Who are we?
We are the UK’s specialist blood cancer charity. Based in London and across the UK in five regional offices and 52 local branches, We fund blood cancer research, and provides practical and emotional support for anyone affected.
Bloodwise, 39-40 Eagle Street, London, WC1R 4TH is a company limited by guarantee 738089 (registered in England and Wales). Bloodwise is a registered charity 216032 (England and Wales) and SCO37529 (Scotland).
Please read this policy carefully, along with our Terms and Conditions and any other documents referred to in this policy, to understand how we collect, use and store your personal information.
Bloodwise’s Data Protection Officer is James Dungate.
What do we do?
Bloodwise has been at the forefront of medical research into blood cancer since we were founded in 1960. We currently fund over 1,000 leading blood cancer researchers working on over 200 projects across the UK. We also provide practical and emotional support, through our support line and patient information booklets.
Bloodwise’s main priorities are:
- Providing vital funds for new research
- Being there for people affected by blood cancer
- Building awareness of blood cancer
- Raising money to fund research and patient support
- Being as effective and efficient as we can be
At Bloodwise we are committed to protecting your personal information and privacy.
When you engage with us by phone, mail, in person or online, we receive personal information about you. This information helps us understand you and your interests and allows us to improve our communications with you and increase the effectiveness of our organisation. We will never sell any of your personal information to any organisation for any reason.
We do however need to collect and use your personal information for carefully considered and business critical purposes, which helps ensure that Bloodwise operates efficiently and can raise funds effectively in order to help us achieve our goals.
It is important that you read this policy carefully to understand what information we hold, how we may use it, and what your rights are.
What is personal information?
Personal information is data that can be used to help identify an individual, such as name, address, phone number or email address.
What is sensitive personal information?
Sensitive personal information is data that consists of racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning an individual’s sex life or sexual orientation.
Bloodwise may use your personal information to help us deliver our charitable mission to beat blood cancer. We will always try to be as transparent and honest as possible regarding how we collect, use and store your personal information. Below we have summarised the different ways we may use your personal information, and our purposes for doing so.
- Delivery of charitable purpose
The delivery of our charitable purpose of beating blood cancer through research and the provision of information and support services may require the recording of your contact details, communication history and connection to Bloodwise. Based on your personal information and marketing preferences we may contact you to promote Bloodwise and blood cancer news, information, events, and fundraising and marketing campaigns. At times we may need to use your personal information in order to prevent fraud or to identify any areas of misuse of our services.
- Fundraising and Marketing
Like all major charities, Bloodwise undertakes a variety of fundraising and marketing activities which are aimed at raising income and/or awareness of the charity and its mission. Some of the channels we may use to market or fundraise are: face-to-face activity, post, advertising (print, broadcast, phone, SMS and digital) and promotional materials. We may communicate with you using these methods to promote Bloodwise appeals, campaigns, trading, sponsorship, events, or volunteering opportunities. We may also ask if you are able to provide Gift Aid on any of your donations.
- Management of Volunteers
If you volunteer for Bloodwise, we may use some of your personal information to manage your volunteering activity, deliver training, update you on our campaigns and ensure your safety when volunteering for us. This could include sending you newsletters or information about our current fundraising activities or campaigns, so you can inform the public about us and our work.
- Retail Trading
Bloodwise operates an e-commerce website and gift catalogues. If you make a purchase through our online shop or catalogue, we may use your personal information to market similar products to you or for fundraising purposes. We may also use your personal information for the recovery of Gift Aid (if you have completed a Gift Aid declaration).
- Analysis, Targeting, and Segmentation
In order to fund lifesaving blood cancer research we have to inform people of our mission and ask them to give us financial and campaigning support. Through the information that you give us, your interactions with us, and publically available information, we will try to understand your interests so that we can personalise and tailor our communication with you.
