At the The Butterfly Trust, we are committed to protecting your personal information and being transparent about what we do with it. We will use your personal information in accordance with all applicable laws concerning the protection of personal information and not to do anything with your information you wouldn’t reasonably expect.
Who are we?
In this policy references to the The Butterfly Trust, or to ‘we’ or ‘us’ are to the The Butterfly Trust which is a registered charity in Scotland SC033174. The majority of our services are offered by our volunteer outreach team who are trained to provide a professional service and have regular updates to ensure our clients receive the best possible outcome from any support we offer.
The The Butterfly Trust is what’s known as the ‘controller’ of the personal data you provide to us. We will usually collect basic personal data about you like your name, postal address, telephone number, email address and your bank details, if you are giving us a donation for example.
Sometimes we will collect other information about you such as your date of birth, gender, or your relationship to cystic fibrosis. We will always be very clear with you about the reasons why we may wish to collect such information, and we will only do so with your specific consent and permission.
Sometimes we appoint third parties to take on tasks for us like managing the production of print materials for delivery, including The Butterfly literature, as well as the storage and delivery of fundraising materials such as running shirts. These third parties are known as ‘data processors’.
Where we appoint a third party to process data, it will always be with a formal agreement in place between the The Butterfly Trust and that organisation, to protect the security of your data. See the section ‘who we share your information with’
If you would like a list of third party processors you can request it by contacting the Data Protection Officer.
Regional Fundraising Volunteers
Our fundraising strategy/focus is based around encouraging our supporters to go out and organise/take part in events to raise funds to support people living with Cystic Fibrosis throughout Scotland.
We do this by offering support in any way we can to ensure your event is as successful as possible. This can be from simply providing you with a t-shirt for something like a sponsored walk or run to providing advice & assistance for more complex tasks such as writing risk assessments or securing insurance for an event.
We may change this document from time to time to reflect the latest view of what we do with your information. Please check back frequently; you will be able to see if changes have been made by the date it was last updated at the end of the document.
The The Butterfly Trust is committed to ensuring your data is kept safe and secure, and will be accessed only when there is a clear need. We will also ensure that your preferences for how we contact you with marketing communications are respected. All staff receive data protection training, and relevant data safeguards and policies are in place.
Privacy, confidentiality – what does it all mean?
We use your data in a number of ways based on the law and what you tell us you’re happy for us to do with it. We’re absolutely committed to keeping your details safe, and to ensuring it’s easy to understand what we do with them. How we can contact you with marketing communications is up to you. Use the links below to explore the different elements of our policy.
By ‘confidentiality’, we mean that we will only access or process your data when there is a clear need, or where you have given express consent to be contacted.
How do we get your personal information?
We collect your personal information in several ways:
We combine the information from these sources with the information you provide to us directly.
What are cookies?
Cookies help us understand how people use our website so we can continue to make it better.
What information do we collect?
We collect personal information in connection with specific things we do. These include campaign actions, newsletter requests, registration or membership requests, product purchases, feedback, donations, competition entries, information you provide in public forums, on our sites and applications.
The information is either needed to fulfil your request or to enable us to provide you with a more personalised service. You don’t have to disclose any of this information to browse our sites. However, if you choose to withhold requested information, we may not be able to provide you with certain services.
We may research and gather geographic, demographic and other data that helps us better understand your interests and preferences, and better support your needs. In the process, we may use additional publicly available information, which may be gathered by a third party. This is sometimes referred to as ‘profiling’ (see ‘Building profiles and targeting communications). This does not make any automated decisions, but you may ask us to remove any such data we hold at any time.
We might also use anonymised data (that is data with any personal information removed so that you cannot be identified) from cookies to make sure our website is easy to navigate and you see the information that’s most relevant to you. You can find out more about cookies.
How do we use your information?
Depending on how we receive this information (see ‘How do you obtain my personal information?’) we may process it in various ways. For example, if you’ve requested information by filling in a form, we use it to ensure we’re sending you what you’ve asked for; if you make a donation, we need some personal data to process the payment.
When we collect your data we may ask you for permission to send you information about our work or our products or services that we feel you would be interested in. This is known as ‘marketing communications’ (see ‘Consent and preferences’).
There are a number of ways that we may use your personal information:
Marketing communications could include providing information about the work that we do and how we spend our money, or opportunities to get involved in our work or to support us through donations or fundraising.
We may use your information to send you communications about our work and how you can help, for example, information about our campaigns, volunteering and fundraising activities and how you can donate to us. Occasionally, we may include information from partner organisations or organisations who support us in these communications. Our forms have clear marketing preference questions and we include information on how you can say no to such marketing.
Sensitive personal data
Data Protection law recognises that certain categories of personal information are more sensitive. This is known as ‘sensitive personal data’ and covers health information, race, religious beliefs, genetic and biometric data and political opinions.
Sometimes we will ask to collect other information about you such as your gender and connection to cystic fibrosis – for example whether you are living with the condition yourself, or perhaps you have a child or relative with the condition. You do not have to provide this information if you do not wish to do so. We hold this information on our database so that we can tailor our communications to you – including information and support services and fundraising materials. We can also use this to evaluate how we are engaging with the different elements of our community, and to help prevent cross-infection for those with cystic fibrosis at events.
