Privacy Policy

We take your privacy seriously and are committed to protecting your personal information. We aim to be clear and open about our data and security practices.

Where we ask you to provide us with any information by which you can be identified, you can be assured that it will only be used in accordance with this privacy statement, and in line with UK data protection law which includes but may not be limited to the Data Protection Act 2018, the UK General Data Protection Regulations (UK GDPR) and the Privacy and Electronic Communications Regulation (PECR)

This notice provides information concerning the processing activities for Outside The Box, registered charity number: 1197431

What information do we collect about you?

We collect information about you when you fill in an online form to:

•Contact us using the form

•Make a donation online


This information may include:

•Name, role and organisation

•Contact details including email address

•Demographic information such as postcode and interests.


We collect material that you proactively post or contribute to our site including social media and any correspondence you have with us.

We also collect information on your website usage through cookies, if your browser accepts them. Some of our websites feature tracking software – this means that if you have filled an online form or have previously clicked a link in one of our emails, we may link your website usage information (such as pages visited, IP address, browser and device used) to other information we hold about you, such as your name and organisation.

When you contact us by email or on the phone, we may also record this information on our customer relationship management system to help us process your request efficiently.

How do we use your information?

We collect information about you to manage your account, process your donation or fulfil any contract we have with you.

We use information collected from your website visits to personalise your future visits and to improve the experience we provide to our online users. For example, information like the browser and device you are using helps us to maintain usable and accessible websites for all our audiences.

We also use your information to help us develop services that you need, and where we have a lawful basis and permission to contact you, we may use it to help us send you relevant and timely information about the help and support that we offer.

Where do we store your information?

Online forms

The forms on our website are built using a platform with WordPress, so the information you provide to us is initially stored there. This provider ensures their practices comply with UK data protection law and we regularly delete data from this system. We are required to ensure that such data is appropriately protected.

Website accounts

If you are a registered user of our website after donating, the personal data within your account is stored in secure web servers outside of the UK, based in the EU.

You are responsible for keeping your website account password(s) confidential. We ask you not to share your password with anyone for your own security.

Security and encryption

We take great care to ensure that our websites operate at the highest security levels and that our suppliers are committed to best practice in digital security. All personal information and financial data is encrypted in transmission. However, the security of data transmission via the internet can never be 100% guaranteed, and data transmission is at your own risk.

Cookies
What are cookies and how do we use them?

The use of cookies is common practice on modern websites. A cookie is a small text file which is placed on your computer’s hard drive by a website. When you visit one of our websites, your browser checks to see if it has any cookies for it and sends the information contained in those cookies back to the site in order to tailor and improve your experience.

Our cookies record things like whether you are currently logged into your website account, to ensure you’re given the right access on each page. They make sure the display settings you’ve selected before (for example, preferred language) – or the settings associated with your account permissions – are activated correctly.

Can I refuse cookies?

Yes, you can. When you first access the site you can set your preferences. If you refuse cookies, you will still be able to access the site.

Across our site, you can use your browser settings to disable cookies. Different browsers offer different levels of control – for example you may be able to accept certain cookies and reject others, such as third party cookies.

If you refuse cookies please be aware our websites may not work smoothly for you and there will be certain parts that won’t function correctly.

You can delete the cookies stored on your computer at any time.

More information

For further information about cookies, including how to manage your cookie settings, you can visit www.aboutcookies.org or www.allaboutcookies.org.

The lawful basis for processing your personal data

We are required to identify a lawful basis with which to process your personal data. For marketing it may be your consent. Sometimes we may have a legal obligation to process personal data. On other occasions we may process the data in the legitimate interest of the Outside The Box. We may undertake a balancing test to ensure this is appropriate. You may object to such processing.

Where Outside The Box processes your personal data it may rely upon a contractual obligation and may retain such data for up to 7 years. Outside The Box may send you marketing communications concerning services you have previously accessed or have shown an interest in. You may stop such communications at any time.

How long do we keep your information?

We do not keep your information for longer than necessary. We keep financial information for up to seven years due to legal and contractual requirements, and we delete all other personal information from our donation management system if we have had no contact with you for three years.

Changes to our privacy policy

We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 16 November 2022.

Your rights

Data protection regulations give you clear rights over how your data is used by us. You can find out more detail about your rights by visiting the Information Commissioner’s Office website’s section on individual rights.

You also have the right to report concerns or complain about our handling of your data to the Information Commissioner’s Office. Details of how to do this can be found on its website.