Donate

Privacy Policy

Next

Worldwide Cancer Research takes the privacy of your information very seriously.

This Policy applies to personal information processed by Worldwide Cancer Research. It tells you about the way we collect, store and use personal information, your rights under data protection law, how you can request to see your information, and what to do if you have any concerns about our management of personal information.

Our use of data for recruitment and for research funding are dealt with in more detail in separate notices.

Recruitment privacy notice
Research funding privacy notice

Worldwide Cancer Research is a UK registered charity, No SC022918, based at:

Worldwide Cancer Research,
Third Floor South,
121 George Street,
Edinburgh
EH2 4YN

If you have any questions or concerns about how we use personal data, or anything written in this policy, please contact us at the address above or email [email protected]

How do we collect your personal information?

Information you give us: Most of the personal information we process is given to us directly by you when you make an enquiry to Worldwide Cancer Research, make a donation, register for information, apply for research funding, register on our grants system or otherwise provide us with your details. If you call us, we also record and store phone calls for training and monitoring purposes – please refer to our Call Recording Policy.

Information from known third parties and social media: We may acquire or receive your personal information from third parties when you have given permission for them to share it with us. For example, from fundraising websites such as Just Giving or similar organisations such as events suppliers and Free Will service providers.

We also may receive data about you from service providers acting on our behalf who deliver technical, payment or delivery services, and from business partners, advertising networks and analytics providers used on our website.

You should check any privacy policy provided to you when you give your data to a third party.

When you engage with us via social media platforms (Facebook, Instagram, LinkedIn, X, Tik Tok) we may receive personal information about you. For example, if you tag us in an event photograph. The information we receive will depend on the privacy preferences you have set on those types of platforms.

Information from the use of our website and services: When you visit our website, we automatically collect the following information:

  • Geographical location and technical information, including the type of device you’re using, the IP address, browser and operating system being used to connect to the internet.
  • information about your visit to this website, for example pages you visit and how you navigate the website, i.e. length of visits to certain pages, products and services you viewed and searched for, and referral sources (e.g. how you arrived at our website).
  • We collect your personal information using cookies on our website. More information can be found in our Cookies Policy.

 

Information available publicly: We supplement information on our supporters with data from publicly available sources such as charity websites and annual reviews, corporate websites, public social media accounts, the electoral register and Companies House in order to create a fuller understanding of individual interests and how best you can support Worldwide Cancer Research. This includes getting a better view of your capacity to make a donation, your interest in supporting research, as well as your networks. Personal information we may collect via these channels include your job title, directorships, contact information, demographic data (including estimated income and property value), date and size of previous donations to other charities and details of philanthropic activities you engage in. Please see Making our communications relevant to you below for more information.

We also use public information for the purposes of identifying suitable experts to review research grant applications or to join our Scientific Advisory Committee. Please refer to our Research Funding Privacy Notice for more information.

What personal information do we collect?

Personal information is any information that can be used to identify you. We routinely collect, use and store the following types of personal information:

  • your name and contact details (postal address, email address and telephone number)
  • your date of birth
  • financial information you provide where you make a payment or as part of research grant award, such as bank details or credit/debit card details, although we don't store credit or debit card details (see Management of financial payments below)
  • information as to whether you are a UK taxpayer so we can claim gift aid
  • where you have left us a legacy, any information regarding next of kin with which you may have provided us to administer this
  • your interactions with Worldwide Cancer Research. This could include your donation history; your responses to our communications; information you’ve shared with us about why you have supported us; events, meetings and fundraising activities you’ve taken part in or shown an interest in
  • preferences about how you like to be contacted

 

Certain types of personal information are in a special category under data protection law, as they are considered sensitive. Examples of this type of sensitive data are information about health, race, religious beliefs, political views, trade union membership, sex life or sexuality or genetic/biometric information.

We do not ask you for sensitive personal data unless there is a clear reason for us to do so. However, we may need to ask for information about your health, for example, if you are participating in an event. You may also wish to share information about your health if you decide to speak out about your experience of cancer or otherwise make information public. If you do, we will always treat it sensitively and ask you for explicit consent to use this information in the form of case studies or interviews.

How do we use your personal information?

We use your personal information for a number of purposes including the following:

Fundraising and Marketing activities which aim to raise funds and awareness of our charity. For this, we use a range of channels including phone, email, letters, face-to-face activity, digital, print, broadcast advertising and prize draws.

