We rely on the help of our dedicated supporters to fight for the survival of tribal peoples around the world. Protecting your data is a key concern of ours and Survival International ensures we defend your right to privacy. We have made improvements to our privacy notice so that it’s easy for you to understand, and so it’s clear how you can choose to hear from us.
In this notice, all references to “we,” “us” or “Survival International” collectively refer to Survival International Charitable Trust (Charity Registration Number: 267444) and our trading arm, Survival International Trading Ltd (Registered Company: 2844785.)
This privacy notice sets out how Survival International collects, uses and stores personal data and has been written in accordance with the Data Protection Act 2018, Privacy and Electronic Communications Regulations 2003 and the General Data Protection Regulation.
What data do you collect about me?
We collect information about supporters, fundraisers, local campaigners, donors and customers who are part of the global movement for tribal peoples. We collect information:
1) When you give it to us directly:
You may give us personal information when you sign up to our newsletter, literature pack or press release, make a donation, sign a petition, take an email action, send a letter and/or order from our shop.
This will usually be your basic contact details, such as your name, email, phone number and address.
If you donate we may also ask for your bank or credit card details (which are stored under strict PCI compliant regulations.) We may also check if you’re over 16 – and if you are under 16 we will safeguard your data even more carefully by requesting consent from a parent or guardian to collect information about you and continue to contact you.
2) When you give it to us indirectly:
We may get your personal information via a fundraising platform such as Enthuse, if you’ve told them you are supporting Survival International and with your consent.
3) Social media
We may get information about you from your social media account. For example, if you’ve signed into our website with your Facebook account.
Cookies are text files that save information about how you use our website and allow us to improve your experience, e.g. keeping you signed in.
We use third party cookies from Google Analytics that help us understand how visitors are using our site. While we don’t collect personal information from this service, Google receives information through your use of our site. See our cookies page for more information.
We also collect information about how you respond to emails. For example, if you open the email or not via our third party e-marketing service (Marketing Cloud.)
How do you use my information?
The data outlined above is collected so we can work most efficiently on growing the global movement for tribal peoples. The information enables us to make informed decisions, fundraise most effectively and give you an improved experience when you use our website and read our communications.
We will never sell your details to any third parties, particularly not for marketing purposes. We are committed to making it easy for you to change your communication preferences. We always respect your preferences and endeavour to send you information that suits you, in the format you prefer.
- Enquiries – If you provide data on an online form in order to register your interest as a local campaigner or fundraiser, we use your personal information to respond to your questions and deal with your request.
- Donations – we use your information to process, acknowledge and keep a record of any donations you make. We also use it to claim Gift Aid if you’ve selected this option or to record information about legacies. We keep the history of your support to date so we can best acknowledge your continued help.
- Marketing – We use direct marketing to let you know what Survival International is doing and how your support can help tribal people. We may use it for appeals or to ask for other support. Unless you indicate that you don’t want to hear from us in this way, we will send you direct marketing by post. We send these communications on the basis of it being within our legitimate interests to do so or if you’ve consented to receive this. Please see the “What is your legal basis for processing personal data?” section below for more information on this.
We’ll also send you direct marketing by email if you’ve consented to hear from us this way. Our monthly updates include the latest campaign developments, articles, event invites, films and breaking news, together with requests for your action when it’s most needed. If you subscribe to our shopping email list or make an order from our shop, we will also send you updates about products in our online shop.
The types of marketing that you can expect to receive from Survival International by post include biannual appeal letters. Our email direct marketing includes options to opt out or update your preferences in the footer of each email. You can opt out from any type of communication at any time by contacting us.
- Social media – On social media, we may use publicly available information from your profile to target you with specific posts that may interest you. Check your social media accounts if you want to change the information you make public. We may repost or share your posts on social media if it relates to Survival International and our work, and respond to questions, queries or comments left on our social media channels and use information found on your profile to help us answer these. We’ll never ask for personal or sensitive information.
Our websites use sharing buttons which share our web pages to social media platforms – use these buttons at your own discretion. Social media platforms may track these shares through your accounts.
- Legal – We may keep your information on file in order to comply with legal and regulatory obligations.
- Grow the movement – Your data is also used to analyse our campaign performance and fundraising appeals, and find out how best to improve our services and information.
