• About
  • Strategy
  • The Faithfull Papers
  • Scotland
  • Wales
  • Our founder
  • Our people
    • Leadership
    • Trustees
    • Patrons
  • Our values
  • Annual report
  • Jobs
• For the public
  • Stop It Now helpline
  • Inform Plus and Engage Plus - for people who've offended online
  • Inform - for families of people who've offended online
  • Inform Young People - for YP who have got in trouble online
  • Get Help - for people who've offended online and their families
  • Get Support - for people concerned about their thoughts
  • Parents Protect - information for parents
  • Circles of support and accountability
• For professionals
  • Stop It Now helpline
  • Our training courses
  • Assessments, intervention and consultancy
  • International Eradicating Child Sexual Abuse (ECSA) Project
• Support us
  • How your money is spent
  • Single donation
  • Monthly donation
  • Helpline appeal
  • Fundraising
  • Online shopping
  • Leave a gift in your will
• Media centre
  • News
• Contact
  • Contact Details
  • Research requests and information for students
  • Data protection

Privacy Policy

• Privacy Policy & Notice

• PRIVACY POLICY FOR CHILDREN

This privacy policy also applies to our websites: stopitnow.org.uk, parentsprotect.co.uk, ecsa.lucyfaithfull.org and theupstreamproject.org.uk

As a charity committed to preventing the sexual abuse of children the Lucy Faithfull Foundation (LFF) puts safety at the heart of our organisation and this includes the use of any personal information. We are fully committed to protecting your information and will be open and transparent about how and why we are using it. We operate in full compliance with General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) 2018.

WHat is the lucy faithfull foundation?

The Lucy Faithfull Foundation is a leading child protection charity. We specialise in tackling and preventing the sexual abuse of children. Since 1992 we have been working with governments, professionals and the public to prevent child sexual abuse. We run the Stop It Now! helpline, Stop It Now! Wales and Stop It Now Scotland as well as the Parents Protect website.

The Lucy Faithfull Foundation is a Registered Charity No. 1013025 and is a company limited by guarantee. Registered in England No. 2729957. Our registered office is: 2 Birch House, Harris Business Park, Hanbury Road, Stoke Prior, Bromsgrove, B60 4DJ. We are registered with the UK Information Commissioners Office under the reference Z4895696

About this policy

This privacy notice explains how we look after your personal data (in all situations where we collect your data) and sets out your privacy rights and also explains how the law and our approach to privacy and personal data protects you.

This privacy notice supplements any other privacy notices that we may provide to you at the point that we collect data from you and should be read in conjunction with those notices.

INTRODUCTION

The Lucy Faithfull Foundation promises to respect any personal data you share with us, or that we get from other organisations, and keep it safe. We aim to be clear when we collect your data and not do anything you wouldn't reasonably expect.

Developing a better understanding of our supporters through their personal data allows us make better decisions, fundraise more efficiently and, ultimately, helps us to deliver our mission of preventing the sexual abuse of children and young people.

OUR STATUS AND DETAILS

For the purpose of the GDPR we are the data controller and any enquiry regarding the collection or processing of your data should be addressed to our Data Protection Officer using the contact details below:

Name: Mr Adrian McNulty  Email address: amcnulty@lucyfaithfull.org.uk

Postal address: Mr Adrian McNulty, The Lucy Faithfull Foundation, 2 Birch House, Harris Business Park, Hanbury Road, Stoke Prior, Bromsgrove, B60 4DJ

By using our websites, you consent to this policy. 

HOW WE COLLECT INFORMATION ABOUT YOU

When we collect it as you use our WEBSITES

what information do we collect from you?

Supporters

If you support us, for example through donating, or requesting resources and materials, we may collect and process information about you. Depending on the nature of your engagement with us, this personal information may include your name, postal address, telephone number or mobile number, email address, your date of birth or your bank or credit card details if you have donated to us directly.

We may also ask for information relating to your health (for example if you are taking part in a high-risk event). We may also ask why you have decided to donate to us, but will only ask you to answer these questions if you feel comfortable doing so. We are legally required to hold some personal information to fulfil statutory obligations, for example the collection of Gift Aid or to support certain financial transactions.

We will always want to acknowledge receipt and thank anyone who chooses to aid our mission by donating to us. Where a donor has supplied contact details we will endeavour to thank them for their generosity which we constitute being a legitimate interest. We will not subsequently contact them, unless they opt-in to subscribe to our newsletters or to receive other relevant updates about the organisation.

