably expect. This includes not selling or sharing personal details with third parties for the purposes of their marketing.

Who are we and how can you contact us?

AVIATION FOR GOOD is the data controller for your personal data. We are a registered charity in England and Wales (Charity Number 1215270).

Our data protection issues are handled by an independent third party and you can contact them using the following details:

Postal address:

Data Protection Officer – Aviation For Good
Exigenesys Management Service Limited

Registered Address: 81 Common Road

Claygate

Surrey

KT10 0HU

Tel: 0207 754 0393

Web: exigenesys.co.uk

‍

How we collect your personal data

We receive your personal data both directly and indirectly.

Receiving your personal data directly

We receive your personal data when you contact AVIATION FOR GOOD to make a donation, register to receive news about our work, sign up to AVIATION FOR GOOD’s online content, or telephone, email, write to or text AVIATION FOR GOOD, engage with AVIATION FOR GOOD via social media channels or attend one of our events.

Receiving your personal data indirectly

We sometimes receive your personal data indirectly. For example, your information may be shared with us by independent fundraising sites such as JustGiving when you give a gift. These organisations will only do so with your consent if you have indicated that you wish to support AVIATION FOR GOOD. You should check their Privacy Notice when providing your information to understand fully how they will process your data.

Publicly available data

In addition, we may seek further information about you that is publicly available from external sources. We use this to gain a better understanding of our supporters to enable us to communicate with you in more appropriate ways that may suit your interests. 

If you have not heard from us before, we will contact you to provide you with our Privacy Notice to ensure you are aware that AVIATION FOR GOOD is processing your data and the reaons why we are doing this. 

The information we get from other organisations may depend on your privacy settings or the responses and permissions you give to that other organisation, so you should check them regularly.

This publicly available information comes from the following sources:

Social media 

Depending on your settings or the Privacy Notices for social media and messaging services such as Facebook, WhatsApp or LinkedIn, we might have permission to access information from those sources. We will not add this information to your personal details.

Other information that is available publicly 

This may include information found in publicly available sources such as Companies House, LinkedIn, the Charity Commission, companies, grant-making trusts and Government websites, biographical directories and information that has been published in reputable media.

When you use our website

Like most websites, we use ‘cookies’ to make the site more user friendly. Cookies are small text files that sites transfer to your device (computer, phone or tablet) and make interacting with a website faster and easier – for example, by automatically filling in your name and address in text fields.

AVIATION FOR GOOD may store information about you and your activity in cookies. If you want to delete any cookies that are already on your computer, please refer to the instructions for your file management software to locate the file or directory that stores cookies.

For more information about cookies, how we use them and your personal consent preferences, please click here. (NEED TO ADAPT AFG)

What personal data do we collect?

If you support us — for example, make a donation, sign up to receive news of our work, or attend an event — we will usually collect:

• Your name.
• Your contact details, including postal address, email, telephone numbers, along with your preferences as to which of these we should use to contact you in the future.
• Your date of birth.
• Bank account details if you make a regular donation by direct debit or standing order.
• Debit or credit card details used to donate to us or when ordering resources – this could be online, over the phone or by mail. We will process your information securely and in accordance with the Payment Card Industry Standards. Your details are only used to complete the transaction requested; we do not store your debit or credit card details. If you have provided them physically, they are securely destroyed once your donation or payment has completed.
• Your Gift Aid status.
• Your position within an organisation or charitable trust (if relevant).
• In some cases, we may also gather additional personal information which may include your interests in aviation, overseas development, philanthropic activities and your other interests.
• Other personal information or sensitive data you share with us, such as your family information and any appropriate health issues you may have told us about that will help us communicate with you in the most appropriate way (eg, large print).

Why do we process your personal data?

The information we gather helps us to send you what you want when you want it, to fulfil orders for resources, and send you updates and information about our work.

It also helps us to shape our fundraising activities to ensure that our communication is relevant and timely, and provides you with an excellent experience of supporting AVIATION FOR GOOD. Importantly, having accurate information that we can analyse enables us to tailor approaches and to be wise stewards of the resources entrusted to us, ensuring that the maximum amount possible goes to providing life-saving flights in developing countries.

We do not sell or share personal details to third parties for the purposes of their marketing.

The below table shows the purposes for which we process your personal data and the lawful bases we rely on for those purposes.

Purposes

Lawful basis

Provide you with the information, resources or services you have requested.

Your consent or legitimate interest, as we have an interest in providing you with the information you have requested.

Keep you up to date with the work you are supporting and ask for financial and non-financial support. 

Ensure we know how you prefer to be contacted. 

For communications sent by electronic mail or SMS: consent.

For communications over the phone or by post: legitimate interest.

Administer your donation, including processing Gift Aid.

Legitimate interest, so that your donation can be properly processed and received by us.