We will always respect your choice to not receive marketing communications. We always seek your consent to send you marketing by email or text and regularly check in with you to make sure you are still happy to receive these communications. We will send you marketing by post unless you have told us you don’t want to receive this.

You can choose to opt out from receiving marketing communications at any time, by clicking on the relevant unsubscribe link at the bottom of marketing communications you may receive from us or by contacting us (see Contact Us below).

Please note that if you have indicated that you do not wish to be contacted by us for marketing purposes, we will retain your details on a 'do not contact' list to help ensure that we do not contact you accidentally in the future. However, we may still need to communicate with you for administrative purposes like where we are processing a donation or thanking you for your participation in an event. Please see Administrative and Internal Management Purpose below for more information.

Facebook Advertising: sometimes we use Facebook’s advertising tools “Custom Audiences” and “Lookalike Audiences” to try to reach potential new supporters. This involves using some personal data of existing supporters, such as email address or location, in Facebook to help find like-minded individuals who may be interested in supporting us. Facebook then displays our adverts to these new audiences, whose data is not shared with us.

Market Research can help us deliver our charitable objectives and we may collect personal information when conducting research into the needs and behaviours of our existing supporters. We may invite potential participants from our existing network to take part in surveys, focus groups and telephone interviews. We will always seek your consent when collecting any potentially sensitive personal information or when we wish to further use your data for a different purpose.

Management of Volunteers to record your volunteering activity, training delivery and to update you on our projects, campaigns and activity, as well as ensuring your safety.

Management of Financial Payments - If you use your credit or debit card to donate to us, buy something or pay for a registration online we will use a specialist payment processor.

If you provide your card details to donate by phone, only staff who are authorised and trained to process payments will process your card details. We never store your credit or debit card details following the completion of your transaction or on call recordings. All card details and validation codes are securely destroyed once the payment or donation has been processed.

We ensure that card details are handled securely under Payment Card Industry (PCI) Data Security Standards.

Allocation of Research Grants on a contractual basis to administrate grant awards, legal, personnel, administrative and management purposes including the payment of grant expenses in accordance with our application handling procedures and our Terms & Conditions of Award. Please refer to our Research Funding Privacy Notice for more information.

Administrative and Internal Management Purposes to contact you regarding a donation you have made or an event you have registered for. We may use your personal information for the purposes of credit risk reduction or fraud prevention and for record keeping of enquiries, feedback or complaints. We take reasonable steps to ensure your information is accurate and up to date. Where possible we use publicly available reputable sources to identify deceased records or whether you have changed address

Online Services and Website Management to improve the services we offer and make them as user friendly as possible. We may use IP addresses to identify your approximate location, to block disruptive use, to record website traffic or to personalise the way our information is presented to you. We also use a data validation tool provided through a third party, Data8, to check the validity of addresses, email addresses and phone numbers submitted through our website.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Making our communications relevant to you

We analyse data from our database so that we can understand our supporters better. In certain circumstances we use publicly available sources of information to enhance the personal data we hold about individuals or groups of individuals. These sources include; online databases such as YouGov, websites, social media, and professional consumer profiling companies.

We do this in order to understand more about your interests and preferences so that we can tailor our communications and enhance your experience of supporting us. The process allows us to tell you about the things you are likely to be interested in, to let you know of ways to fundraise that are relevant to you, and to make sure that we only talk to you about ways of giving that are appropriate to you.

We may use external data sources, such as Experian Mosaic, to create supporter groups within our database. This data is based on postcode or broad demographic information and we will, where appropriate, store this information on your record. Using statistics and analysis from trusted third-party companies helps us to improve our fundraising by identifying new audiences, deciding who to send our communications to, and ensuring the communications you receive are relevant to you. Data analysis of supporters also allows us to be more efficient and cost-effective with our resources.

We also undertake research to understand supporters’ potential to be a philanthropic donor to Worldwide Cancer Research; we undertake in-house research and engage other organisations such as Milestone Research or Factary to help us identify people who may be able to support us with a philanthropic gift. This uses information you have given us and publicly available records such as the electoral roll, land records, ‘rich lists’, Who’s Who publications and Companies House records. We may also collect information on your interests, for example board memberships, career, hobbies, or articles about you in newspapers or magazines. We use this information to identify who we think could give a philanthropic gift, and to approach them about getting involved with us in new ways such as bespoke events or visits.

