Privacy Policy

BRAC UK (“we”, “our”, “us”) is committed to protecting and respecting your privacy.

We are a registered charity established in the United Kingdom with a registered office at 19 Wootton Street, London, SE1 8TG, registered company number 05802246, and charity number 1115482. For the purposes of applicable data protection laws, we are the controller of the personal data processing described in this Privacy Policy.

This Privacy Policy sets out the basis on which we will process any personal data or usage information we collect from you, or that you provide to us, in connection with your use of our website at www.bracuk.net (our “Website”) and in connection with the charity services we provide (together, the “Services”).

Please read this Privacy Policy carefully so that you understand your rights in relation to your personal data and how we will collect, use, and process your personal data. This Privacy Policy supplements any other privacy-related notices and policies we may provide to you from time to time and is not intended to override them. If you do not agree with this Privacy Policy in general or any part of it, you should not access the Website, use our Services, or otherwise provide your information to us.

Our Website and Services are not intended for children, and we do not knowingly collect data relating to children. Children must not use the Services, except where their parent or guardian has provided consent, if this option is available in your location.

We change our Privacy Policy from time to time. Updates to our Privacy Policy will apply only to information collected after the date of the change. We will note on our Website when our Privacy Policy has been updated. Please check the Website regularly for notices of changes to our Privacy Policy.

Information you give to us You may provide some or all of the following personal data to us by making a donation, signing up for our newsletters or alerts, downloading publications from our website, or contacting us via our Website or by telephone, text/SMS, email, social media, instant chat, our “contact us” page, or otherwise. This information will include some or all of the following:

• • Name and title.
    This information is required to enable us to fulfill our contract with you. If you do not provide this information, we will not be able to provide you with our Services.
  • Email address.
    This information is required to enable us to fulfill our contract with you. If you do not provide this information, we will not be able to provide you with our Services.
  • Address.
    This information is required to enable us to fulfill our contract with you. If you do not provide this information, we will not be able to provide you with our Services.
  • Phone number.
    
  • Social media profile.
    
  • Job title and organization.
    
  • Information we collect automatically

When you visit our Website and use our Services, we automatically collect the information sent to us by your computer, mobile phone, or other device. This information includes:

• • Your IP address.
  • Device information including, but not limited to, the name and type of operating system.
  • Mobile network information.
  • Standard web information such as your browser type and the pages you access on our Website.
  • Transaction information (but not payment card or account details), including device information, transaction details, and IP address.
  • Security information including a list of certain installed software, device and internet connection information, and available space on the device.
  • Information we collect from third parties
  • BRAC UK uses third-party companies to provide services on our behalf. This includes the processing of donations and distribution of newsletters. The information received from these services may include your name, email address, and in the case of donations basic transaction information (never your payment card or account details).
    

We take the security and confidentiality of your personal information very seriously. We will never sell, trade, or share your personal information, whether collected online or offline, nor send donor mailings on behalf of other organizations unless you have given us specific permission to do so. However, we may disclose personal information to third-party service providers, such as payment processing and data storage and processing facilities, that assist us in our work. We limit the personal information available to these service providers to only that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such personal information.

We process your personal data in order to perform our contract with you, such as to receive and process donations you make to us.

We use a third-party email marketing platform to deliver email communications. This platform tracks open rates and click-throughs by using an email address as an identifier. You will be given the option to remove your name from our email list at the bottom of each email update. We will not sell, rent, or trade your email address to a third party.

We obtain your consent to process your personal data for the following reasons:
Sign you up for our newsletters or alerts.
Contacting you about your requests to partner with or fundraise for us.
Personalize our services for you.
If you opted into marketing, to communicate with you about services, marketing, events, and other news and information we think will be of interest to you.

In order to be responsive to you, to provide effective services to you, and to maintain our business relationship, as a matter of our legitimate interests, we will use your personal data to:

• • Administer the Website and Services, and for internal operations, in order to conduct troubleshooting, data analysis, testing, research, statistical and survey analysis.
  • Maintain the safety and security of our users, the Website, our Services, and operations.
  • Send you announcements in relation to security, privacy, or administrative related communications (these communications are not marketing orientated, and we do not rely on consent, so you may not opt out).
  • Personalize our Website and our Services to ensure content is presented in the most effective manner for you and your device.
  • Provide you with information that you have requested.
  • Improve and develop our services, including our fundraising campaigns and activities.
  • Maintain our relationship with you through providing updates on our work, upcoming events, and other ways in which you further support BRAC.
  • In addition, we will use some or all of the above information to comply with any applicable legal obligations, to enforce any applicable terms and conditions and/or terms of service, and to protect or defend the Services, our rights, the rights of our users, or others.
    

We use cookies and other similar technologies to collect information about your browsing activities over time and across different websites following your use of our Services. Cookies allow us to recognize and count the number of users and to see how users move around our website when they are using it. This helps us to improve our Services and the way our website works. You can find more information about cookies and how to manage them here.

Third parties, including Facebook, may use cookies, web beacons, and other storage technologies to collect or receive information from this website and elsewhere on the internet and use that information to provide measurement services and target ads. You can opt-out of the collection and use of information for ad targeting by visiting youradchoices.com.

You can prevent or remove stored cookies by following instructions on your internet browser. Following the ‘help’ tab on your setting will guide you through this, but please be aware that disabling cookies may interfere with some of our website’s functions.

