This policy explains how Diabetes UK collects and processes your personal data, in accordance with the Data Protection Act 1998 and other legal requirements.
Please read this information carefully, so that you fully understand the reasons why we collect and/or process your personal data, and your rights in relation to this.
For the purposes of the Data Protection Act 1998, the data controller is:
The British Diabetic Association (operating as Diabetes UK), of Wells Lawrence House, 126 Back Church Lane, London E1 1FH
By continuing to use our website and services, you are agreeing to the processing of your personal data according to the terms outlined in this policy.
We are Diabetes UK, which is the operating name of the British Diabetic Association. The British Diabetic Association is registered as a charity with the Charity Commission in England and Wales (215199), and in Scotland (SC039136).
It is also registered as a company limited by guarantee in England and Wales (00339181). In Scotland the British Diabetic Association operates as Diabetes Scotland.
The British Diabetic Association has a wholly owned subsidiary named Diabetes UK Services Limited which is a private limited company registered in England and Wales (00891004).
We operate out of a number of offices across the UK, and our central office is in London.Where we use the term ‘we’ in this policy, we refer to the British Diabetic Association (operating as Diabetes UK and Diabetes Scotland) and Diabetes UK Services Limited.
The British Diabetic Association is registered with the Information Commissioner’s Office as a Data Controller. Registration Number Z9021553.
Contact details for Diabetes UK.
Personal information is any information that can be used to identify you, including your name and contact details.
The type and quantity of information we hold about you and how we use it will depend on the purpose for which you provided it. Purposes for which you might provide us with your personal information include:• Filling in forms on our website, such as when registering for a service or competition, or signing up as a member.
We will only collect as much personal information we need for the purpose for which you have provided the information.
You may provide us with information about yourself that is classed as ‘sensitive personal data’ (for example, details of your health condition). It might be necessary for us to record this information for a number of reasons – for example if you were participating in a fundraising event, or if you sign up for one of our Living with Diabetes Days. You might also provide details about your health information if you choose to share your experience of living with diabetes.
Where we hold sensitive personal data, we will ensure we have appropriate arrangements in place to secure the data.
We will ensure, where we hold personal data of people under the age of 18 that we are clear about the reasons for holding this and we respect their right to privacy. If you are under 18 and wish to get involved with our work, you may need to ask for consent from a parent or guardian.
We use your information in the ways listed below:• To provide you with information, products or services that you request from us.
We may share your personal information with organisations which deliver services on our behalf. This includes organisations which manage our online shop, conduct our lottery/raffles, carry out other fundraising activities, surveys or research, or provide other services in line with our charitable objectives.
To tell us how you would like to be contacted, or tell us that you don’t want us to contact you in future, please contact our Supporter Care Team at any time - please visit our Contact Us page to see the ways you can do this.
Please note: if you no longer wish to be contacted, it may be necessary to retain your details on our communications suppression list, to ensure we do not contact you again.
Diabetes UK does not provide or sell your personal data to other companies for marketing purposes.
We may however share your information with trusted organisations we work with who carry out fundraising activities on our behalf. We monitor organisations to check that they are following our instructions, and observing the same standards which we would observe if we were contacting you direct.
If we contact you for the purposes of direct marketing, we will do so only where
We may hold your information for as long as you are a supporter or are engaged with us as someone who uses our services. We retain your information in order to maintain our relationship with you, to provide you with information and updates about our work and services, and keep you informed about the different ways you can support our work.
Some companies that provide services to Diabetes UK run their operations outside of the European Economic Area (EEA). We take steps to ensure that they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to the transfer, storing or processing of the data at a location outside the EEA.
We will take all reasonable organisational and technical security measures to prevent unauthorised access to any personal data you provide to us.All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using industry standard technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone, and to please inform us if you believe your password has been compromised so that we can ensure your information is protected.
We fully respect your right to confidentiality. We may however be required to disclose your personal information to third parties in the following circumstances:
Any personal information that you post on one of the forums or online support groups will be publically available. We cannot be held responsible for the privacy of personal information that is posted or its subsequent use by third parties. We recommend that you only share information that you are happy to share publically.
The Telephone Preference Service (TPS) is an official register on which an individual can opt out of receiving unsolicited sales or marketing calls. You can register online at: www.tpsonline.org.uk
Please note that it may take up to 28 days from when you register with TPS for the change to take effect on our communications with you.
You may find links to other external websites on our webpages. The terms of this policy only apply to the Diabetes UK website - they will not apply to any external websites you may visit through a link on our pages, so it is important you are familiar with their own privacy policies and your rights with regards to their use.