The Natasha Allergy Research Foundation Privacy Policy

The purpose of this notice is to give you a clear explanation of how The Natasha Allergy Research Foundation (“Natasha’s Foundation”) will collect and use the personal information that you provide to us.  We take care to ensure that we use your information in accordance with all applicable laws concerning the protection of personal information.

Natasha’s Foundation is the UK’s food allergy charity. We are a registered charity in England and Wales (registered charity number 1181098) and in Scotland (SC051610). Through campaigning, education and research, the charity’s mission is to make allergy history, in particular food allergy, and improve the lives of the millions of people in the UK living with food allergies.

Why do we need to hold information on you?

Personal data is information that can be used to identify you. We collect personal data from a number of sources and collect process and store it where it is relevant and needed in your contact with us. How we use your personal information will depend on how you interact with us. The way we use personal information and the legal basis for processing your personal data is outlined below.

There must be a lawful basis for processing personal data and the legal bases we rely on are:

  • Consent: this is where you have given clear consent for your personal data to be used in a certain way.

  • Legitimate interest: this is where your personal data is processed in a way that you would reasonably expect and where we are relying on this basis we have conducted a legitimate interest assessment;

  • Fulfilling contracts: this is where we need to process your personal data in order to fulfil a contractual service to you.

In the table below, we outline the ways we process your personal information and for each purpose the legal basis we rely upon.

 
 
 
 

Personal information we will hold on you

We may collect and store the following personal data where it is relevant and needed in your contact with us:

Personal and Contact Information

o   Name;

o   Gender;

o   Marital status;

o   Ethnicity;

o   Date of birth;

o   Contact details (including postal address, telephone number, e-mail address and social media identity)

Financial Information

o   Financial information such as your bank details or credit card details where you provide these to make a payment or your tax status to enable us to claim gift;

Communication Information

o   Your marketing preferences, including if you wish to receive communications from us;

Relationship Information

o   Donation information;

o   Information that helps us understand our relationship with you and your reasons for supporting the Natasha’s Foundation, including records of our contact with you and any support you provide to us financial or otherwise;

o   Employment information, including your job title and employer;

o   Your relationship with any school or out-of-school learning settings you attend, work at or where your children and/or family attend;

o   Information about the school or out-of-school learning setting you work at, attend or where your children and/or family attend.

Images and Videos

o   Visual information about you, including photographs and videos;

Medical and Personal Experience Information

o   Medical information where you have provided this to us;

o   Personal experiences related to your support for Natasha’s Foundation where you have provided this to us;

o   Personal experiences related to a school or out-of-school learning setting where you have provided this to us;

Website and Social Media

Information about your activities on our website and about the device you use to access these, such as your IP address.

How we will contact you

It is only with your support that we can achieve our aims, and we may wish to keep you up to date with news about our work and the impact of your support. We will do this by post, telephone, email and SMS.  We will only contact you by e-mail if you have given us consent to do so.

You can contact us at any time to ask us to change how we communicate with you, or to stop all communications.

Due diligence

In order to protect the reputation of Natasha’s Foundation we may use your personal information to carry out due diligence on your donation. We may need to use publicly available information to conduct ethical screenings on potential donors of a significant gift, to ensure our reputation is protected. This might include researching the sources of the donor’s money, previous business practices and reputation. 

We do this by collating biographical, financial, corporate and philanthropic information that is publicly available. This publicly available information could be obtained by searching for current directorships listed on Companies House or relevant newspapers or media coverage about an individual or company.

Storing and sharing your personal information

We will only share your data when we need to do so and the main reason for doing so will be to provide you with the service you require or because we use the services of a specialist company that do not have the expertise needed to deliver the service.

We may share your information with a third party in the following circumstances:

Financial, Legal and Regulatory

·       If you make or receive payments to or from us, with BACS clearing houses, our bank and card payment providers;

·       If you tell us that you wish to claim gift aid, with HMRC;

·       If we have a regulatory or legal obligation we may share your personal information with the relevant regulatory and/or legal organisations as well as our legal advisors and auditors;

Communications and Campaigns

·       If you consent to receive email or SMS communications from us, with companies that provide the technology and administration skills to send these communications;

·       If you complete a survey for us, with companies that deliver the online survey tool;

Fundraising and Events

·       If you sign up to attend an event that promotes the Natasha’s Foundation and/or helps to fundraise for the Natasha’s Foundation with the company that manages the event or online booking/registration system for the event;

·       If you order fundraising materials from us, with companies that provide fulfilment services to process and deliver your order;

Press and Media

·       If you consent to us using your image and/or the image of your child and/or your personal story to share, with PR companies, the media, social media platforms and current or potential donors;

Website

·       If you access our website, with the website company that develops and maintains the website.

How Long Your Data is Stored For

The information we hold on you may be retained for archiving and legal purposes for up to six years. If you unsubscribe to hear from us and do not engage with us in anyway we will delete your data two years after the date of your last interaction with us.

Storing Your Data Outside of the EEA

In very limited circumstances, the Natasha’s Foundation may transfer your personal data outside the European Economic Area (EEA). We will ensure that the country to which your personal data is transferred ensures an adequate level of protection for your personal data.

Your Rights in Relation to your Personal Data

You have the following rights in relation to the personal data we process:

  • The right to access your personal data: you can submit a request to find out the information we hold and process about you.
     

  • The right to object to the processing of your personal data: if we are processing your personal data under the legitimate interest lawful basis.
     

  • The right to have your personal data rectified: you can request that we update and correct your personal data if it is incorrect or incomplete.
     

  • The right of portability of your personal data: you can request that some of your personal data is transferred to you or to another organisation.
     

  • The right to be forgotten: you can request that we delete your personal data.
     

  • The right to have your personal data restricted: you can request that we stop processing your personal data and only store it.
     

  • The right to stop direct marketing:  you can object to direct marketing at any point and we will not send you any further marketing communications unless you change your mind.

  • The right to withdraw consent: if we are relying on your consent as our lawful basis for processing your personal data, you can withdraw your consent for processing at any time.

Complaints

If you are unhappy with how we have processed your personal information, please in the first instance contact us:

The Natasha Allergy Research Foundation, First Floor, 85 Great Portland Street, London W1W 7LT or info@narf.org.uk.

If you are still unhappy you may also contact the Information Commissioners Office on 0303 123 111.

Updates to the Privacy Policy

We may at our discretion amend this Privacy Policy from time to time.  Please check here to ensure you understand the version of our Privacy Policy which will apply at that time. This Privacy Policy was last updated in June 2024.