If you contact us, we may keep a record of that correspondence. We will mainly use your data to:

• Provide you with the information or resources you asked for
• Administer your donation or support your fundraising efforts, including processing gift aid, and thanking you for your support
• Keep a record of your relationship with us and keep you up to date with news and information, if you have opted in to receive further information
• Ensure we know how you prefer to be contacted
• Understand how we can improve our services and information
• We may also use your personal information to detect and reduce fraud and credit risk

Children's data

We sometimes collect and manage information from children who fundraise for us. We aim to manage it in a way which is appropriate to the age of the child. If appropriate, we will seek consent from a parent or guardian before collecting information about children and we will only hold what we need to for the requirements of the engagement.

Direct Marketing

With your consent, we will contact you to let you know about the services we provide and our most recent achievements. We may also let you know about ways you can support us and ask for donations or support. We will only contact you using the communications preferences you have given us. If you opt-in and then later change your mind, that is fine. You just need to let us know by emailing contact@lucyfaithfull.org.uk or calling 01372 847 160.

We will never rent, sell or share personal details to other organisations for use by them in their own direct marketing activities. However, if we run an event in partnership with another named organisation your details may need to be shared with them. We will be very clear what will happen to your data when you register.

Service users

When individuals are referred to us for our services, we will receive personal information, including name, address, date of birth, medical and criminal offence data, as well as other relevant information to enable us to commence work with the individual(s).

Personal information may also be collected directly from individuals in the course of the engagement with us, in order to provide as full a picture e.g. for assessment purposes.

All personal information collected for the purposes of engagement with service users is treated with the utmost sensitivity and care, and subject to stringent data security protocols.

HOW DO WE USE THE INFORMATION WE COLLECT FROM YOU?

• To provide you with information, services or products that you’ve requested or which we feel may interest you
• To provide key services for preventing child sexual abuse
• To enable us to support you in our work with you
• To evaluate and improve the services we provide
• To allow you to interact with our website
• To make our marketing campaigns more targeted and relevant to potential donors and customers
• To conduct prospect research
• To promote our activities
• To assess your suitability as part of our recruitment process

Our lawful basis for processing

Under data protection legislation we must be clear with you what is our lawful reason for processing your data. While there are a range of lawful reasons to process your data, in the main we have identified legitimate interest as our main basis. This is explained below.

Legitimate interest.  Through the operation of our helpline, our fundraising and marketing, service delivery and our public awareness campaigning LFF process your data to conduct its core activity in its mission to eradicate child sexual abuse

Consent. This is where we've asked for your permission to use your personal data in a specific way, and you've agreed for example marketing.

Contract. We may process your personal data as part of an agreement you have with us to deliver a service to you.

Legal obligation. We may collect or share your personal data where we are required to do so by law. This can be as part of our responsibilities to fulfil regulatory requirements (e.g. The Charity Commission) or as part of financial audit regulation.

Vital interests. We may have to process your data if that is necessary toprotect someone’s life, for example when we become or made aware of a risk to someone’s health during any interaction with you.

Public task. We process data at times in the public interest for example by sharing data with public bodies about number of helpline calls received or visits to our websites

COOKIE POLICY

A cookie is a small text file that is sent to your computer's hard drive when you visit a website. A cookie typically contains the name of the website from which it has come, the lifespan of the cookie and a value. The value is usually a unique code that will only make sense to the website that has issued it. Cookies can also be used to measure how people use websites and what kind of browsers or devices they're using.

Like most websites, we use cookies to gather information about your computer for our services and to provide statistical information regarding the use of our website. We use Google Analytics to interpret our website’s traffic to ensure it is working in the best way possible and to allow us to continually improve the experience for users.  A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. The information provided by such cookies will not identify you personally - it is statistical data about our visitors and their use of our website. This statistical data does not identify any personal details whatsoever.

For more information generally on how Google uses your data please visit - http://www.google.com/policies/privacy/partners/

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not.

Cookies also enable us to collect details of your visits to our website, including but not limited to traffic data, location data, weblogs, and other communication data and the resources that you access.

When you visit our websites, you'll see this notice ‘We use Cookies to ensure we give you the best experience on our website' with a 'Find out more about Cookies' link to this Privacy Notice. As above, you have the right to accept or reject those cookies. We are therefore relying on your consent as our lawful basis for using Cookies.

We use the following cookies on our website:

Google Analytics

Google Analytics provides anonymous statistics on website usage. Cookies are used to track the source of a visitor, their session on the website (to associate multiple page views to one visit) and whether they are a new or returning visitor.