This personalisation can give you a better user experience and can help us deliver more efficient and cost effective communications. We use ACORN; which is a consumer classification tool that segments the UK population by analysing demographic data, social factors, population and consumer behaviour. The data from ACORN is aggregated and does not identify behaviours on an individual basis. This tool is used to improve planning, actions, campaigns and events in order to better match our communications with each segment’s lifestyle, interests and consumer preferences.
- Wealth screening & financial profiling
Bloodwise does not undertake routine automated wealth screening or financial profiling of our supporter database. We would only ever undertake this kind of activity with your explicit consent. However there are times when key stakeholders who are in a position to give a very large gift would want Bloodwise to research and present information on potential projects they are interested in. Where it is appropriate, we will ask for their consent to carry out more detailed research. For prospective key stakeholders we may carry out research to determine if they may be interested in hearing about the lifesaving research or patient support services that we fund.
- Staff administration
Bloodwise processes the personal information of all our staff for recruitment, staff administration, remuneration, pensions, and performance management purposes.
Bloodwise will only collect and use your personal information when there is a lawful basis to do so. The law allows for six legitimate ways to process an individual’s personal information. However, only three of these ways to process an individual’s personal information are relevant to charities for the types of purposes we have listed above.
- Information is processed on the basis of a person’s consent
- Information is processed on the basis of a contractual relationship
- Information is processed on the basis of the “legitimate Interests” of Bloodwise.
When it may not be practical to get consent from an individual, Bloodwise may still process personal information under legitimate interest. This is because the law allows personal information to be legally collected and used if it is inline with the legitimate business interest of the organisation. However, the processing of personal information still has to be carried out in a fair and balanced way that does not overly impact the rights of the individual concerned.
What are Bloodwise’s Legitimate Interests?
- The delivery of our charitable mission as set out in our charitable priorities
- Internal and external audit for financial or for regulatory compliance purposes
- Statutory reporting
Publicity & Income Generation
- Conventional marketing, publicity, advertising and fundraising
- Unsolicited commercial or non-commercial messages, such as campaigns or charitable fundraising
- Tailoring and enhancing the supporter experience across our digital and postal communications
- Exercising of the right to freedom of expression or information
- Analysis, targeting, and segmentation of data to help develop organisational strategy and improve marketing and fundraising communication efficiency
- Processing for research purposes, such as marketing research
- Using publically available information to profile potentially important supporters
- Monitoring and recording information on employees and volunteers for the purpose of recruitment, safety, performance management and planning procedures
- Provision and administration of staff benefits and learning and development opportunities
- Physical security, IT and network security
- Maintenance of suppression files
- Processing data for historical, scientific or statistical purposes
Financial Management & Control
- Processing of financial transactions and the maintenance of financial controls
- Preventing fraud, the misuse of our services, or money laundering
- Enforcing legal claims, including debt collection via out-of-court procedures
- Responding to any solicited enquiry from any of our supporters
- Providing products, information and/or fundraising packs requested by a stakeholder
- Communications designed to administer existing services that an individual has asked or registered for
- Administrating Gift Aid
- Thank you communications and receipts
- Administrating existing financial transactions
- Maintenance of “Do not contact lists”
Confidentiality and keeping your data secure
Unfortunately, the transmission of data across the internet is not completely secure and whilst we do our utmost to try to protect your personal information we cannot guarantee that loss, misuse or alteration of data will not occur whilst data is being transferred – therefore any personal information you give to us is done at your own risk.
All confidential information we hold is kept securely and only transmitted in protected form. Your credit card details remain with our payment partner SagePay and do not reach us. Customer details are not passed to third parties (unless the party is directly subcontracting and covered by a comprehensive non disclosure agreement) and are used only in accordance with all relevant legislation.
Vulnerable circumstances policy
If we know or reasonably believes that a supporter is unable to make an informed decision or is in a position which does not allow them to make a donation, then a donation is not to be taken or accepted. We will not market to anyone we know are in vulnerable circumstances.
