Loading

Privacy Policy

This policy explains:

  • what information we collect and why we collect it;
  • how we use that information; and
  • how to access and update that information.

Who we are

In this policy “we”, “us” or “our” refers to Bread of Hope, a charity incorporated in England and Wales with registered number 1170214 with its registered office address at 7 Fazeley Court, Elmfield Way, London, W9 3UF and “you” or “your” refers to you.

Types of information we collect or receive

This policy covers the information you share with us and/or which may be provided to us including your name, postal address, email address, telephone number and other contact information. We also have policy specific to cookies (below).

How we use information

Your information will be used by us for the purposes of operating the charity which includes:

  • to monitor the fundraising we receive from you;
  • to communicate with you about our fundraising and work;
  • to invite you to events we believe will interest you;
  • to comply with applicable laws, regulations, legal processes or enforceable governmental requests;
  • to respond to enquiries you send us, for example through our website contact form.

How long we store your data

We will use and store information about you as set out in this policy as follows:

  • as a questionnaire participant for six months;
  • as a registrant at a seminar for one year;
  • as a donor for the duration of you being a donor and then for a period of two years;
  • as a recipient of the MailChimp newsletter until you unsubscribe;
  • as a general enquirer contacting us via our website contact form, for as long as we retain the relevant email correspondence, or until you ask us to delete it.

Who may have access to your information

We may use service providers acting on our behalf to perform some of the services described above, including MailChimp and Royal Mail for communications, Cloudflare for website security, hCaptcha (Intuition Machines, Inc.) to protect our website contact form from spam and abuse, and Google (Google Workspace) to send and receive email. Cloudflare processes connection data (including IP addresses) momentarily to filter hostile traffic and does not store the content of any form submissions. hCaptcha processes limited data—primarily your IP address—to check that a form submission is not automated; this is stored mainly in the EU, with limited processing in the US. These service providers may be located outside the country in which you live.

We may sometimes be required to disclose your information to external third parties such as to local authorities, courts and tribunals, regulatory bodies and/or law enforcement agencies for the purpose of complying with applicable laws and regulations, or in response to legal process.

Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

  • request access to your personal data;
  • request correction of your personal data;
  • request erasure of your personal data;
  • object to processing of your personal data;
  • request restriction of processing your personal data;
  • request transfer of your personal data; and
  • right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us by using the following email [email protected].

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is vexatious, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

International transfers

Some of our service providers are based outside the UK or EEA.

  • Our website security provider (Cloudflare, United States) processes connection data transiently to protect the site; this transfer is covered by Cloudflare’s Data Processing Addendum and the UK International Data Transfer Addendum (IDTA).
  • Our anti-spam provider (hCaptcha, operated by Intuition Machines, Inc., United States) processes limited data—primarily IP addresses—to protect our contact form from automated abuse. This transfer is covered by hCaptcha’s Data Processing Agreement, which incorporates the UK and EU Standard Contractual Clauses, and by hCaptcha’s participation in the UK-US and EU-US Data Privacy Framework.

We do not otherwise transfer personal information outside the UK or EEA except where covered by UK adequacy regulations or an equivalent safeguard.

Where a service provider is based outside the UK or EEA, we check whether that territory is covered by UK adequacy regulations, or whether the provider offers a comparable standard of protection. Where neither applies, we require the provider to enter into the ICO’s International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses before sharing any personal data.

Updating your information

We may retain your information to monitor our historic fundraising. If you do not want us to retain your information, or want us to update it, please contact us by using the following email [email protected]. Please note, however, that some information may be retained if required by law.

Cookies

Cookies are small files that are stored on your computer or mobile when you visit our website. Some cookies contain information that is used to improve your experience. For example, these cookies remember whether you have visited our website before or not. If you have, then you will not be asked to set your cookie preferences every time you visit our website.

Some cookies may not be ours. For example, if you share something on our website through social media, that social media company may store a cookie on your computer or mobile. These cookies can be disabled by disabling third-party cookies on your browser.

In future, we may also use cookies to track our website traffic. You can always change your settings about which cookies we store on your computer or mobile device by clicking here.

Some cookies are erased when you close your browser. Others are stored indefinitely (because they remember whether you have visited our website before or not).

Changes to this Policy

We may change this policy from time to time.