You can opt out of this research profiling activity at any time by contacting us at [email protected]

Our Legal basis for processing your information

We are legally required to have a lawful basis for processing your personal data in the ways that we have outlined in this Policy.

This means that we will only collect and use your data if:

  • You have given us consent or
  • We have formed a contractual relationship or are taking steps to enter a contractual relationship or
  • We have a legal obligation to process information or
  • It is necessary to protect the vital interests of an individual or
  • It is within Worldwide Cancer Research's legitimate interests to do so.

 

Consent

In some instances, we rely on obtaining your specific consent to use your personal information in a certain way, for example, asking for your consent to use your personal information to send you direct marketing information by email.

When you have given your consent for email marketing, we will consider your consent to be valid on an ongoing basis until any time when you choose to withdraw your consent. All marketing emails contain the option to unsubscribe from future emails.

You have the right to withdraw consent for any future use of your information for this purpose at any time. See Contact Information below for details on how to do this.

Contractual Relationship

We have a legal basis to use your personal information where we are entering into a contract with you or performing our obligations under that contract. For example, if you apply to work for us or apply for a grant from us to undertake research.

Legal Obligation

We may need to collect, process and disclose personal information to comply with a legal obligation. For example, we are legally required to hold donor transaction details for Gift Aid or accounting and tax purposes. In some cases, we may need to share your information with regulators such as the Gambling Commission.

Vital Interests

Processing personal information may be necessary to protect life or health, for example in the case of medical emergency suffered by an individual at one of our events, or a safeguarding issue which requires us to share your information with the emergency services.

Legitimate Interests

When we are using our legitimate interests to process your personal information we have considered any potential impact on you, including how intrusive you may find it, and determined that balance is in favour of using the information for our interests.

We consider our legitimate interests to be running Worldwide Cancer Research as a charitable organisation. For example, to:

  • administer and record details of our supporters and of general enquiries
  • facilitate the peer review of grant applications
  • perform analysis and segmentation of our grant application and award information to help inform our Research Strategy, and monitor and improve our effectiveness
  • conduct research to better understand our supporters, including their capacity to give, and to improve the relevance of our fundraising
  • invite supporters to take part in market research to improve our fundraising activity
  • use third party sources to update your address when you move
  • send you postal communications which we think may be of interest to you
  • better understand how people interact with our website
  • record calls made to and by our Supporter Care Team for training and monitoring purposes
  • take and use photos and/or films of event participants and attendees
  • promote Worldwide Cancer Research on social media and other online platforms

 

Special Category Data

Please note that when we process sensitive information about you (see What personal data do we process) we require an additional legal basis under data protection law. In the majority of circumstances we will ask you for your explicit consent to process this type of information unless we are required to process the information under another legal basis, for example to comply with a legal obligation or to protect your vital interests. We may also process special category personal data which you yourself have deliberately chosen to make public.

Your Rights

Data protection law gives you specific rights that help you be in control of your personal data and we want to make it easy for you to exercise these rights. Below you will find more information about the rights available to you. You can exercise any of your rights in relation to the data that we hold about you, by contacting us.

Please note that exemptions apply to a number of these rights, and not all rights will be applicable in all circumstances. For more details we recommend you consult the guidance published by the UK’s Information Commissioner’s Office (ICO).

Right to be informed
You have the right to be told how your personal information will be used. This privacy policy is intended to provide you with a clear and transparent description of how your personal information is used.

Right of Access
You are entitled to know whether we hold your personal information and if so, receive a copy of your data. For the protection of your information, we may need to verify your identity.

If you submit a request on behalf of another person, we will need to ensure that this person has authorised you to make this request and receive their data. When we have confirmed your identity we will aim to respond to you within 1 month.

Right of Erasure
You may ask us to delete some or all of your personal information from our records. There are certain circumstances in which we may be exempt from fulfilling your request, for example to comply with a legal obligation or if we have an overriding legitimate reason for holding your information. In some cases, we will anonymise or suppress the information, rather than delete it. For example, if you request to be deleted from our database to prevent further communications then we will suppress your details so we will not accidently contact you in the future.

Right of Rectification
If you believe our records are inaccurate or incomplete you have the right to ask for those records concerning your information to be updated.