We will be very clear with you when we wish to collect such information and will explain our reason for collecting it. We would only collect this information with your specific consent.
Building profiles and targeting communications
Why do we research and analyse data?
The Butterfly Trust may research, gather and analyse data to better support your needs, to produce relevant communications and provide a better experience for our supporters. We do this because it allows us to understand the background of the people who support us and use our services and helps us to make appropriate requests to supporters who may be able and willing to give more than they already do or to tailor our services to better suit them. This research and analysis can help us target our resources more effectively through gaining an insight into the background of our supporters and helping us to build relationships that are appropriate to their interests and capacity to give.
What methods do we use for data research?
We may use publicly available sources of data to increase and enhance the information we hold about you. This may include obtaining details of changes of address, date of birth, telephone numbers and other contact details, information related to your wealth, and consumption and demographic data generated through the MOSAIC geodemographic tool. It may also include information from public registers and other publicly available sources such as Companies House, newspapers and magazines.
Under the new data protection law which came into force starting in May 2018 we have a number of lawful reasons that we can use (or ‘process’) your personal information. One of the lawful reasons is called ‘legitimate interests’.
In all cases, we balance our legitimate interests against your rights as an individual and make sure we only use personal information in a way or for a purpose that you would reasonably expect in accordance with this Policy and that does not intrude on your privacy or previously expressed marketing preferences. These may include being able to:
Where we process sensitive personal data (see Sensitive personal data), we will make sure that we only do so in accordance with one of the additional lawful grounds for processing such as where we have your explicit consent, if you have made that information manifestly public or we need to process this information to protect your vital interests. When we do this, we will tell you what sensitive personal data we are collecting and why.
When I give you my information, where does it go?
If we ask you for personal information at any point, you are only sharing that information with the The Butterfly Trust alone, unless otherwise stated. All the personal data we process is processed by our staff in Scotland however for the purposes of IT hosting and maintenance your information may be situated outside of the European Economic Area (EEA). This will be done in accordance with guidance issued by the Information Commissioner’s Office.
Making changes to how we use your information
If you do not wish your data to be used in any of the ways listed above or have questions about this you can call 0131 445 5590 or email firstname.lastname@example.org . You can withdraw or amend your consent at any time. You will also be offered the opportunity to unsubscribe on every marketing email.
How will we communicate with you?
We want to ensure you receive the level of information about The Butterfly Trust that is right for you.
Email/text marketing: If you actively provide your consent to us along with your email address and/or mobile phone number, we may contact you for marketing purposes by email or text message. By subscribing to our emails or opting in to email communication from us, you grant us the right to use the email address provided for both email marketing purposes and advertisement targeting
Post/telephone marketing: If you have provided us with your postal address or telephone number we may send you marketing communications or telephone you about our work, unless you have told us that you would prefer not to receive such information. We actively check telephone numbers against the Telephone Preference Service and will only make telephone calls to you where your telephone number is listed on the TPS if you have specifically told us that you do not object to such calls and have consented to receive them.
Your choice: It is always your choice as to whether you want to receive information about our work, how we raise funds and the ways you can get involved. If you do not want us to use your personal information in these ways, please indicate your preferences on the form on which we collect your data.
If you don’t want to receive some or all of these marketing communications, you can let us know how you would like us to contact you (or not) by calling 020 3795 2177 or emailing email@example.com. You can withdraw or amend your consent at any time. You will also be offered the opportunity to unsubscribe on every marketing email.
What do you mean by ‘consent’ and ‘preferences’?
We require your explicit consent to contact you by email or SMS with marketing communications. This means that we will ask your permission to contact you by these channels. After the new regulation came into force in May 2018, if you have not provided your consent, we will not be able to contact you by email or SMS. You have the right to change your consent at any time.
In addition to email and SMS, we would also like to contact you by post or telephone. You can express your preference for whether or not you would like to receive marketing communications from us in this way.
You can change the way you would like to hear from us (either your consent or preference) firstname.lastname@example.org at any time.
What can I opt in or out of?
It is important that you let us know what works for you. We need your consent to process any personally identifiable information we have for you for any reason other than compliance with the law. For example, sending you a e-newsletter or e-magazine to keep you updated about our work, or asking you to take part in a campaign action such as a petition lobbying the Government, or as part of demographic analysis to understand our community.
You can change or withdraw your consent or update your channel preferences at any time, either online at email@example.com or by contacting our Supporter Care team at 0131 445 5590 or email firstname.lastname@example.org. You will also be given the opportunity to unsubscribe on every marketing email.
How long will you hold my data?
We hold your information only as long as necessary for each purpose we use it, or in line with any statutory minimum retention periods required by law.
If decide not to support the The Butterfly Trust any more or request that we have no further contact with you, we will keep some basic information in order to avoid sending you unwanted materials in the future and to ensure that we don’t accidentally duplicate information.
We will deem your consent to hold for four years from the last point at which you updated any consent or preference with us. We will contact you via the channels you prefer before the four-year period is up to re-confirm your consent to receive marketing communications, and your preferred channels.
