Privacy Policy

Our Privacy Statement

The Donate a Kidney website was developed for the Robert Dangoor Living Kidney Donor Programme, which was launched by two of the UK’s kidney charities – Kidney Research UK, the country’s leading kidney research charity, and Give a Kidney, a charity devoted to living kidney donation.

Whilst this privacy policy is owned and administered by Kidney Research UK. The data you share with the Donate a Kidney team will not be shared with or used by other teams within Kidney Research UK or Give A Kidney. If you would like receive information from Kidney Research UK or Give a Kidney please visit their websites.

It is important for you and for us that we protect your privacy. This statement outlines how we comply with data protection legislation, including: Data Protection Act 2018 (DPA 2018), the UK General Data Protection Regulation (UK GDPR), and the Privacy and Electronic Communications Regulations (PECR).

Personal data we collect

Whenever you interact with us, be it through post, email, telephone, online forms via our website, face-to-face interactions, or via social media, we may collect or update basic information about you. This includes:

• Your first name, surname, and title (if you use one) helps us interact with you in a polite and friendly manner.
• Contact details: Your address, telephone numbers, and email address.

Why we collect your data

We may collect or update your personal information for various reasons, including:

• We’d like to keep you updated about our work and opportunities to support us further that’s why we ask for your postal address. If you ever decide you’d rather not hear from us by post, it’s easy to let us know – just give us a ring or drop us an email.
• We will only contact you via telephone or SMS for marketing purposes if we have obtained explicit consent from you, or if we have an established relationship and believe the information would be of genuine interest to you (known as ‘soft opt-in’).
• You can opt-out of telephone and SMS communications.
• Request for Information: If you ask us for information or updates.
• Events: If you register an interest or participate in any of our events.
• Employment and Volunteering: If you apply for a job or a volunteer role.
• Feedback: If you would like to suggest, complain, or provide other types of feedback, we will respond unless you ask us not to.

How we use your personal data

We process your personal data for specific purposes, which may include:

• Campaigns.
• Event organisation.
• Volunteering.
• We strive to keep all the information accurate and up to date, ensuring that we only collect data relevant to our interactions with you.

Lawful basis for processing

• Consent: We obtain explicit consent for processing sensitive medical information, children’s data, and for direct marketing via email and text.
• Legitimate Interest: We conduct a Legitimate Interest Assessment that weighs your interests against ours.
• Legal Obligation: We adhere to legal requirements such as tax and employment regulations.
• Contractual Obligation: Our contracts include data protection clauses to ensure compliance with regulations.
• Vital Interest: We may process data when it is crucial for your well-being.
• Public Interest: Occasionally, data may be processed for tasks carried out in the public interest.

Your rights

You have specific rights under data protection laws. These include:

• Right to Be Informed: We’ll always tell you how we plan to use your data when we collect it, so you’re never left in the dark.
• Right of Access: If you’re curious about what information we have on you, just ask.
• Right to Rectification: Spotted a mistake in the info we have about you? No worries, let us know and we’ll correct it promptly.
• Right to Erasure: Want us to delete your data? If there’s no good reason for us to keep it, we’ll remove it for you.
• Right to Restrict Processing: If you want us to put a pause on using your data in certain ways, you can ask us to ‘freeze’ it.
• Right to Data Portability: If you want to use your data somewhere else, we’ll help you move it safely and easily.
• Right to Object: Don’t want us to use your data in a certain way? You have the right to say ‘no’, and we let you know this from the get-go.
• Automated Decision-making and Profiling: Concerned about a decision made by a computer about you? We don’t do that. Even if we did, you’re entitled to ask for a human to review it.
• Right to Lodge a Complaint: If you’re not happy with how we’re handling your data, please contact us so we can put it right.
• Right to Withdraw Consent: Changed your mind about letting us use your data? No problem, contact us and take back your ‘yes’.

Each of these rights is designed to give you control and peace of mind when it comes to your personal information.

Most rights requests will be processed within one month, as stipulated by the regulator. Complicated requests may take longer, due to their tricky nature. If we need longer, we will inform you in accordance with guidelines.

Data security

We employ a comprehensive information security program, aligned with industry best practices, to protect the confidentiality, integrity, and availability of your personal data.

Data transfers outside the UK

We do not transfer data outside the UK without adequate protections in place.

Data retention

Personal data is stored only for as long as we need it, in accordance with our retention policy.

Reviews and updates

This privacy statement is reviewed and updated regularly. The latest version will always be available on our website.

Legal jurisdiction

Any disputes regarding this privacy statement will be resolved under the laws of the United Kingdom.

Contact us

Email: enquiries@donateakidney.co.uk
Phone: 0300 303 1100