Right to Restriction
In certain situations you have the right to ask for processing of your personal data to be restricted if there is disagreement about its accuracy or you believe your privacy rights outweigh our legitimate interests to use your information for a particular purpose and you have objected to us doing so.

Right to Object
You have the right to stop the processing of your personal data for direct marketing or profiling purposes, or for other legitimate interests of the charity for which we are unable to demonstrate a compelling reason to continue processing.

Right to Data Portability
If we are processing your personal information based on your consent, or in order to enter into or carry out a contract with you, and the processing is being done by automated means, you may ask us to provide it to you o

Rights related to Automated Decision-Making and Profiling 
The law requires us to give you specific information about any automated decision-making and profiling where processing of your personal data and the decisions involved in that processing are made by automated means without human involvement. We have no solely automated decision-making systems or processes. Our use of profiling, which does not use automated processing and does not have significant effects for individuals, is described in this policy under ‘Making our communications relevant to you’. 

How do we protect your personal information?

Under data protection law, we have a legal responsibility to protect any personal information we process about you. The ways we do this include:

  • Using encryption when collecting or transferring sensitive information, such as credit card details;
  • Having in place technical and organisational measures designed to ensure the ongoing integrity, availability and resilience of processing systems and services;
  • Limiting physical access to our premises;
  • Limiting access to the information we collect about you;
  • Ensuring that we and our business partners have appropriate security safeguards to keep personal information secure

How long do we keep your personal information?

Legal and operational requirements determine how long we retain your information. For example, we are required to hold some types of information to fulfil our statutory obligations under health and safety or tax law, and other data to meet contractual obligations for our research funding grants.

We keep your information for no longer than is necessary for the purposes it was collected for. We have adopted a data retention policy that sets out the different periods we retain personal information for in respect of these relevant purposes.

In general, we will keep records of financial donors for at least seven years, to meet our requirements for any financial or Gift Aid audit from HMRC.

Personal information that we no longer need is securely disposed of and/or anonymised so individuals can no longer be identified. Some personal information may be archived for statistical or historical research purposes and this will always be done in compliance with data protection law.

We review our retention periods on a regular basis.

Who is your personal data shared with?

We will never sell your information to third parties or share your information with another organisation for its own marketing purposes. In some cases we transfer your information to third-party agents and service providers who are contracted by Worldwide Cancer Research, to fulfil specific business purposes of the charity.

We work with specialist third party service providers to help us run our organisation more efficiently. This includes providers of: telephone fundraising, marketing services, response handling, lottery processing, print and production, database (CRM) system, wealth research and profiling, payment services, online grant system, our grants payment processing partner or our specialist intellectual property advisors. For example, our payment service providers include WorldPay, PayPal and Stripe.

Other than these third-party service providers who are contracted to us, you can be assured your information will not be disclosed to outside organisations unless we are required to do so by law, for example if you choose to Gift Aid a donation then we are required to send your name and address details to HMRC in order to make a Gift Aid claim.

International data transfers and processing

In certain instances, we use service providers who transfer your information to countries outside of the UK. For these international transfers of data, we take steps to make sure that adequate safeguards are in place to protect your personal information and privacy rights.

  • We will only transfer your personal data to countries that have been found to provide an adequate level of protection for personal data. Countries within the European Economic Area (EEA) are approved as having this adequate level of protection for data.
  • We may also use specific approved contracts with our service providers that are based in countries outside the EEA. These contracts give your personal data the same protection it has in the EEA.

Please refer to the Research Funding Privacy Notice for further information on international transfers

Updates to this Privacy Policy

Our Policy is a dynamic tool and we update it when there is a change to the ways we process your data to ensure that the information we provide to you is up to date and in accordance with the relevant data protection laws. Any new version of this Policy will be published on our website. It was last updated in August 2024.

Contact Us

If you have any questions or you have concerns about how your data is processed, please get in touch so we can help resolve any issues. Please write to us at:

Worldwide Cancer Research,
Third Floor South,
121 George Street,
Edinburgh
EH2 4YN
Scotland
UK

Or contact us at [email protected]

If you’d like to control the frequency or the nature of fundraising and marketing communications you receive, you can contact on (0)300 777 7910 or by email at [email protected]

You also have the right to complain about how we use your personal information to the Information Commissioner’s Office (ICO). You can find details on how to complain on the ICO website.

Accessibility

If you need this information in another format, please contact us using the information above.