Y Care International (Registered Charity No. 1109789 and Company No. 3997006) is the international relief and development agency of the YMCA movement in the UK and Ireland.
At Y Care International we value your support and are committed to protecting your privacy. We respect any personal data you choose to share with us and will ensure it is kept safe. We intend to be clear when we collect your data and not to do anything you would not reasonably expect with it.
Phone: 020 7549 3150
Post: Y Care International, The Davenant Centre, 179-181 Whitechapel Road, London E1 1DN
Personal information is collected directly from you when you contact Y Care International. Examples include (but are not limited to):
We may also receive your details from third parties such as JustGiving, Virgin Money Giving or Care2 where you have consented to this information being shared.
What kind and the amount of information we collect from you, as well as how we use it, depend on why you are providing it to us.
When we communicate we may ask you for personal details including your:
Your date of birth and any relevant medical information will only be recorded if appropriate, for example to register for our International Citizen Service (ICS) programme or a challenge event.
We monitor the way our website is used so that we can improve it and your experience on it. You can visit our website without giving us any personal information. However, if you do use the site anonymously we may still collect information about:
Y Care International uses this information to process your requests, provide our charitable services and to help us raise funds for those charitable services.
We have set out below the different reasons why we use your personal information. Bear in mind that not all information will be used for all reasons and that this will depend upon our relationship with you, how you use our services and how you interact with us.
We will process your data for the following reasons:
We may use the data you have provided to us, in combination with publicly available information (such as that on Companies House), to build a general profile of our donors so that our communications are relevant and cost-effective, something that we know is important to our donors.
We do not wealth screen our donors directly or via any other organisations unless we have your express permission to do so.
We will make every reasonable effort to ensure your details are secure and will only share them with trusted service providers working on our behalf, for example to print and deliver postal mail or to process credit card payments. We will only provide them with the information they need to deliver the specific service. We also complete thorough checks on these companies and put contracts in place which detail our expectations and requirements concerning use of personal data.
Unless required to do so by law, we will never share (and do not sell) your personal details with other organisations to use for their own purposes. However, If you are an ICS volunteer, some of your personal data will be shared with Y Care International partners in other parts of the world to enable the operation of this volunteer programme.
The legal basis that we rely on for processing your data is either where:
“Legitimate interests” means the interests of the charity in running the organisation and pursuing our charitable aims, for example, in order to process donations, run events and administer the charity. It can also apply to processing that it is in your interests, for example in cases where you have requested information or certain goods or services from us.
When we process your personal information for our legitimate interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. We will not use your personal information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Y Care International will retain your full information as outlined above for as long as you have an active relationship with us. We define an ‘active’ relationship as one between Y Care International and an individual who has given or engaged with us within the past six years (on the basis that the law may require evidence of a particular transaction up to six years after it was made for tax or accounting purposes).
At any point you may request to receive no further contact from us. Once we receive this request we will review whether we have a legal obligation to retain any of your information. Providing that there is none, we will keep only those details necessary to ensure that we do not contact you again, and will erase the other information we hold about you. The only exception will be if we are required to keep a record of your gifts for Gift Aid or financial audit purposes, in which case we will anonymise your record.
We will ensure that our data retention practices comply with any applicable regulation and/or regulatory authority (for example, the Charity Commission, Information Commissioner and/or Fundraising Regulator).
Y Care International will take appropriate physical and electronic measures to ensure that your personal data is kept securely and accurately.
The transmission of information over the internet is never completely secure, therefore we cannot guarantee the security of data transmitted to our site and it is done at the user’s own risk. However, we take the care of your data very seriously and undertake a range of appropriate security measures to protect it, including secure servers, firewalls and SSL encryption. Any data transferred between locations or to third party suppliers is encrypted and password protected.
If you use your credit card when donating to us your details are passed securely to our payment processing partner, Committed Giving, as part of the payment process. This is done in accordance with the Payment Card Industry (PCI) Security Standard and we do not store your details on our website.
Some of our processors operate outside of the European Economic Area (EEA). Y Care International acknowledges that they may not be subject to the same stringent data protection laws as companies based in the UK, but we take steps to ensure that they provide an adequate level of protection in accordance with UK data protection law.
Y Care International works with suppliers that process data in the USA. They have verified that their data processing standards meet the requirements of the EU-US Privacy Shield, which lays out clear safeguarding and transparency measures for US-based organisations processing the data of EU citizens.
For the purposes of this policy a child is defined as anyone under the age of 16. If you are under this age please ask your parent or guardian for permission before providing any personal information to us. If we collect data from children (primarily those we have helped as part of our programmes) we aim to manage it in a manner appropriate to the age of the child. Where possible and appropriate we will seek consent from a parent or guardian before collecting their information.
Where Y Care International is using your personal information on the basis of your consent, you have the right to withdraw that consent at any time. You also have the right to ask Y Care International to stop using your personal information for direct marketing purposes. Simply contact our team (on the details provided below) and they will amend your contact preferences.
You have the right to be told how your personal information will be used. This policy document, and shorter summary statements used on our communications, are intended to be a clear and transparent description of how your data may be used.
You can write to the Y Care International asking what information we hold on you and to request a copy of that information. Currently the Data Protection Act 1998 gives us 40 days to respond. From May 2018 we will have 30 days to comply once we are satisfied you have rights to see the requested records and we have successfully confirmed your identity.
From May 2018, you have the right to be forgotten (i.e. to have your personally identifiable data deleted), provided your personal data is no longer required. In many cases we would recommend that we suppress you from future communications, rather than data deletion.
If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated.
In certain situations you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
Where we are processing your personal data under your consent the law allows you to request data portability from one service provider to another. This right is largely seen as a way for people to transfer their personal data from one service provider to a competitor, for example banking services.
In a situation where a data controller is using your personal data in a computerised model or algorithm to make decisions “that have a legal effect on you”, you have the right to object. This right is more applicable to mortgage or finance situations. Y Care International does not undertake complex computerised decision making that produce legal effects.
If you are not happy with how Y Care International is processing your personal information, please get in contact with us.
You can also register with the fundraising preference service (FPS). This service is run by the Fundraising Regulator and allows you to stop email, telephone, addressed post, and/or text messages from a selected charity or charities by using the online service at www.fundraisingpreference.org.uk or by calling 0300 303 3517. Once you have made a request through the FPS, we will ensure that your new preferences take effect within 28 days.
You also have the right to contact the Information Commissioners Office (ICO) if you have any concerns about Data Protection using their helpline 0303 123 1113 or at www.ico.org.uk
If you have any questions about this policy or would like to exercise any of your above rights, please contact us via any of the following routes:
Post: Y Care International, The Davenant Centre, 179-181 Whitechapel Road, London E1 1DN.
Y Care International reserves the right to change this policy from time to time. Please check the website periodically for the latest version. This policy was last updated in May 2018.