For Gift Aid, to fulfil our legal obligations (Ss. 413-430 of the Income Tax Act 2007).

Keep a record of your correspondence, donations and purchase history, questions you have asked us, or comments or complaints you have made.

Legitimate interest to communicate with you and improve our activities. For financial contributions, to fulfil our legal obligations under Part 8 of the Charities Act 2011.

Understand how we can improve your supporter experience based on your interests and interaction with us. 

Understand how we can improve our services, and the resources or information we send out.

Legitimate interest so that we can improve our activities.

Contact you in your capacity as a representative of an organisation such as a business or charitable trust.

For communications sent by electronic mail or SMS: consent.

For communications over the phone or by post: legitimate interest.

Ensure that potentially vulnerable people are treated appropriately to financial giving .

Legitimate interest to ensure the people we interact with are treated appropriately.

If you make a substantial gift to our work, we may contact you to thank you and to discuss how you might want to develop your interest in our work. This would include having a discussion with you about the methods of contact most suitable for you.

For communications sent by electronic mail or SMS: consent.

For communications over the phone or by post: legitimate interest.

We may use publicly available data to build a profile of you to enable us to communicate with you in more appropriate ways that may suit your interests. We are more likely to do this if you make a substantial gift to our work. 

We may also do this for potential supporters that we have identified (in this case we will only contact you by phone, post or in person).

Legitimate interest to ensure we interact appropriately with our substantial givers and attract new supporters.

‍

Protecting your personal data

The security of your information is very important to us. We ensure that there are appropriate controls and procedures in place to protect your personal details. For example, information you submit on a physical form or when filling out online forms is encrypted and stored on a secure server. We also use encryption and secure servers when you make a donation via our website.

However, despite all the security and protection we put in place, the Internet cannot be guaranteed to be 100% secure. 

We undertake regular reviews of who has access to information we hold to ensure that your details are only accessible by appropriately trained and authorised staff.

Who do we share your personal data with?

Some of your information will be passed to third-party service providers that perform functions on our behalf, such as:

• Digital advertising/marketing including social media organisations.
• Paper advertising/marketing.
• Payment processing.
• Managing data.
• Storing data.
• Analysing data. 
• Research and lead generation.

These companies may only use your information to perform these functions and may not use it for any other purposes. We carry out comprehensive checks on these companies before we work with them and put a contract in place, wherever possible, that sets out our expectations and requirements, especially regarding how they manage the personal data they have collected or to which they have access. They are required to destroy this information once the function for which it has been transferred has been carried out.

If required, we may need to disclose your details to the police, regulatory bodies or legal advisors.

International data transfers

Due to the nature of servers and cloud-based storage all over the world, this may mean that, during the processing of your data, it leaves the UK. Although they may not be subject to the same data protection laws as in the UK, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. 

For data that is stored outside of the UK, we share data to countries for which an adequacy decision is in place. If there is no adequacy decision in place, we have Standard Contractual Clauses (SCCs) in place with the relevant third parties.

If you would like further details of the protections we have put in place regarding international data transfers, please contact us.

How long do we keep your personal data?

We intend to minimise the amount of personal data that we store about you. We will keep personal data for the shortest time necessary in accordance with our Retention Policy.

Where there are legal obligations in place, we may have to keep your data for longer. For example, we will keep a record of any donations you have made for at least seven years.

If you ask us to cease communications with you, we will keep a record of your contact details and appropriate information to enable us to comply with your request.

Your data rights

You have the following rights under data protection law. You can exercise your rights by contacting us using the contact details at the top of this privacy notice. We will respond to your request without undue delay and in any case within one month. It may be necessary to take steps to ascertain your identity if there are reasonable doubts about your identity, in which case we may request further information from you.

Right of access

You have the right to ask for a copy of the information we hold about you.

Right to rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. If there are any discrepancies in the details we provide, please let us know and we will correct them.

Right to erasure

You have the right to ask us to erase your personal information in certain circumstances.

Right to restriction of processing

You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Right to object and withdraw consent

You have the right to object to the processing of your personal information in certain circumstances. Where processing is based on consent, you have the right to withdraw your consent at any time. You can also change or stop what you receive from us by following the instructions at the bottom of any postal communication or email, or you can contact us by phone at any time.

Right to portability

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

Complaints and questions

If you have any concerns or questions about our use of your personal information, you can contact us using our contact details at the top of this Privacy Notice. We will respond to you within one month.

If we are unable to resolve your concerns, you can also complain to the ICO or your local supervisory authority.

ICO website: https://www.ico.org.uk 

Changes to this Privacy Notice

We may update this Privacy Notice from time to time to ensure it provides fully up-to-date information. The latest version of our Privacy Notice can always be found on this page. For any major changes, we may contact directly you to inform you of these.

‍