Bloodwise will not exchange or sell your personal information to another organisation for their own marketing purposes. However, there are legitimate situations where we may have to share your personal information with other organisations. An example could be where we are using an external service provided via a technical supplier, email broadcaster, or mailing services provider. In these situations, the relationship between Bloodwise and the third party data processor will be governed by a contract and strict security requirements will be in place to protect your personal information.
Disclosing your information
We will only disclose your information if:
- We are required to do so by law, for example if a law enforcement agency requires information or if compelled by a court order
- We believe it is necessary to protect or defend our rights, property or the safety of staff, volunteers, visitors to our offices or website
- We work with partners for business critical activity under strict non-disclosure agreements
Data Protection Rights
Bloodwise will only use your personal information when we have your explicit consent or if the requirement falls under legitimate interest. You have the right to withdraw your consent at any time. You also have the right to ask Bloodwise to stop using your personal information for direct marketing purposes. Simply contact our Supporter Relations team – whose details are below – and they will amend and update your contact preferences.
- Right to be Informed
- Right of Access
You can write to our Data Protection Officer asking what information we hold on you and to request a copy of that information.
- Right of Erasure
You have the right to have your personal information deleted when there is not any compelling reason for it to be processed.
- Right of Rectification
If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated.
- Right to Restrict Processing
In certain situations you have the right to ask Bloodwise to stop or suppress the processing of your personal information.
- Right to Data Portability
Where we are processing your personal information under your consent the law allows you to request data portability from one service provider to another. This right is largely seen as a way for people to transfer their personal information from one service provider to a competitor.
- Right to Object
You have an absolute right to stop the processing of your personal information on the basis of legitimate interest, direct marketing and processing for purposes of scientific/historical research and statistics.
- Right to object to automated decisions
In a situation where a data controller is using your personal information in a computerised model or algorithm to make decisions “that have a legal effect on you” without human intervention, you have the right to object. Bloodwise does not undertake any complex computerised decision-making that produces legal effects.
If you would like more information on your rights please see the ICO's explanation.
We only want to contact you with information that will be of genuine interest to you as well as being relevant and appropriate. Therefore we will only send you marketing information by email, SMS or phone if you have given us clear and specific consent to do so. If at any time you change your contact preferences or withdraw your consent and opt out, then the most recent preference will be used.
We market ourselves to potential new supporters who are similar to our core supporters via Facebook’s “Lookalike Audience” feature. If you have given us permission to contact you by email or SMS, we will provide your email or phone number to social media companies to build a view of our core audience.
Third Party Websites
When you use the Bloodwise website, social media pages (such as Facebook, Twitter, YouTube and Instagram), subscribe to any of our services, donate to us and/or make an online purchase or sign up to an event, you agree that unless you have set your computer's browser to reject cookies, we can place them on your device and use that data in accordance with this policy.
We use Google Analytics to understand the performance of our website. This is conducted exclusively at an aggregated level and does not involve the disclosure of personal information. Our web server registers the IP addresses of all devices accessing our website in order to deliver content back to you.
What to do if you are not happy
If you are not happy with anything you have seen in this policy or you have any questions regarding data protection, we ask that in the first instance, please talk to us directly so we can help to resolve any problem or query that you may have. Our Supporter Relations Team is here to help and you can contact them on 0808 169 5155. You can also contact our Data Protection Officer by emailing firstname.lastname@example.org.
You can also register with the Fundraising Preference Service (FPS). This service is run by the Fundraising Regulator and allows you to stop email, telephone, addressed post, and/or text messages from a selected charity or charities. Once you have made a request through the FPS, we will ensure that your new preferences take effect within 28 days.
You can also register with the free Telephone Preference Service which gives you the opportunity to opt out of receiving unsolicited calls. The Mailing Preference Service will enable you to register to have your name taken off direct mailing lists.
You also have the right to contact the Information Commissioners Office (ICO) if you have any concerns about Data Protection.