The Orthopaedic Institute Ltd are committed to protecting your personal information and being transparent about what we do with it. We only use your personal information in accordance with all applicable laws concerning the protection of data, and will not do anything with your information you wouldn’t reasonably expect.
This Policy explains:
- How the Orthopaedic Institute Ltd may obtain your personal information
- What information we collect
- How we will use that information
- Who we share your information with
- Your choices regarding your information we hold
This policy is written in accordance with the General Data Protection Regulation 25th May 2018.
How do we obtain your personal information?
We collect information in the following ways:
When you give it to us directly
You may give us your information in order to sign up for one of our events or training courses, when you contact us to ask about our fundraising activities, make a donation to us, fundraise on our behalf, or otherwise give us your personal information.
When your information is available publicly or from other external sources
We may combine information that we already have about you with information available publicly or information available from external sources in order to improve our fundraising methods, and services. Such information could be for example, socio-demographic and lifestyle information and information about previous donations you have made.
The information we get from other external sources may depend on your own privacy settings or the responses you give, so you should regularly check them. For example, you may have provided permission for a company or other organisation to share your data with third parties including charities. This could be when you buy a product or service, register for an online competition or sign up with a comparison site.
Depending on your settings or the privacy policies for social media and messaging services like Facebook, WhatsApp or Twitter, you might give us permission to access information from those accounts or services.
We may also obtain information about you where it is publicly available and found in places such as Companies House, Land Registry website and information that is published in articles and newspapers.
What information do we collect?
Personal information is any information that can be used to identify you. For example, it can include information such as your name, date of birth, email address, postal address and telephone number.
Data protection law recognises that certain categories of personal information are more sensitive. This is known as sensitive personal information and covers health information, racial or ethnic origin, religious beliefs or other beliefs of a similar nature, political opinion and trade union membership. We would only collect sensitive personal information where there is a clear need to do so, such as participation in an event, to ascertain what services are relevant to you or to cater other services and support to you. An example would be; special dietary requirements. Before collecting any sensitive personal information about you we will make it clear to you what information we are collecting and the purposes for collecting such.
We use traffic log cookies (Such as Google Analytics) to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
Cookies used on our websites
We use Google Analytics to monitor traffic levels, search queries and visits to this website. These cookies enable us to determine whether you are a return visitor to the site, and to track the pages that you visit during your session.
This is a Google Analytics cookie that registers a unique ID that is used to generate statistical data on how you use the website. It is retained for 2 years.
This is a Google Analytics Session cookie used to throttle request rate which is removed when you quit your browser.
This is a Google Analytics Session cookie used to generate statistical data on how you use the website which is removed when you quit your browser.
This is a Google Analytics Session cookie used to send data to Google Analytics about the visitor’s device and behavior which is removed when you quit your browser.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over external websites. Therefore, we cannot be held responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Deleting your details
We will delete personal details when you request us to do so. All handwritten or printed items will be destroyed by shredding and electronic information permanently deleted.
How do we use your information?
How we use your information would largely depend on why you are providing it. We may use your information in the ways set out below.
- We use your information to keep a record of your relationship with us and for internal administrative purposes
- We use your personal information to claim Gift Aid on your donations.
- We use personal data to carry out statistical analysis and research in order to help us to understand how we are performing and how we can improve our services and meet the needs of the research and training teams.
With your consent, we may use your information to send you communications about our performance as a charity and how you may help us to achieve our goals, for example, information about our campaigns and fundraising activities and how you can donate to us. And as applicable, details of our training and course information.
You can let us know if you would prefer not to receive these communications at any time by emailing firstname.lastname@example.org or writing to the Orthopaedic Institute Ltd, Arthritis Research Centre, RJAH Hospital, Oswestry, Shropshire SY10 7AG.
Who do we share your information with?
We will not sell your details to any third parties, but we do share basic information with the hospital with whom we work in partnership to deliver services and comply with safety requirements.
We may also share information with our financial and legal advisers for the purposes of obtaining advice and protecting our legal rights.
When we collect your personal information we use strict procedures and security features to prevent unauthorised access. However, no data transmission over the Internet is 100% secure. As a result, while we try to protect your personal information, the Orthopaedic Institute Ltd cannot guarantee the security of any information you transmit to us and you do so at your own risk.
The Orthopaedic Institute Ltd website may include links to other sites, not owned or managed by us. We cannot be held responsible for the privacy of information collected by websites not managed by us.
If you’re 16 or under
If you’re aged 16 or under, you must get your parent/guardian’s permission before you provide any personal information on our websites.
Your Choice – Maintaining your personal information
You can request the details of any information we hold about you by emailing email@example.com or writing to the Orthopaedic Institute Ltd, Arthritis Research Centre, RJAH Hospital, Oswestry, Shropshire SY10 7AG.
Equally, please let us know if you wish to update your personal information.
Under Article 17 of the GDPR individuals have the right to have personal data erased. This is also known as the ‘right to be forgotten’. You may apply in writing to have your data erased and subject to any legal obligations your request will be managed within 28 days.
You can also let us know if you would no longer like to receive fundraising or training communications from us by emailing firstname.lastname@example.org or writing to the Orthopaedic Institute Ltd, Arthritis Research Centre, RJAH Hospital, Oswestry, Shropshire SY10 7AG.
Changes to this policy