VSA ("we") is committed to protecting any personal information you share with us and will always ensure you are happy with the way we handle it.
In order to help support the development of VSA's voluntary income, our Fundraising department uses a dedicated database to store personal information collected by VSA over the course of our relationship with our members, volunteers, donors, sponsors, employees and suppliers.
N.B.: This privacy statement does not apply to the information VSA collects from people who are registered in our services. Their information is handled independently and according to the nature of each service and our regulators' requirements.
What personal information we collect
When you support VSA, whether it is by becoming a member, making a donation, volunteering, taking part in an event to fundraise for us, we will usually collect:
- Your name and title
- Your contact details (phone number, home address, email address)
- Your date of birth (where appropriate)
- Donation history (including gift amount, purpose, date and how you donated)
- Gift aid declaration (including your tax status)
- Your communications preferences
We do not store any debit/credit card details.
Where appropriate, we may also record the following:
- Information relating to health issues we need to be aware of when you take part in one of our events (including an emergency contact)
- Dietary requirements when attending our events
- Personal areas of interest and philanthropic interests
- Your photo only if it was taken with your consent during an event; this is just to put a face to your name
How we use your personal information
VSA will use personal information for the following:
- Processing donations or other payments, and verify financial transactions
- Fulfilling membership requests
- Fulfilling requests to "Adopt an animal" or "Befriend a baby animal" at Easter Anguston Farm
- Registering you for our events
- Registering you for fundraising challenges
- Contacting you to promote events, campaigns and appeals, or make you aware of volunteering opportunities
- Processing requests for corporate volunteering or support
- Fulfilling requests to leave a gift in your will
- Sending updates and / or newsletters that we think would be of interest to you
- Sending our annual report and invitations to our AGM
- Recording any contact we have with you (phone calls, face to face meetings, etc.)
- Identifying our visitors and supporters
- Preventing or detecting fraud or abuses of our website and enable third parties to carry out technical, logistical or other functions on our behalf
- Where you have given us your express consent, we will use photos and videos in which you appear on our social media sites, website, annual report, promotional and campaigning publications - we will always offer you a clear opt-in option for this on our registration forms
Our direct marketing
We hope to develop a strong relationship with you and ensure we know how you want to be contacted and for what purpose, so we also record your communication preferences. This is why we have moved to an "opt-in only" marketing communication policy; this means that you choose what you want to receive and how. You will find opt-in options on all our registration forms and you can also update them at any time by contacting our Fundraising department on Fundraising@vsa.org.uk.
VSA will keep you posted on our progress, events, opportunities to support us in different ways or may ask for donations according to your preferences only.
VSA will never sell or share your personal information with third party organisations for marketing purposes. We will always be clear about how your information will be used and what will happen to it on our registration forms.
Building your profile
In order to get to know you better, VSA may also collect personal information when it is already publically available from social media sites, for example Facebook and Twitter, or has been published in articles/newspapers. We may also collect information related to your professional career on sites such as Companies House or LinkedIn as well as business publications. This information helps us to better understand your interests and target our communications with you accordingly.
Sharing your personal information
VSA will only share your information if:
- We are legally required to do so, e.g. by a law enforcement agency legitimately exercising a power or if compelled by an order of the Court
- We believe it is necessary in order to protect or defend our rights, property or the personal safety of our staff or visitors to our premises, at our events or websites
- We are working with a carefully selected partner that is carrying out work on our behalf. These partners may include photographers and film companies. The kind of work we may ask them to do includes taking photos and videos at our events, promotional and campaigning events, rehearsals, etc.
VSA only chooses partners we can trust and will only pass personal data to them if they have signed a contract that requires them to abide by the requirements of the Data Protection Act, treat information as carefully as we do, only use the information for the purposes it was supplied (not their own purpose or the purposes of any other organisation) and allow us to carry out checks to ensure they are doing all these things.
How we store your personal information
The information we collect is stored by us on computers located in the UK. We may transfer the information to other departments within VSA and to other reputable third party organisations, as explained above, and we will always check where they are situated (inside or outside the EEA) prior to any arrangements being made. We also store paper files.
VSA places a great importance on the security of all personally identifiable information associated with our members, volunteers, donors, sponsors, employees and suppliers. We have security measures in place to attempt to protect against the loss, misuse and alteration of personal information under our control. For example, only authorised personnel are authorised to access user information and we use secure server software (SSL) to encrypt financial and personal information you input before it is sent to us. While we cannot ensure or guarantee that loss, misuse or alteration of information will not occur while it is under our control, we use our best efforts to try to prevent this.
Unfortunately, the transmission of information across the internet is not completely secure and whilst we do our best to try to protect the security of your information, we cannot ensure or guarantee that loss, misuse or alteration of information will not occur whilst information is being transferred.
Where you or we have provided a password enabling you to access parts of our website, it is your responsibility to keep this password confidential. Please do not share your password with anyone.
We will keep your personal information only for as long as we need it to provide you with the information you have required, to administer your membership, regular donations and sponsorships, or administer your marketing preferences to comply with the law. We do not communicate with people who have asked us not to. When we no longer need the information, we will always dispose of it securely, using specialist companies if necessary to do this work for us.
What we do not do with your personal information
VSA will never sell or share your personal information with other organisations to use for their own purposes.
The Data Protection Act gives you certain rights over your personal information and how we use it. These include:
- The right in certain circumstances to have inaccurate personal information rectified blocked, erased or destroyed
- The right to prevent your personal information being used for direct marketing
- The right of access to a copy of the information we hold about you (known as Subject Access Request)
- The right to lodge a complaint.
If you wish to exercise any of those rights, please contact the Data Protection Officer in writing to VSA, 38 Castle Street, Aberdeen, AB11 5YU or by emailing email@example.com. Please note that it is our policy to charge the statutory maximum fee of £10 for a subject access request.
For more information about your rights under the Data Protection Act, visit the Information Commissioner's website.
Other useful information
Children's personal information
It is our policy not to request donations, subscriptions or membership, or accept orders (such as subscription to our newsletter, request to sponsor one of our animals and baby animals, registering for an event or a fundraising challenge) from children under the age of 18.
Links to third party websites
Social media websites
VSA operates a number of social media pages such as Facebook, Instagram, Twitter, LinkedIn and YouTube. Although this privacy statement covers how VSA will use your personal information from those pages, it does not cover or govern how social media websites will use it. Please ensure you read their privacy policies before sharing any information and make sure you familiarise yourself and use their privacy settings and reporting mechanisms to control how your personal information is used.
Other people's data
Before providing someone else's personal information, please ensure they are happy for you to do so (for example when you tag someone in a photo on social media or share their story with us, etc.). Under no circumstances should you make public someone else's home address, email address or phone number.
Changes to this privacy statement
We may make changes to this privacy statement from time to time and when we do so, they will apply from the time we publish them. If there are significant changes to the way we handle your personal information, we will make this clear on the website or we may contact you directly.
This privacy statement was last changed on 2nd February 2018
Please do not hesitate to get in touch with our Data Protection Officer if you have any questions about this policy or how we use your personal information by writing to VSA, 38 Castle Street, Aberdeen, AB11 5YU or by emailing firstname.lastname@example.org.
This policy is available to print here.