Who can access my data?
Your information is only accessible by staff, volunteers and contractors. We regularly review who has access to your information, and all staff and volunteers are trained in adhering to our data protection policy.
We do comprehensive checks on any contractors before we work with them. We always put a contract in place that sets out how they manage the personal data they collect or have access to.
As an international charity, we may share data with staff and partners overseas, but all staff understand they are required to observe EEA data protection laws when handling data.
We use other companies to help us manage and store personal data and to carry out certain activities on our behalf. Our main data processors are listed below, but we may enlist the services of others from time to time:
- Salesforce - our fundraising and campaigning database and e-marketing platform
- Engaging Networks – our direct e-marketing platform
- Access Paysuite – our Direct Debit processor
- Stripe and PayPal – our card processor
We’ll only disclose your personal data to third parties, without your consent, when we have to by law, for example to authorised statutory agencies or authorities.
How do you keep my information safe?
We have several robust technical solutions in place to keep your data safe.
Our entire site is served over SSL. This ensures that forms you fill out are sent to us encrypted.
All of our payment providers are PCI compliant which means they conform to a strict security policy for processing cardholder information.
Our database has permissions based access and only authorised members of staff can view our supporter data.
Please note that while we do our utmost to ensure that good security practices and technologies are in place to protect your data, the security of information sent over the internet cannot be guaranteed and may be illegally intercepted or changed after it has been sent.
How long do you keep my information for?
We keep your information only as long as it’s necessary. For example, we keep your financial data for at least seven years as per legal duty.
If you request to receive no further contact from us, we will keep some basic information about you on our suppression list so that we can avoid sending you unwanted materials in the future.
What is your legal basis for processing personal data?
In order to comply with data protection regulations, Survival International must have a legal justification for collecting and using your information. Our legal basis for processing your personal information falls into one of the following categories in almost all cases:
- Where you have provided consent – e.g. to send you direct marketing by e-mail.
- When processing is necessary to comply with a legal obligation, such as processing a gift aid declaration.
- When using your information is necessary to carry out a contract with us, for example if you make an order from our online shop and we fulfil it using your address.
- When it falls under our legitimate interests to contact you – such as in order to raise funds or promote our campaigning objectives. If we do this, we will ensure that the processing is not likely to be too intrusive, or excessively infringe upon your rights.
Our legitimate interests include:
- Charity governance: including delivery of our objectives and charitable purposes, statutory and financial reporting and other regulatory compliance.
- Administration and management: including providing information and services, responding to solicited enquires, research, the administration of volunteers and employment and recruitment requirements.
- Fundraising, campaigning and marketing: including administering campaigns and donations, and sending direct marketing and thank you letters by post. In some cases, advertising goods and services similar to those you’ve shown interest in before.
Please contact us if you’d like to find out more about how we process your information, or if you would like to change how we contact you.
How can I access or change my personal data?
You have a number of data protection rights which we’d like to make you aware of:
- You can request any information we hold on you by emailing us at [email protected]. We are happy to supply any information you ask for as soon as possible in writing, but this may take up to 30 days. We will also ask for proof of identity.
- You also have the right to ask us to stop using or to restrict the processing of your personal data in certain cases, e.g. where it’s not needed to do what you provided it to us for, or if there is some disagreement about its accuracy or legitimate use.
- You can withdraw your consent for us processing your data at any time (where such processing is based on consent e.g. to send you electronic direct marketing.)
- If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated. To update your records, please get in touch with us using the details above.
- In some cases, you have the right to be forgotten (i.e. to have your personal data deleted from our database) or transferred to another organisation (“data portability.”) Where you have requested that we don’t send you marketing materials we’ll need to keep some limited information in order to ensure that you’re not contacted in the future.
Kate Holberton is our data protection lead. You can contact her at [email protected] if you have any queries about data protection. If you’ve any concerns about the way your data is being used or if you’d like to make a complaint please contact us using the details above. You’re also entitled to make a complaint to the Information Commissioner’s Office and the Fundraising Regulator.
When do you update this notice?
We amend this privacy notice whenever necessary. We will contact you directly or make it clear on our website if we make any significant changes in the way we treat your personal information.