Other ways we collect information about you when you use our websites

Following links to third party websites 

Our websites may include links to other websites of interest, not owned or managed by The Lucy Faithfull Foundation. We try our best to only link to reputable websites; however, once you have used these links to leave our site, we cannot be held responsible for the privacy of data collected by sites not managed by us, nor can we accept responsibility or liability for those policies. For this reason, you should always look at the privacy statement applicable to the website in question.

Opting-in to receive information from us

We have moved to an 'opt-in only' communications policy. This means that we will only send communications to those that have explicitly stated that they are happy for us to do so via their preferred channel(s) (email, phone or post).

Our communications include information about our latest achievements, campaigns and activities, and the services we provide. If you would like to receive such communications but have not opted-in please contact us by email contact@lucyfaithfull.org.uk, by phone 01372 847 160 or by completing an online form (https://www.lucyfaithfull.org.uk/signup.htm / https://www.stopitnow.org.uk/signing-up-for-updates.htm).

When you donate to us, we will ask you to complete a communications preference form. If you sign up for updates through our website, we will communicate by your preferred method and periodically ask you to confirm your preferences.

If you contact us, we may keep a record of that correspondence. We will mainly use your data to:

• Provide you with the information or resources you asked for
• Administer your donation or support your fundraising efforts, including processing gift aid, and thanking you for your support
• Keep a record of your relationship with us and keep you up to date with news and information
• Ensure we know how you prefer to be contacted
• Understand how we can improve our services and information
• We may also use your personal information to detect and reduce fraud and credit risk

HOW WE WILL CONTACT YOU

We will contact you in the way you have specified. If you want to change your contact preferences please email contact@lucyfaithfull.org.uk or call 01372 847 160.

HOW WE HANDLE YOUR DATA AND KEEP IT SAFE

We will never rent, sell or share personal details to other organisations for use by them in their own direct marketing activities. We ensure that there are appropriate technical controls in place to protect your personal details. For example our network is protected and routinely monitored.

External companies sometimes collect or process personal data on our behalf, for example through Give as you Live. We do comprehensive checks on these companies before suggesting you use them. However, when using third party sites, like Give as you Live, you should check their privacy policy when you provide your data to understand fully how they will process your information. Some of our suppliers may run their operations outside the European Economic Area (EEA). Although they may not be subject to same data protection laws as companies based in the UK, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to this transfer, storing or processing at a location outside the EEA.

We may, for financial or technical reasons, from time to time need to use the services of an internet services provider located outside of the European Economic Area. However, we shall ensure that your personal information will be held by those internet service providers in compliance with European data protection regulations. By submitting your personal information to our website, you agree to this transfer, storing or processing at a location outside the European Economic Area. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

In cases when we use external websites provided by other organisations such as Twitter or Facebook, then we would ask you to consult their privacy policies.

We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or in order to enforce or apply our terms of use for this website or other agreements; or to protect the rights, property or safety of The Lucy Faithfull Foundation, our donors or others. This includes exchanging information with other companies and organisations for the purposes of fraud detection and protection.

We may also collect non-personal data such as aggregated data, which is data that may be obtained from your personal data, but which does not directly or indirectly identify you. This may include usage data detailing how you use our website and the features and areas that you have interacted with.

KEEPING YOUR INFORMATION UP TO DATE

It is incredibly helpful if you can help us keep your information up to date. If you want to let us know if your contact details have changed, or if you want to change your communications preferences, you can email contact@lucyfaithfull.org.uk or call 01373 847160.

HOW WE HANDLE DIRECT DEBIT OR CREDIT CARD INFORMATION

The Lucy Faithfull Foundation is payment card industry (PCI) compliant and uses external Payment Card Industry Data Security Standard (PCI DSS) compliant providers to process debit or credit card payments we take by phone. The details are entered into the application whilst the payee is on the phone and we do not store PCI data on our own systems.

Controlling the use of your data

Where we rely on consent as the lawful basis for processing your data you can revoke or vary that consent at any time.

If you do not want us to use your data or want to vary the consent that you have provided you can write to us at The Lucy Faithfull Foundation, 2 Birch House, Harris Business Park, Hanbury Road, Stoke Prior, Bromsgrove, B60 4DJ or email us at contact@lucyfaithfull.org.uk at any time.

Security

The transmission of information via the internet or email is not completely secure.  Although we will do our best to protect your personal data, we cannot guarantee the security of data while you are transmitting it to our site; any such transmission is at your own risk.

We have put in place security measures to prevent your data from accidental, loss or disclosure. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.

