Introduction

We cannot carry out our lifesaving research without your help. Whether you give financially, support our campaigns, carry out research or volunteer your time, your support is vital to our success.

It is important for you and for us that we protect your privacy. Kidney Research UK is committed to protecting your privacy. This statement outlines how we comply with data protection legislation, including: Data Protection Act 2018 (DPA 2018), the UK General Data Protection Regulation (UK GDPR), and the Privacy and Electronic Communications Regulations (PECR).

Kidney Research UK is committed to protecting your privacy. This statement tells you what to expect us to do with your personal data and information.

For any enquiries you can contact us by:

Post: Stuart House, City Road, Peterborough, PE1 1QF

Phone: 0300 3031100

Email: supportercare@kidneyresearchuk.org

Personal data we collect and use

Whenever you interact with us, be it through post, email, telephone, our website, face-to-face interactions, or via social media, we may collect data and information about you. This might include:

• Your first name, surname, and title. 
• Contact details: Your address, telephone number/s, and email address.
• Payment details, including card or bank information for direct debits or transfers.
• Other information depending on the type of interaction such as health data or ethnic information.
• Your photograph.

Why we collect your data

We may collect or update your personal data for various reasons, including:

1. To keep you updated about our work and opportunities to support us further.
2. If you ask us for information or updates.
3. If you register an interest or participate in any of our events or fundraising activities.
4. If you make a donation whether one-off or regular.
5. If you apply for a job or a volunteer role within our charity.
6. If you apply for research or other types of grants.
7. If you are a patient participating in any of our research projects.
8. If you would like to suggest, complain, or provide other types of feedback, we will respond unless you ask us not to.

Cookies

Cookies are small data files stored on your computer when you visit our website. They help us understand how you interact with the site and improve your experience.

Our Shopify store uses cookies and similar tracking technologies to enhance your browsing experience and provide personalized content. These cookies are categorized as follows:

• Preferences: These cookies remember your preferences, such as language and region, to personalize your experience on our website.
• Analytics: We use analytics cookies to understand how visitors interact with our website, helping us improve the user experience.
• Marketing: Marketing cookies are used to deliver advertisements that are relevant to your interests.
  
  By using our website, you consent to the use of these cookies. You can manage your cookie preferences through our cookie banner, which is displayed when you first visit our site.

Essential Cookies

These cookies are necessary for the website to function properly:

• _secure_session_id: Tracks user sessions during checkout to maintain order, payment, and shipping details.
• cart: Stores information about the contents of the user's cart.
• cart_sig: Verifies cart integrity and ensures proper cart operations.
• cart_ts: Used in connection with checkout.
• checkout_token: Associated with the checkout service.
• storefront_digest: Allows merchants to preview password-protected storefronts.

Reporting and Analytics Cookies

These cookies help track website usage and performance:

• _shopify_fs, _shopify_s, _shopify_y: Part of Shopify's analytics suite.
• _shopify_sa_t: Shopify analytics related to marketing and referrals.
• _ga, _gat: Associated with Google Universal Analytics.

Functional Cookies

These cookies remember user preferences:

• _landing_page: Tracks landing pages.
• _orig_referrer: Tracks referral sources.
• currency: Remembers the user's selected currency.

Marketing and Retargeting Cookies

These cookies are used for advertising purposes:

_fbp: Used by Facebook for advertising products.

IDE: Used by Google DoubleClick for targeted advertising

How we use your personal data

We process your personal data for specific purposes, which may include:

• Fundraising and campaigns
• Event organisation
• Financial transactions

We strive to keep all the information accurate and up to date, ensuring that we only collect data relevant to our interactions with you.

1. We might contact you by phone for marketing purposes if we have an existing relationship with you, you can opt-out of this at anytime and we will stop, we will make sure opting out is a clear and easy process to follow.
2. We might email you or send you an SMS in relation to admin or information regarding something you are already involved in with us.
3. We might contact you by email or SMS for marketing purposes if we have consent from you to do so. 

What we won’t do with your data

We will not communicate any unsolicited marketing material to you by email or SMS without your prior consent. This consent can be withdrawn at any time and will always be an opt-in.

Lawful basis for processing

• We mainly rely on Legitimate Interest. We conduct a Legitimate Interest Assessment that considers what we want to achieve, whether we need to process and store your data, and ensures that we use your data legally, transparently and fairly.
• If we can’t rely on Legitimate Interest, such as most incidences of direct marketing we will ask you for your Consent. This includes asking for explicit consent for processing medical and health information, other special category or sensitive data and any information belonging to children.

There are some instances where we might use another lawful basis, these will be limited to:

• Legal Obligation: We adhere to legal requirements such as tax and employment regulations.
• Contractual Obligation: Our contracts include data protection clauses to ensure compliance with regulations.
• Vital Interest: We may process data when it is crucial for your well-being.
• Public Interest: very occasionally, data may be processed for tasks carried out in the public interest.

Your rights

You have specific rights under data protection laws. These include:

1. Right to be informed: We'll tell you how we plan to use your data when we collect it.
2. Right of access: We are always happy to tell you what information we hold on you.
3. Right to rectification: We want to keep your data accurate, if you believe it isn’t, please let us know and we will correct it.
4. Right to erasure: If there's no good reason for us to keep your data and you want us to delete it, we will.
5. Right to restrict processing: If you want us to stop using your data in certain ways, you can ask us and unless there is good reason for us not to, we will.
6. Right to data portability: We can provide you with your data in a standard format, we can also send this to a different data controller on your request.
7. Right to object: We only seek to use your data in accordance with your wishes, you can object to us processing or storing your data at any time.
8. Automated decision-making and profiling: We will only make decisions that may affect you using humans.
9. Right to lodge a complaint: You can do this if you are not happy with how we are handling your data.
10. Right to withdraw consent: Where you have previously given us your consent, you can take this back at any time.

Most requests will be processed within one month. More complex requests may take longer however we will inform you in accordance with ICO guidelines.

Data security

We keep all personal data in a highly secure physical or IT environment to protect the confidentiality, integrity, and availability of your personal data.

Data transfers outside the UK

We do not transfer data outside of the UK without adequate protections in place.

Data retention

Personal data is stored only for as long as we need it, in accordance with our Retention Policy. You can access our data retention schedule here.

Reviews and updates

This privacy statement is reviewed and updated regularly. The latest version will always be available on our website.

Legal jurisdiction

Any disputes regarding this privacy statement will be resolved under the laws of the United Kingdom.

Privacy Statement for Children

What’s this about?

It’s about anything that lets people know who you are. Things like:

• your name
• where you live
• your photograph
• where you go to school
• anything about your health

This stuff is personal, which means it belongs to you. We can only use it if it’s in your best interest, and if the people who look after you agree.

Your information is powerful

Sometimes we use it to teach people about kidney disease.

Sometimes we use it to encourage people to give us money, because that’s how we pay for scientific research.

Sometimes, scientists will use your information in their research. This is how we fight kidney disease.

We always tell the people who look after you why we’re using your information. They can ask us to stop using it any time.

The people who work for our Charity are trained to keep information safe. We will never share your information with people we don’t trust, and we’ll only share it if we need to.

Our computer systems have lots of protection, including anti-virus and passwords.

If you want to know more about how we use your information, or how we keep it safe, you can ask the person who looks after you to contact us. We’re so grateful for your help fighting kidney disease, and we’ll always do our best to answer your questions.

Kidney Research UK:  June 2024