Privacy Policy

Introduction

This privacy policy covers the websites and applications and mobile applications of GoodtoGive Ltd (“GoodtoGive” or “we”) that include a link to this policy.  This privacy policy also applies to GoodtoGive’s marketing and advertising practices where and when it is referenced.

It is meant to inform you about our collection and use of your personal data.

Personal Data we collect.

You may choose to give us personal data online to allow us, amongst other things, to communicate with you, process your orders, provide you with services, or for employment consideration. Data we collect depends on the context of your interactions with GoodtoGive, the choices you make, including your privacy settings, and the products and features you choose. The personal data we collect can include the following:

Name and contact data.
Your first and last name, email address, postal address, phone number and other similar contact data in order to communicate with you, process orders or provide you with products or services. We may also collect your employer name, if you are procuring products or services on behalf of an organisation, and information related to your prior purchases and online buying preferences. Some forms may ask for your customer number or product details such as a serial number.

Credentials.
Passwords, password hints and similar security information used for authentication and account access.

Demographic data.
Data about you such as your country of residence and preferred language.

Payment data.
Data necessary to process your payment if you make purchases, such as your credit card number, and the security code associated with your payment card.

Location data.
Our Mobile applications do not collect your location data, however our website based applications may collect data about your location, which can be either precise or imprecise. Precise location data can be Global Navigation Satellite System (GNSS) data (e.g. GPS), as well as data identifying nearby cell towers and Wi-Fi hotspots, that we collect when you enable location-based products or features. Imprecise location data includes, for example, a location derived from your IP address or data that indicates where you are located with less precision, such as at city or postal code level.

Social Media Data. 
We may provide social media features that enable you to share information with your social networks.  Your use of these features may result in the collection or sharing of information about you by the social networking site.  Please review the privacy policies and settings of social networks you use to understand their practices.

Job Applications/CVs/Resumes.
Information usually appearing on job applications/CVs/resumes which you provide to us if you submit a job application to GoodtoGive either directly or indirectly. You acknowledge that your application may include sensitive personal data. GoodtoGive uses this information in order to evaluate your application and perform related employment activities.

Feedback/product reviews. 
Information you provide to us and the content of messages you send to us, such as feedback and product reviews you write, blog posts or questions and information you provide for customer support. When you contact us via our website, a GoodtoGive application or a Help Desk, such as for customer support, phone conversations or chat sessions with our representatives may be monitored and recorded. Your feedback, posts and reviews will also be monitored to seek improvements in our products and services.

IP Address. 
Information about your visits to our websites, including your Internet Protocol (IP) address, browser type and language, location information and details of your browsing patterns. This is more fully described under the section entitled “Cookies, Web Beacons and AdChoices” below. We collect this information to determine such things as the number of visitors to various parts of our websites, to personalise your experience on our sites, and tailor our interactions with you.

Products. 
Certain GoodtoGive products (including certain GoodtoGive online applications accessed through online third party portals) may have a separate privacy policy that will be presented to you at the time of agreeing to the terms in relation to that GoodtoGive product.

Third Party Sources.
We also obtain data from third-parties. These third-party sources vary over time, but they are sources deemed credible by us and may be publicly available or available on a commercial basis. They can include:

✔ Data brokers from which we purchase demographic data to supplement the data we collect.

✔ Social networks when you grant permission to a GoodtoGive product to access your data on one or more networks.

✔ Designated entities within your business or enterprise (such as a member of your IT department) in the course of providing services to you

✔ Service providers that help us determine a location based on your IP address in order to customise certain products or provide services at your location.

✔ Partners with whom we offer branded services or engage in joint marketing activities. If you purchase GoodtoGive services or products from a GoodtoGive partner, we may receive certain information about your purchase from that partner;

✔ Fraud prevention agencies or credit reporting agencies in connection with credit determinations; and

✔ Publicly available sources such as open government databases or other data in the public domain.

How we use personal data

We collect and process personal data with your consent, as required by law or as necessary to fulfil the legitimate interests of GoodtoGive, including to: (i) provide you with products and services; (ii) manage, administer and operate our business; (iii) meet our contractual and legal obligations; (iv) carry out direct marketing; (v) prevent fraud; and (vi) protect the security of our systems and our customers.

Personal data that is submitted in a business capacity may be merged with available business database directories.

GoodtoGive uses personal data submitted online to:

✔ Respond to your questions and communicate with you

✔ Provide customer support

✔ Share news, updates, or helpful tips about Good to Give products and services

✔ Enable online shopping

✔ Inform you of special promotions and other advertising

✔ Siign up for online services

✔ Create reseller partnerships

✔ Receive and evaluate job applications

✔ Customise, analyse, and improve our products, services, technologies, communications and relationships with you

✔ Deliver products and services requested by you

✔ Notify you about administrative matters that pertain to your Good to Give products or services

✔ In the event of a merger or acquisition of Good to Give or a substantial portion of its assets, Good to Give may disclose or transfer personal information collected online to the surviving or acquiring party, respectively.