We do not use or share your personal data with others except as described in this Privacy Policy. In certain circumstances, we will share your information with third parties with your consent, as necessary, or as otherwise required or permitted by law. Specifically, we share your personal data:

With service providers and vendors. Such third parties include: (i) data analytics vendors; (ii) security vendors; and (iii) website hosting vendors. These service providers assist us with many different functions and tasks, such as providing data storage and disaster recovery services and communicating with you.

When you request us to share certain information with third parties, with consent or to perform a contract with you. With your permission, we will disclose your personal data to relevant third parties.

With professional advisors, in our legitimate interests or as required by law. As necessary, we will share your personal data with professional advisors such as auditors, law firms, or accounting firms.

For legal and security reasons and to protect our services and business, in our legitimate interests or as required by law. We will share your personal data with regulators, law enforcement agencies, public authorities, or any other relevant organizations: (i) in response to a legal obligation; (ii) if we have determined that it is necessary to share your personal data to comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries; (iii) to protect the interests of, and ensure the safety and security, of us, our users, a third party or the public; (iv) to exercise or defend legal claims; and (v) to enforce our terms and conditions, other applicable terms of service, or other agreements.

With our affiliates, in our legitimate interests. We may share your personal data with the BRAC group of organizations.

In connection with an asset sale or purchase, a share sale, purchase or merger, bankruptcy, or other business transaction or re-organization, in our legitimate interests. We will share your personal data with a prospective buyer, seller, new owner, or other relevant third party as necessary while negotiating or in relation to a change of corporate control such as a restructuring, merger, or sale of our assets.

The personal data that we collect from you will be transferred to, and stored at/processed in countries outside the European Economic Area (“EEA”) and the United Kingdom (“UK”). Your personal data is also processed by staff operating outside the EEA and the UK who work for us or one of our third-party service providers or partners. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this Privacy Policy.

For any transfers of data outside the EEA or the UK, the data transfer will be under the European Commission’s model contracts for the transfer of personal data to third countries (i.e., the standard contractual clauses) (the “Model Clauses”), or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined by the European Commission or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals’ rights and freedoms for their personal data. Please contact us at info@bracuk.net should you wish to examine a copy of the Model Clauses.

We will retain your personal data as follows:

If you subscribe to our newsletter or alerts, we will keep your data until you unsubscribe from the newsletter or alerts;
BRAC UK will retain your data for as long as is relevant for our charitable activities and the purpose set out for its collection. This includes: data provided to us if you make a donation; data provided if you contact us; your technical usage information; and data on your use of our Website and our Services.

We will also retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes and enforce our terms and conditions, other applicable terms of service, and our policies. If you stop using our Services, we will store your information in an aggregated and anonymized format; we may use this information indefinitely without further notice to you.

SECURITY

Although we do our best to protect your personal data, we cannot guarantee the security of your information transmitted through the Website or over email, text/SMS, or instant chat; any transmission is at your own risk.

YOUR RIGHTS

If you are located in the EEA or the UK, you have certain rights in relation to your personal data:

Access:

You have the right to access personal data we hold about you, how we use it, and who we share it with.

Portability:

You have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

Correction:

You have the right to correct any of your personal data we hold that is inaccurate.

Erasure:

In certain circumstances, you have the right to delete the personal data we hold about you.

Restriction of processing to storage only: You have the right to require us to stop processing the personal data we hold about you, other than for storage purposes, in certain circumstances.

Objection:

You have the right to object to our processing of your personal data.
Objection to marketing: You can object to marketing at any time by using the unsubscribe/opt-out function displayed in our communications to you, or by contacting us directly at info@bracuk.net.

Withdrawal of consent:

Where we rely on consent to process your personal data, you have the right to withdraw this consent at any time by emailing us at info@bracuk.net.

Please note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by law. For example, where fulfilling your request would adversely affect other individuals or our trade secrets or intellectual property, where there are overriding public interests or where we are required by law to retain your personal data.

To exercise any of these rights, you can contact info@bracuk.net. We will respond to requests to exercise these rights without undue delay and at least within one month (though this may be extended by a further two months in certain circumstances).

THIRD PARTY LINKS

Our Website may contain links to other online platforms, plug-ins, or other applications operated by third parties. We do not control such other sites or applications, and are not responsible for their content, their privacy policies, or their use of your information. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Website and/or users of those third-party online platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators except as disclosed on the Website. We expressly disclaim any and all liability for the actions of third parties, including but without limitation to actions relating to the use and/or disclosure of personal data by third parties. Any information submitted by you directly to these third parties is subject to that third party’s privacy policy.

COMPLAINTS

If you have complaints about how we process your personal data, please contact us at info@bracuk.net and we will respond to your request as soon as possible.

If you think we have infringed data protection laws, you can file a claim with the data protection supervisory authority in the EEA country in which you live or work or where you think we have infringed data protection laws, or with the UK Information Commissioner’s Office, as applicable to you.

CONTACT

We welcome your comments about this Privacy Policy. Please send us any feedback to info@bracuk.net. For any questions or concerns regarding this Privacy Policy or your personal information, please contact our Data Protection Officer by email at chris@bracuk.net.

LANGUAGE

Except as otherwise prescribed by applicable law, in the event of any inconsistency between the English language version and local language version of this Privacy Policy, the English language version will prevail.