PRIVACY

Green Cross United Kingdom ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with us, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Data Controller: The data controller is Green Cross United Kingdom, Registered Office: 7 Bell Yard, London, WC2A 2JR, United Kingdom. Our Data Protection Lead can be contacted at joinus@green-cross.org.uk.

Information We Collect: We may collect and process the following data about you:

• Identity & Contact Data: Name, address, email, telephone number when you donate, volunteer, sign up for campaigns, or enquire.

• Financial & Transaction Data: Bank details, payment card information (processed securely by third-party payment processors), donation history, and details of services you request.

• Technical & Usage Data: Internet protocol (IP) address, browser type, operating system, time zone, and information about your visit (e.g., pages viewed, navigation paths) collected via cookies and similar technologies.

• Marketing & Communications Data: Your preferences in receiving marketing from us and your communication preferences.

Legal Basis for Processing: We process your personal data on the following lawful bases:

• Performance of a contract: To process your donations or fulfil your requests.

• Legitimate interests: For administrative purposes, fraud prevention, network security, and to further our charitable objectives through direct marketing (subject to your right to object).

• Consent: Where you have given clear, affirmative consent, e.g., for email newsletters.

• Legal obligation: To comply with our legal and regulatory requirements, such as Gift Aid.

Data Sharing: We will never sell your personal data. We may share it with trusted third parties who provide essential services (e.g., payment processing, IT hosting, email distribution) under strict data processing agreements. We may disclose data if required by UK law.

International Transfers: We generally store data within the UK/European Economic Area (EEA). If we transfer data outside the UK/EEA, we will ensure appropriate safeguards are in place as defined by UK law.

Data Security: We have implemented robust technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

Your Data Protection Rights: Under UK data protection law, you have the right to:

• Request access to your personal data.

• Request correction of inaccurate data.

• Request erasure of your data ("right to be forgotten").

• Object to processing based on legitimate interests.

• Request restriction of processing.

• Request transfer of your data to another service.

• Withdraw consent at any time.
  To exercise these rights, please contact joinus@green-cross.org.uk. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).

Data Retention: We will retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

Contact: For all data protection enquiries: joinus@green-cross.org.uk or by post to: The Data Protection Lead, Green Cross United Kingdom, 7 Bell Yard, London, WC2A 2JR.