Who do we share your information with?
There may be instances where we are required to share your information with a third party. We only disclose information to third parties or individuals when obliged to by law, for purposes of national security, taxation and criminal investigations, and the following:
Your information will be stored on our supporter database, and in the case of an online form, the content management system for our website. In certain circumstances data may be stored on a ‘cloud’ system so that colleagues may be able to access it – for example, checking a mailing list for a magazine.
If you are under 16 years old, you will need to obtain your parent/guardian’s consent before sending any personal information to any website or the The Butterfly Trust. We do have activities for those under 16, so we may ask your age. Before taking part please obtain consent from your parent or guardian. We will require proof of consent or age verification before accepting applications.
Please note that we will not knowingly market to persons aged under 18 years.
As a parent or guardian, we encourage you to be aware of the activities in which your children are participating, both offline and online. If your children voluntarily disclose information, this may encourage unrequested messages. We suggest that you discourage your child from providing any information without your consent.
If you have any questions about how your child’s data is handled, please contact email@example.com or call 0131 445 5590.
Using your data on the web and social media
To ensure cost-effective marketing communications, and to deliver the best experience for our supporters, we engage in targeted content and advertising using our website, social media platforms and other services.
To do this, we may use the personal information you have provided to us via one platform (such as on our website, via email or on a social media channel) to send you personalised content and messaging on another. Examples of this activity include using our website cookies in an anonymised way (not identifying you personally) and social media advertising.
We will only target you with advertising on social media using your data if you have consented to such usage, however you may still see our social media advertising via other means, where we cannot exclude individuals.
How do we keep your information confidential?
The above represents our intention to maintain your confidentiality, but for all of the above points there may be times when we need to share information internally or externally:
What are my rights?
A new data protection law, started in May 2018, and gives everyone a number of very important rights. These are:
If you would like to know more about your rights under the data protection law see the Information Commissioners Office website.
How do I keep my details up to date?
The accuracy of your information is important to us. If you change your address or believe any of the other information we hold concerning you is out of date, please let our Managing Director team know, or write to: The The Butterfly Trust, Swanston Steading, 109/3 Swanston Road, Edinburgh EH10 7DS.
How do I find out what data you hold about me?
As an individual, you have a right under the current Data Protection Act 1998, and since May 2018 the new regulations, to obtain information from us, including a description of the data that we hold on you. For more information about this please contact the The Butterfly Trust, The Butterfly Trust, Swanston Steading, 109/3 Swanston Road, Edinburgh EH10 7DS.. You can submit a request to see what information we hold about you by email, social media, SMS text message, post or phone (although you may be asked to follow up with a request in writing).
Right to complain
If you would like to complain about our handling of your data, you can contact the The Butterfly Trust’s.
The Butterfly Trust, Swanston Steading, 109/3 Swanston Road, Edinburgh EH10 7DS.
You will receive an acknowledgement from us within two working days of your complaint being received.
If you would like to find out more about your information rights under data protection legislation, including the right to complain to the Information Commissioner’s Office (ICO), you can find more information at the ICO website: https://ico.org.uk/concerns/
How do you maintain confidentiality when I contact you?
We take every measure available to protect the confidentiality of our service users. Enquiries you make may appear on the site anonymously, for example in the form of ‘frequently asked questions’, so the answers can help other people. Any names or personal details will be changed to maintain your confidentiality.
If you contact The Butterfly Trust and we need to add your data to our secure database, we will ask for your preferences on how we use your data. If we don’t have the opportunity to ask you and you have not been in touch with the The Butterfly Trust previously, we will exclude you from all mailings.
What are cookies?
In your browser settings, you can choose not to accept cookies, but you may not be able to use all the interactive features of our website. For more information about cookies, and how to refuse or clear them from your history, please see http://www.allaboutcookies.org/.
What do cookies do?
Disadvantages of cookies. The main drawback is the privacy for most users. The cookie enabled web browsers keep track of all the websites you have visited , the third parties can access the information stored by these cookies. These third parties can be advertisers, the other users or the government in some cases .
Third Party Cookies
We utilise a number of third party technologies on our website who may deploy a cookie to your device. We have no control over these third-party cookies but you can see the list of the The Butterfly Trust third parties we use below, with a link to their cookie details:
At The Butterfly Trust we hope that you won’t ever need to, but if you do want to complain about our use of personal data, please send an email with the details of your complaint to Managing Director:
The Butterfly Trust, Swanston Steading, 109/3 Swanston Road, Edinburgh EH10 7DS. We will look into and respond to any complaints we receive.
You also have the right to lodge a complaint with the supervisory authority in your country of residence, place of work or the country in which an alleged infringement of data protection law has occurred within the EU. The Information Commissioner’s Office (“ICO”) is the UK data protection regulator/supervisory authority. For further information on your rights and how to complain to the ICO, please refer to the ICO website.
Changes to Policy
We reserve the right to amend this privacy statement so please do check back from time to time. If we do so, we will post notice of the change on our website and make every effort to inform you of any material changes to the policy. This policy will have been provided to you – either in full or via hyperlink – at the time your data was submitted to the The Butterfly Trust.