Data Protection and Privacy Policy

As a registered charity, [Charity name] is committed to safeguarding the privacy and protection of personal data. This Data Protection and Privacy Policy outlines how [Charity name] collects, uses, stores, and protects personal information in compliance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and guidelines provided by the Charity Commission for England & Wales.

Purpose

The purpose of this policy is to:

– Ensure that [Charity name] complies with all relevant data protection legislation.

– Inform staff, volunteers, and stakeholders about their rights regarding personal data.

– Establish clear guidelines for the collection, use, storage, and sharing of personal information.

Scope

2.1 This policy applies to all employees, volunteers, trustees, and third parties working with [Charity name]. It covers all personal data processed by the registered charity, regardless of format, including:

– Paper records

– Digital records

– Email communications

2.2 Personal data refers to any information that relates to an identified or identifiable individual, including but not limited to:

– Names

– Contact details

– Identification numbers

– Financial information

– Health information

Data Protection Principles

3.1 [Charity name] is committed to adhering to the following data protection principles:

– Lawfulness, Fairness, and Transparency:** Personal data will be processed lawfully, fairly, and transparently.

– Purpose Limitation: Personal data will be collected for specified, legitimate purposes and will not be further processed in a manner incompatible with those purposes.

– Data Minimization: Personal data collected will be adequate, relevant, and limited to what is necessary for the purposes of processing.

– Accuracy: Personal data will be accurate and kept up to date; inaccurate data will be rectified or erased without delay.

– Storage Limitation: Personal data will be kept only for as long as necessary to fulfil the purposes for which it was collected.

– Integrity and Confidentiality:** Personal data will be processed securely, protecting against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Legal Basis for Processing Personal Data

4.1 [Charity name] will process personal data based on one or more of the following legal grounds:

– Consent: The individual has given explicit consent for their personal data to be processed for one or more specific purposes.

– Contractual Obligation: Processing is necessary for the performance of a contract to which the individual is a party.

– Legal Obligation: Processing is necessary for compliance with a legal obligation to which [Charity name] is subject.

– Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by [Charity name] or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual.

Collection of Personal Data

5.1 [Charity name] collects personal data through various means, including:

– Direct interactions: Individuals may provide personal data when they apply for membership, donate, volunteer, or engage with the charity in other ways.

– Website forms: Personal data may be collected through online forms, including newsletter sign-ups, event registrations, and contact forms.

– Third-party sources: Personal data may also be obtained from reputable third-party sources, including fundraising platforms and social media, where individuals have consented to sharing their data.

Use of Personal Data

6.1 [Charity name] will use personal data for the following purposes:

– To process donations and manage financial records.

– To communicate with donors, supporters, and beneficiaries.

– To provide information about events, services, and opportunities to engage with the charity.

– To comply with legal obligations, including safeguarding and reporting requirements.

– To carry out surveys and collect feedback to improve services.

Data Sharing and Disclosure

7.1 [Charity name] may share personal data with third parties in the following circumstances:

– Service Providers: Personal data may be shared with third-party service providers who assist in delivering services on behalf of [Charity name], such as payment processors, IT support, and marketing agencies. All service providers will be contractually obligated to protect personal data.

– Legal Requirements: Personal data may be disclosed if required by law, court order, or regulatory authority.

– Safeguarding: Personal data may be shared with relevant authorities if there is a concern for the safety or wellbeing of a vulnerable individual.

Data Security

8.1 [Charity name] is committed to ensuring the security of personal data. The registered charity will implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration, including:

– Access controls to limit data access to authorized personnel only.

– Regular data backups to prevent loss of data.

– Staff training on data protection and privacy practices.

Data Retention

9.1 Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations.

9.2 [Charity name] will review its data retention practices regularly to ensure compliance with this policy and relevant legislation.

Individual Rights

10.1 Individuals have the following rights regarding their personal data:

– Right to Access: Individuals can request access to their personal data held by [Charity name].

– Right to Rectification: Individuals can request the correction of inaccurate personal data.

