Who we are?
Y Care International (Registered Charity No. 1109789 and Company No. 3997006) is the international relief and development agency of the YMCA movement in the UK and Ireland.
At Y Care International we value your support and are committed to protecting your privacy. We respect any personal data you choose to share with us and will ensure it is kept safe. We intend to be clear when we collect your data and not to do anything you would not reasonably expect with it. For the purposes of UK Data Protection Law, Ycare is part of All We Can a registered charity in England and Wales and is the Data Controller of your personal data.
Phone: 020 7549 3150
Post: Y Care International, 25 Marylebone Road, London, NW1 5JR.
When do we collect your data?
Personal information is collected directly from you when you contact Y Care International. Examples include (but are not limited to):
- Signing up to our email newsletter
- Enquiring or participating in an event
- Volunteering with us
- Making a donation
- Visiting our website
We may also receive your details from third parties such as JustGiving, Virgin Money Giving or Care2 where you have consented to this information being shared. Once received, we may ask you to re-consent for us to continue to process your data.
What information do we collect?
What kind and the amount of information we collect from you, as well as how we use it, depend on why you are providing it to us.
When we communicate we may ask you for personal details including your:
- email address
- telephone number
- bank details (if you are setting up a regular donation)
- bank card details (if you are making a one-off donation)
Your date of birth and any relevant medical information will only be recorded if appropriate, for example to register for our International Citizen Service (ICS) programme or a challenge event.
We monitor the way our website is used so that we can improve it and your experience on it. You can visit our website without giving us any personal information. However, if you do use the site anonymously, we may still collect information about:
- the pages on the website you visit
- the amount of time spent on the website
- how you arrived on the website (e.g. via an email link or search engine)
- the type of device or browser you use
How do we use your information?
Y Care International uses this information to process your requests, provide our charitable services and to help us raise funds for those charitable services.
We have set out below the different reasons why we use your personal information. Bear in mind that not all information will be used for all reasons and that this will depend upon our relationship with you, how you use our services and how you interact with us.
We will process your data for the following reasons:
- to process your donations or payments and to verify financial transactions
- to claim Gift Aid on your donations if eligible
- to acknowledge donations and to send a thank you letter
- for our own internal administrative purposes, and to keep a record of your relationship with us
- to send you fundraising appeals and updates about our activities
- to send you information about fundraising events, such as challenge events, and other ways of giving including payroll giving and legacy giving
- to provide you with information you have requested
- to personalise your supporter experience and ensure we provide you with appropriate communications
- to ensure your preferences are up-to-date, and manage those preferences
- to notify you of any changes to our details or policies
- to collect your story for use in marketing materials
- to comply with applicable laws and regulations and comply with requests from statutory agencies.
We may use the data you have provided to us, in combination with publicly available information (such as that on Companies House), to build a general profile of our donors so that our communications are relevant and cost-effective, something that we know is important to our donors.
We do not wealth screen our donors directly or via any other organisations unless we have your express permission to do so.
We will make every reasonable effort to ensure your details are secure.
Unless required to do so by law, we will never share (and do not sell) your personal details with other organisations to use for their own purposes. However, If you are an ICS volunteer, some of your personal data may be shared with Y Care International partners in other parts of the world to enable the operation of this volunteer programme.
The legal basis that we rely on for processing your data is either where:
- you have provided your informed consent for us to use your data in a certain way;
- it is necessary so that we can comply with a legal obligation to which we are subject;
- it is necessary so that we can perform our obligations under a contract with you; or
- there is a legitimate interest in us doing so.
“Legitimate interests” means the interests of the charity in running the organisation and pursuing our charitable aims. For example, in order to process donations, run events and administer the charity. It can also apply to processing that it is in your interests, for example in cases where you have requested a copy of our newsletter or other information about our work.
When we process your personal information for our legitimate interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. We will not use your personal information for activities where our interests may override your information rights. Importantly, whenever we process data in the interest of the charity you may object. If you wish to object, contact details can be found at the foot of this policy. Your objection will normally mean we will stop processing your data for that purpose.
If we provide a service or product to you for which you pay other than by way of a donation, we will use our Contractual Obligations to process the data. Records of such a transaction will be retained for up to 7 years.
When we process your data because you have consented for us to do so, we will ensure you are fully informed of what you are consenting to and ensure you may withdraw your consent at any time. If you withdraw your consent, we will respect your wishes and not ask you why. If we process your data with your consent and you withdraw your consent, we will be obliged to delete your records unless we have the lawful grounds to retain them.
How long will you keep my information for?
