At Tŷ Hafan we are committed to respecting and protecting your privacy. This notice explains how we collect, use and store personal information about you.
We may change the terms of this privacy notice from time to time. Please check this part of our website to see what has changed.
If you have any questions regarding our use of your information, please email dataprotection@tyhafan.org or write to Data Protection Officer, Tŷ Hafan, Hayes Road, Sully CF64 5XX
Tŷ Hafan, the hospice for children in Wales is a registered charity (No: 1047912) and charitable company limited by guarantee (No: 307406), registered in Wales.
In this privacy notice, ‘we’ also includes our two trading subsidiaries:
• Crackerjackpot Ltd operates the Tŷ Hafan lottery. It is a company limited by guarantee, registered in Wales (No: 08221671) and licensed with the Gambling Commission.
• Tŷ Hafan Trading Ltd manages our retail operation including our shops, warehouse and online trading outlets. It is a company limited by guarantee, registered in Wales (No: 05129825).
The registered address of all three entities is Hayes Road, Sully CF64 5XX
We may collect your personal information when you:
• Donate to us
• Sign up to receive our newsletter
• Join our lottery
• Register to take part in one of our events
• Fundraise on our behalf
• Complete a gift aid declaration form
• Contact us via email, phone, SMS, social media, post or our websites
• Apply to work or volunteer for us
We may also collect information about your visit to our websites. This data is not personal to you and is used to help us better understand how visitors use our site, analyse the website performance and develop the website effectively.
We may also receive information about you from third parties but only if you’ve given them permission to share your information.
Occasionally we may obtain information from publicly available sources such as Companies House or the media to help us determine how you might prefer to engage with us.
We collect personal information such as name, address, email, phone number, date of birth (if appropriate) and bank account details. We do not record credit or debit card details.
We process your information only where you have expressly given us your consent, to fulfil a contract we have with you, when it is our legal duty or where we are confident it is in our legitimate interests to do so.
We use your personal information to process your donations or regular payment agreements, to claim Gift Aid on your donations (if appropriate), to provide you with any products purchased, to support you with fundraising endeavours, for analysis purposes or for administrative or regulatory reasons.
We may also use your details to keep you updated about how your support is helping Tŷ Hafan, to inform you of forthcoming events and to contact you for fundraising purposes. This could be by email (if you have given us your consent) or by post (if we believe we have a legitimate reason to do so and you have not already told us you do not want to be contacted by post).
If you no longer wish to receive these types of communications or want to change your contact preferences, please follow the unsubscribe link on a relevant email or contact us directly: call 029 2053 2255, email supporterservices@tyhafan.org or write to us at Supporter Care, Tŷ Hafan, Hayes Road, Sully CF64 5XX.
To ensure the communications we send you are relevant and tailored to you, we may combine data from Experian’s Mosaic consumer data with the personal information you have given us. Mosaic is anonymous postcode-based demographic data which helps us better understand our supporter base and operate as cost effectively as possible.
We never sell or share any information about you to other organisations for their own marketing purposes.
Your details may need to be shared with third party organisations who are working on our behalf. These organisations act as data processors and in these instances, we ensure a contractual agreement is in place to protect your data and ensure it is only retained for the necessary duration.
Your personal information may also be shared with third party organisations to comply with legal or regulatory obligations. An example organisation is HM Revenue and Customs who require certain information for Gift Aid claim processing.
We take all reasonable care and precautions to protect your information and use a combination of both physical and technical measures.
Online financial transactions are processed using SagePay which has the highest level of Payment Card Industry Data Security Standards (PCI DSS) compliance and any personal information you provide is encrypted.
While we take appropriate steps to protect your information online, we also protect your information offline. We do not retain credit or debit card details and our staff receive data protection training to ensure any personal data is handled and processed appropriately. Our computer network is guarded by firewalls and kept in a secure environment on servers located within the European Union.
Some of our premises have CCTV installed. This is for security reasons and the footage is only held for a maximum of 30 days unless we are required to disclose the images for legal reasons.
Unfortunately, the internet is not completely secure and although we will do our best to protect your information, we cannot guarantee its complete safety and any information provided is at your own risk.
A cookie is a small file that is downloaded to you computer or device whe you visit a website. Further information on the cookies we use and how to manage your cookies can be found in our cookie policy.
Please visit http://www.aboutcookies.org.uk/managing-cookies for information on how to change your preferred browser settings. For more information on Google Analytics cookies, please visit their website.
We may link you to third party websites which have their own privacy policies. We encourage you to look at their policies as we cannot accept any responsibility or liability for the content or security of those websites.
You are in control of how we use your data.
If you think any of the information we hold on you is incomplete or inaccurate, you have the right to have this rectified. Please contact us and we will check its accuracy and correct it.
You have the right to request a copy of your personal information held by us (known as a Subject Access Request).
If you feel we should no longer be using your personal information, you can request that we stop using or erase the information we hold on you. We will confirm that the information has been restricted, anonymised or removed. However, we may not be able to comply with your request if we are required to retain your information for legal or audit purposes. If these circumstances apply, this will be fully explained to you.
To exercise any of your rights under data protection law, please contact Data Protection Officer, Tŷ Hafan, Hayes Road, Sully CF64 5XX or email dataprotection@tyhafan.org.
If you would like to make a complaint about the processing of your data, please contact us at the address above. If you are not satisfied with our response, you can complain to the Information Commissioners Office (ICO) by calling their helpline on 0303 123 1113 or via their website https://ico.org.uk/concerns/
This Privacy Notice was last updated on 21/10/2021