– Right to Erasure: Individuals can request the deletion of their personal data under certain circumstances.

– Right to Restriction of Processing: Individuals can request a restriction on the processing of their personal data under certain conditions.

– Right to Data Portability: Individuals can request the transfer of their personal data to another organization in a structured, commonly used, and machine-readable format.

– Right to Object: Individuals can object to the processing of their personal data for direct marketing purposes.

10.2 Individuals wishing to exercise any of these rights should submit a written request to [Charity name] at [insert contact information].

Training and Awareness

11.1 [Charity name] will ensure that all employees and volunteers receive training on data protection and privacy to promote awareness and compliance with this policy.

11.2 Regular updates and training sessions will be conducted to keep staff informed of changes in legislation and best practices.

Policy Review

12.1 This Data Protection and Privacy Policy will be reviewed annually by the Board of Trustees of [Charity name] to ensure its continued relevance and effectiveness.

12.2 Any amendments to the policy will be communicated to all staff, volunteers, and stakeholders, and will be made available on [Charity name]’s website.

Signed: …………………………………….

[Chair of the Board of Trustees]

[Date] …………………………………….

Charity Policy templates

Accessibility Policy, Anti-Bribery Policy, Anti-Fraud and Corruption Policy, Anti-Harassment Policy, Board of Trustees Code of Conduct, Charitable Objectives Policy, Child Protection Policy, Code of Conduct for Employees and Volunteers, Community Development Policy, Community Engagement Policy, Complaints Handling Policy, Confidentiality Policy, Conflict of Interest Policy, Conflict Resolution Policy, Crisis Management Policy, Cultural Competence Policy, Data Protection and Privacy Policy, Digital Inclusion Policy, Emergency Preparedness Policy, Environmental and Sustainability Policy, Equality and Diversity Policy, Ethical Fundraising Policy, Exit Policy, Expenses Policy, Feedback and Evaluation Policy, Feedback Mechanism Policy, Financial Controls Policy, Foreign Receipts and Payments Policy, Fundraising Policy, Gift Acceptance and Donation Policy, Governance and Accountability Policy, Grant-Making Policy, Health and Safety Policy, Incident Reporting Policy, Information Sharing Policy, Intellectual Property Policy, Investment Policy, IT and Cybersecurity Policy, Learning and Development Policy, Media and Public Relations Policy, Membership Policy, Mentoring and Coaching Policy, Online Safety Policy, Partnership and Collaboration Policy, Peer Support Policy, Privacy Impact Assessment Policy, Procurement and Supplier Management Policy, Public Benefit Policy, Records Retention Policy, Remuneration and Compensation Policy, Reserves Policy, Risk Management Policy, Safeguarding Vulnerable Beneficiaries Policy, Service Delivery Policy, Social Media and Communications Policy, Social Responsibility Policy, Succession Planning Policy, Technology Use Policy, Transparency and Accountability Policy, Travel and Subsistence Policy, Volunteer Induction and Training Policy, Volunteer Management Policy, Volunteer Rights and Responsibilities Policy, Whistleblowing Policy

Disclaimer:

Naail & Co provides these policy templates solely as guidelines or standard templates to assist charities in developing their own policies in accordance with Charity Commission England & Wales compliance. These templates are not intended to serve as legal or professional advice, and Naail & Co cannot be held responsible or liable for any outcomes arising from their use. It is essential that each registered charity carefully tailors and customizes these policies to reflect its specific needs, structure, and legal obligations. We strongly recommend that charities seek independent legal or professional advice to ensure compliance with all relevant laws and regulations.

Click here for comprehensive charity information.

Our service to you

If you are a self employed, business owner/director of company looking to get your accountancy and taxation matters sorted, look no further. We are pro-active and easily accessible accountants and tax advisors, who will not only ensure that all your filing obligations are up to date with Companies House and HMRC, but also you do not pay a penny more in taxes than you have to. We work on a fixed fee basis and provide same day response to all your phone and email enquiries. We will also allocate a designated accounts manager who would have better understanding of your and business financial and taxation affairs. Book a free consultation call using the link below.