Y Care International will retain your personal data as outlined above for only as long as is necessary. This may vary according to the relationship with have with you. If for example you have pledged GiftAid we are legally obliged to retain your data for up to 7 years. In other circumstances it may be less. If you are a supporter, we may consider you to be active, lapsed or dormant. All categories of supporter’s data may be retained for different periods of time. If you would like to know how long your data will be retained please contact us.
At any point you may request to receive no further contact from us. Once we receive this request we will review whether we have a legal obligation to retain any of your information. Providing that there is none, we will securely delete your information. Please note, if you subsequently decide to support us, we will not be able to identify any of your previous donation. We may keep anonymised records of such donation.
We will ensure that our data retention practices comply with any applicable regulation and/or regulatory authority (for example, the Charity Commission, Information Commissioner’s Office (ICO) and/or Fundraising Regulator).
How secure is the information I give you?
Y Care International will take appropriate physical and electronic measures to ensure that your personal data is kept securely and accurately.
The transmission of information over the internet is never completely secure, therefore we cannot guarantee the security of data transmitted to our site and it is done at the user’s own risk. However, we take the care of your data very seriously and undertake a range of appropriate security measures to protect it, including secure servers, firewalls and SSL encryption. Any data transferred between locations or to third party suppliers is encrypted and password protected.
If you use your credit card when donating to us your details are passed securely to our payment processing partner, Committed Giving, as part of the payment process. This is done in accordance with the Payment Card Industry (PCI) Security Standard and we do not store your details on our website.
Transferring information outside of Europe
Some of our processors operate outside of the European Economic Area (EEA). Y Care International acknowledges that they may not be subject to the same stringent data protection laws as companies based in the UK, but we take steps to ensure that they provide an adequate level of protection in accordance with UK data protection law where this is possible. Such protection will be appropriate safeguards such as EU Standard Contractual Clauses (SCCs) or UK International Data Transfer Agreement (IDTA). Where such safeguards are used, appropriate risk assessments may be undertaken.
For the purposes of this policy and UK Data Protection Law a child is defined as anyone under the age of 13. If you are under this age please ask your parent or guardian for permission before providing any personal information to us. However, regardless of your age we would strongly encourage you to involve your parents or guardian when interacting with us. If we collect data from children (primarily those we have helped as part of our programmes) we aim to manage it in a manner appropriate to the age of the child.
Where Y Care International is using your personal information on the basis of your consent, you have the right to withdraw that consent at any time. You also have the right to ask Y Care International to stop using your personal information for direct marketing purposes. Simply contact our team (on the details provided below) and they will amend your contact preferences.
Right to be Informed
You have the right to be told how your personal information will be used. This policy document, and shorter summary statements used on our communications, are intended to be a clear and transparent description of how your data may be used.
Right of Access
You can write to the Y Care International asking what information we hold on you and to request a copy of that information. Currently the Data Protection Act 2018 gives us one month to respond. All requests will be handled in accordance with the ICO’s guidance.
Right of Erasure
You have the right to be forgotten (To have your data permanently erased), provided your personal data is no longer required by law. For further details about this please contact us.
Right of Rectification
If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated.
Right to Restrict Processing
In certain situations you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
Right to Data Portability
Where we are processing your personal data under your consent the law allows you to request data portability from one service provider to another. This right is largely seen as a way for people to transfer their personal data from one service provider to a competitor, for example banking services.
Right to object to automated decisions
In a situation where a data controller is using your personal data in a computerised model or algorithm to make decisions “that have a legal effect on you”, you have the right to object. This right is more applicable to mortgage or finance situations. Y Care International does not undertake complex computerised decision making that produce legal effects.
If you are not happy with how Y Care International is processing your personal information, please get in contact with us.
You can also register with the fundraising preference service (FPS). This service is run by the Fundraising Regulator and allows you to stop email, telephone, addressed post, and/or text messages from a selected charity or charities by using the online service at www.fundraisingpreference.org.uk or by calling 0300 303 3517. Once you have made a request through the FPS, we will ensure that your new preferences take effect within 28 days.
You also have the right to contact the Information Commissioners Office (ICO) if you have any concerns about Data Protection using their helpline 0303 123 1113 or at www.ico.org.uk
How to contact us
If you have any questions about this policy or would like to exercise any of your above rights, please contact us via any of the following routes:
Phone: 020 7549 3150
Post: Y Care International, 25 Marylebone Road, London, NW1 5JR
Changes to this Policy
Y Care International reserves the right to change this policy from time to time. Please check the website periodically for the latest version. This policy was last updated 20th October 2021.