In the event of a data breach we will notify the ICO and you in the event that the breach results in any likelihood of loss or damage to you.

Data retention

The length of time that we retain, and store data depends on the purpose for which it was collected. We will only store data for as long as is required to fulfil that purpose, or for the purpose of satisfying legal requirements.

It is a legal requirement that we keep certain data about our customers and suppliers for at least seven years. The type of data includes contact, identity, financial and transaction data.

Where you have requested that we provide you with marketing materials we will retain your data until such time as consent is withdrawn by you.

Your rights

The GDPR gives you a range of rights in relation to the personal data that we collect from you. You have the right to:

(a) Access your personal data. This right is commonly known as the ‘data subject access request’ and enables you to receive a copy of the personal data we hold about you. You will not need to pay a fee to access your personal data unless we can justifiably demonstrate that the request is repetitive or excessive. We will respond to all legitimate data access requests within one month. If there are any discrepancies in the information we provide, please let us know and we will correct them. Please complete this form to make a Subject Access Request.

(b) Request update of the personal data. This enables you to have any incomplete or inaccurate data corrected.

(c) Correction or erasure of your personal data. This enables you to ask us to delete personal data where there is no justifiable reason for us continuing to retain and process it. We may not always be able to delete the data such as if there is an ongoing contractual relationship between us or if we are legally required to retain the data. Please complete this form to make a Correction or Erasure Request.

(d) Object to processing of your personal data where we are relying on consent or our legitimate interests (or those of a third party) as the justification for processing the data.

(e) Restrict, or stop,the processing of your personal data. This enables you to ask us to change the processing of your personal data. For example,the processing of your donation.

(f) Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, machine-readable format.

(g) Withdraw consent. Where we are relying on consent to process your personal data you may withdraw that consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

You can exercise these rights at any time by writing to us at the address detailed above, or by email to contact@lucyfaithfull.org.uk. For other information, please see guidance available via the Information Commissioner’s Office.

If you want to access your information, please send a description of the information you want to see and proof of your identity (certified copy of passport, driving license or birth certificate) by post to Mr Adrian McNulty, The Lucy Faithfull Foundation, 2 Birch House, Harris Business Park, Hanbury Road, Stoke Prior, Bromsgrove, B60 4DJ. So that we know we only provide the personal data to the right person, we do not accept these requests by email or telephone.

Complaints

If you wish to raise a complaint regarding our use of your personal data then you can contact the Information Commissioner’s Office (ICO), which is the UK supervisory authority for data protection issues. (www.ico.org.uk).

If you do wish to raise a complaint then we would welcome the opportunity to discuss your concerns before you contact the ICO to see if we can resolve the issue for you. In such a case, please contact Mr Adrian McNulty via the contact details in the above paragraph.

Changes to this policy

We reserve the right to make changes to this privacy policy from time to time. Each time you visit this site you should check this privacy policy to check that no changes have been made to any sections that are important to you. If we make significant changes in the way we treat your personal information we will make this clear on The Lucy Faithfull Foundation website and/or by contacting you directly.

If you have any questions, comments or suggestions, please let us know by contacting us on dataprotection@lucyfaithfull.org.uk or by calling 01372 847160.

This policy was updated on 14^th August 2020. 

privacy policy for children

Introduction 

As a charity committed to child protection the Lucy Faithfull Foundation (LFF) puts safety at the heart of our organisation. This includes the use of any of your personal information. We are committed to protecting your information and will be clear with you about how and why we are using it. We follow all current data protection law across all of our work. 

What is a privacy policy?

A privacy policy explains what personal information we collect from you, how we use it and what your rights are. If you have any questions you can speak with your allocated worker or contact Adrian McNulty, our Data Protection Officer at amcnulty@lucyfaithfull.org.uk. 

Why is it important?

There are laws in place in the UK to protect people’s information and privacy. The General Data Protection Regulation (GDPR) is the law that sets out the rules around what information organisations can collect, process and store.   

Some definitions: 

• Personal data is any information that can be used to identify you. This could include your name, date of birth, address, phone number or email.
• Data collection is the process of gathering information. One way this can be done is by asking you to complete a questionnaire or fill in a referral form
• Data processing is anything an organisation does to the data they have collected, for example organising it, recording it or using it in any way.
• Data storage is the way an organisation records or holds information they have collected, usually on a computer.

What information do we collect from you?

Why do we collect your personal information?

We collect your information so that we can work with you, look at ways we can improve our services, make sure our services are accessible to anyone who needs them, get your views about our resources or to help us to research our area of work.