How we share your personal data

We share your personal data as necessary to complete any transaction or provide any product you have requested or authorised. For example, we share your information with third parties when you tell or allow us to do so. When you provide payment data to make a purchase, we will share your payment data with banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction.

We share personal data among GoodtoGive-controlled affiliates and subsidiaries to efficiently manage the operation of our business. We also share personal data with vendors or agents working on our behalf for the purposes described in this Policy. For example, companies we’ve hired to provide customer service support or assist in maintaining and servicing products via our systems and services may need access to personal data to provide those functions. In such cases, these companies must abide by our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. We may also disclose personal data as part of a corporate transaction such as a merger or sale of assets.

Finally, we will access, transfer, disclose and preserve personal data when we have a good faith belief that doing so is necessary to:

✔ Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies;

✔ Protect our customers, for example to prevent attempts to defraud users of our products, or to help prevent the loss of life or serious injury of anyone; or

✔ Operate and maintain the security of our products, including to prevent or stop an attack on our computer systems or networks.

Where we process and store personal data

Personal data collected by GoodtoGive may be transferred to, stored and processed in your region, or any other country in which GoodtoGive or its subsidiaries, affiliates, sub-contractors, agents or partners maintain facilities.

Our subsidiaries, affiliates, sub-contractors, agents and partners are required by contract to safeguard any personal data they receive from us and are prohibited from using the personal data for any purpose other than to perform the services as instructed by GoodtoGive. We also take steps to provide adequate protection for any transfers of your personal data in accordance with applicable law.

Sometimes we transfer personal data from the UK, European Economic Area and Switzerland to other countries. When we do, we use a variety of legal mechanisms, including contracts, to help ensure any required rights and protections apply to your data.

Our privacy guidelines are communicated to GoodtoGive employees on an annual basis as part of our mandatory training program. GoodtoGive We take steps to ensure that the data we collect under this privacy policy is processed according to the provisions of this policy and the requirements of applicable law wherever the data is located.

Period of Storage

GoodtoGive retains personal data for as long as necessary to provide the products and fulfil the transactions you have requested or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. Actual retention periods can vary. The criteria used to determine the retention periods include: (i) how long personal data is needed to provide our products and operate our business; (ii) whether the personal data is of a sensitive type; and (iii) whether GoodtoGive is subject to a legal, contractual or similar obligation to retain the data.

Your rights regarding personal data

✔ If the processing of personal data is based on your consent, you have a right to withdraw consent at any time for future processing;

✔ Where applicable, you have a right to request from us, (i) access to and receipt of personal data, (ii) transfer of personal data, and (iii) rectification or deletion of your personal data;

✔ You may also have a right to object to or restrict the processing of your personal data;

✔ You have the right to object to direct marketing; and

✔ You have a right to file a complaint with a regulator or data protection authority.

You may contact GoodtoGive to check the accuracy of your personal data or to request that your information be updated or deleted by writing to dpo@goodtogive.co.uk Please indicate “Subject Access Request” in the subject line and let us know the details of your request in the body of the message. You may also contact us at the GoodtoGive Privacy Hotline at 020 7731 2041. GoodtoGive reserves the right to confirm your identity and to modify the scope and number of requests. In certain cases, your request may be denied on the basis of a legitimate exception or where we are legally prevented from honouring such request.

You have choices about the data we collect. When you are asked to provide personal data, you may decline. However if you choose not to provide data that is necessary to provide a product or feature, you may not be able to use that product or feature.

Children

GoodtoGive does not direct any part of its website to children under 13 years old (or such age as a child is defined by local law if higher) and does not knowingly collect personal data from children or target its website or products to children.

Security of Personal data

GoodtoGive is committed to protecting the security of your personal data and maintains strict access control over it. We utilise reasonable and appropriate physical, technical and administrative procedures to safeguard personal information we collect and process.

Only authorised GoodtoGive personnel, and those of our subsidiaries, affiliates, agents, and partners are allowed to handle information submitted to GoodtoGive online.

GoodtoGive websites store personal data in password-protected environments on servers that are subject to GoodtoGive’s information security policies, standards, and procedures. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access, use or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. When we transmit sensitive personal data, such as a credit card number or password, over the Internet, we protect it through the use of encryption.

Credit card data is encrypted.

To ensure that you can purchase with confidence from GoodtoGive websites, GoodtoGive protects credit card information submitted online with industry-standard encryption technology or tokenisation.

Our agents and partners protect personal data.

When you provide personal data online to GoodtoGive, it may be necessary to transfer personal data to our subsidiaries, affiliates, agents or partners, who then fulfil the orders or provide the services. GoodtoGive requires that its subsidiaries, affiliates, agents and partners handle personal data with the same concern for personal data privacy as GoodtoGive.