HEADTURNED Foundation

Privacy Notice

Please read carefully

Privacy Notice

Introduction

The HEADTURNED Foundation (“we,“ “us,“ or “our“) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Notice outlines how we collect, use, disclose, and protect your personal data in compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Privacy Notice

1. Data Controller

HEADTURNED Foundation is the data controller responsible for the processing of your personal information. If you have any questions or concerns about this Privacy Notice or our data practices, please use the contact form.

Privacy Notice

2. Personal Information We Collect

We may collect and process the following categories of personal information:

2.1 Information You Provide Directly:

• Contact Information: Name, email address, phone number, and mailing address.
• Donation and Payment Information: Credit/debit card details, payment history, and donation amounts.
• Registration Information: Information provided when you register for events, programs, or newsletters.
• Correspondence: Records of your communications with us.

2.2 Information We Collect Automatically:

• Technical Data: IP address, browser type, operating system, and device information.
• Usage Data: Information about how you use our website, such as pages visited and time spent on each page.

2.3 Information from Third Parties:

• Technical Data: Publicly available information or data provided by partners, sponsors, or service providers.

Privacy Notice

3. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your data for a specific purpose.
• Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Processing is necessary for compliance with a legal obligation.
• Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our services, fundraising, and ensuring website security.

Privacy Notice

4. How We Use Your Personal Information

We use your personal information for the following purposes:

• Service Delivery: To provide and manage our services, programs, and projects.
• Donations and Sponsorships: To process donations, issue receipts, and manage sponsorship agreements.
• Communication: To respond to inquiries, send updates, newsletters, and marketing communications (with your consent).
• Event Management: To manage registrations and participation in events and training programs.
• Compliance: To comply with legal obligations and protect our legal rights.
• Improvement: To analyse usage data and improve our website, services, and initiatives.

Privacy Notice

5. Sharing Your Personal Information

We do not sell or rent your personal information. We may share your data with:

• Service Providers: Third-party vendors who perform services on our behalf, such as payment processors and IT service providers.
• Legal Authorities: If required by law or to protect our rights, property, or safety.
• Partners and Sponsors: With your consent, or where necessary for the fulfillment of a sponsorship agreement.

All third parties are contractually obligated to protect your data and use it solely for the purposes specified by the Foundation.

Privacy Notice

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Notice or as required by law. Once the retention period expires, your data will be securely deleted or anonymised.

Privacy Notice

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request access to your personal data and receive a copy of the information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data under certain conditions.
• Restriction: Request restriction of processing if you contest the accuracy of the data or object to our processing.
• Data Portability: Request transfer of your data to you or another organisation.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us using the contact form.

Privacy Notice

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorised access, loss, misuse, or alteration. These measures include encryption, secure servers, and access controls.

Privacy Notice

9. International Transfers

If we transfer your personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Notice and applicable laws.

Privacy Notice

10. Cookies

Our website uses cookies to enhance your user experience.

10.1 Essential Cookies:

These cookies are necessary for the website to function properly. They enable basic functionalities such as page navigation and access to secure areas of the site. Without these cookies, certain services cannot be provided.

• Examples: Session cookies, and Authentication cookies

10.2 Functional Cookies:

These cookies allow the website to remember your choices (such as language or region) and provide enhanced, more personalised features.

• Examples: User preference cookies, and Remarketing cookies