Website Privacy Policy
www.primrosefoundation.org is a website operated by The Primrose Foundation. We are a registered charity; our registration number is 1064277 in England and Wales. Our main contact address is The Primrose Breast Care Centre, Level 7, Derriford Hospital, Plymouth, Devon PL6 8DH.
The Primrose Foundation takes the privacy of our beneficiaries, supporters, staff and volunteers very seriously. We are committed to protecting your privacy and every reasonable effort is taken to ensure that your information is kept secure and intact. This policy describes how The Primrose Foundation collects and uses personal information about the people who visit our website and give us their data over the phone, face-to-face, via donation platforms and in writing. This policy also states how and why we use data, how we store it and how individual personal preferences can be amended.
The terms of this policy may change, so please check it from time to time. This version was published in January 2023 & supersedes all previous versions.
By using our website, you are accepting and consenting to the practices described in this policy. If you have any queries about this policy please contact:
The Data Protection Officer, The Primrose Foundation, The Primrose Breast Care Centre, Level 7, Derriford Hospital, Plymouth, PL6 8DH. Email; info@primrosefoundation.org
The Primrose Foundation Privacy Statement
GDPR provides the legal framework that defines how personal information can be used. The Primrose Foundation is fully committed to complying with the principles set out in GDPR and has a legal duty to protect any information we collect from you. Please read this privacy policy to understand how we use your data. In summary:
Only information that we need is collected.
Your personal information is only used for the purpose for which we collect it.
Your personal information is only seen by those who need it to do their jobs.
We will only disclose data when we have your consent, or where we are obliged to disclose personal data by law, or as expressly permitted under the GDPR (through contract; legal obligation, vital interests; public task; or legitimate interests).
We will keep your information up to date. Inaccurate or misleading data will be corrected as soon as possible.
Personal information is retained only for as long as it is required for the purpose collected; normally, this will be for a maximum of 6 years if we do not hear from you during this time. Unless there is a legal requirement to do otherwise, at the six-year point, we will take steps to remove your information from our records.
The above principles apply whether we hold your information on paper or in an electronic form.
How do we collect information?
If you provide services to The Primrose Foundation, we will collect information in line with your contract for services.
We gather general information about the use of our website, such as which pages users visit most often and which services, events or facilities are of most interest. At times we may track which pages users visit when they click on links in emails.
We obtain personal information from you when you sign up for our newsletter, enquire about an activity, wish to or fundraise for us and or donate to us also. We will only ever collect the information that we need, including data that will be useful to help improve our services. The information is either needed to fulfil your request or to enable us to provide you with a more personalised service.
What information do we collect?
The personal information we collect might include name, email address and postal address.
Why do we collect this information?
We collect this information for the purpose of promoting the aims of the Charity and communicating effectively and appropriately with our supporters. The lawful basis for which we process your information is set out below:
How do we use this information?
Promote the aims of The Primrose Foundation
To provide and personalise our services to our supporters
To communicate with our supporters
To provide you with information that you have indicated an interest in, for example, information about our campaigns, volunteering, fundraising or how you can donate to us
We may use this information to personalise the way our website is presented when users visit it, to make improvements to our website and to ensure we provide the best service for users
To claim Gift Aid on your donation/s;
For administrative purposes.
If you enter your contact details in one of our online event forms, we may use this information to contact you. We will only do this with information referencing the event to have signed up to or queried.
We do not share your information with anybody else, however, we may need to disclose your information if required to do so by law or as expressly permitted under applicable data protection legislation.
We do not sell personal details to other charities or other third parties.
Our websites may include links to websites run by other organisations. The Primrose Foundation is not responsible for the privacy practices of these other websites so you should read their privacy policies carefully before sharing any personal or financial data.
Storing and protecting your information
We recognise the concerns that many people have about giving personal information online.
We place great importance on the security of all personally identifiable information associated with our beneficiaries, supporters, staff, and volunteers. We have security measures in place to protect against the loss, misuse and alteration or destruction of personal data under our control. Information is stored by us on computers located in the UK. We may also store information on paper files. All our online forms are protected by encryption. We also use a secure server when you donate or make a payment via our website.
However, no data transmission over the internet is 100% secure. As a result, whilst we cannot absolutely guarantee that loss, misuse, or alteration of data will not occur while it is under our control, we use our best efforts to prevent this and protect your personal information.
We will keep your information only for as long as we need it to provide you with the goods, services, or information you have required, to administer our relationship with us, to inform our research or the preferences of our supporters, to comply with the law and tax accounting rules, or to ensure that we do not communicate with people who have asked us not to.
When your information is no longer required, we will always dispose of it securely, in accordance with our retention of records policy.
Transfer of Information Outside of the EU
Given that the Internet is a global environment, using it to collect and process personal data necessarily involves the transmission of data on an international basis. This means for instance that data you pass to us may be processed outside the European Economic Area, although the data will always be held securely, we will take steps to ensure that any third-party organisation we engage to process data on our behalf provides an adequate level of protection in accordance with GDPR. By submitting your personal information, you agree to this transfer, storing or processing at a location outside the EEA.
Under 13s
The Primrose Foundation is concerned to protect the privacy of children aged under 13. We will seek consent from a parent or guardian before collecting personal information about a child aged under 13. We will not knowingly request or collect from a child any information online that can be traced to the child, such as an email address, name, or information about the child’s family. Unless a parent or guardian consents to such use in advance, we will not knowingly use information that a child provides to us for any fundraising or promotional purpose.
Your Rights
You have a right to object to The Primrose Foundation processing your personal information (‘right to object’) at any time where we rely on our legitimate interests for doing so. Such a request must be sent to the Data Protection Officer at the above address.
You also have a right to object to our processing of your data for the purposes of marketing. The Primrose Foundation always acts upon your choices around what type of communications you want to receive and how you want to receive them. You have a choice about whether you want to receive information about our charity’s work and fundraising activities. We make it easy for you to tell us how you want us to communicate, in a way that suits you. Our forms have clear marketing preference questions, if you don’t want to hear from us then that’s fine. We will not use your personal information for marketing purposes if you have indicated that you do not wish to be contacted. You can change your marketing preferences for what you receive from us and how, at any time, by contacting:
The Data Protection Officer, The Primrose Foundation, The Primrose Breast Care Centre, Level 7, Derriford Hospital, Plymouth, PL6 8DH. Email: info@primrosefoundation.org
You have a right to ask us to confirm whether we are processing information about you and to request access to this information (‘right of access’). We may however ask you for proof of your identity before we can act upon your request. To obtain a copy of the personal information we hold about you, please write to us or submit your form to:
The Data Protection Officer, The Primrose Foundation, The Primrose Breast Care Centre, Level 7, Derriford Hospital, Plymouth, PL6 8DH. Email: info@primrosefoundation.org
You may ask us, or we may ask you, to rectify information you or we think is inaccurate, and you may also ask us to remove information which is inaccurate or complete information which is incomplete (‘right to rectification’)You’re your personal details change, please help us to keep your information up to date by notifying us at
the address below:
The Data Protection Officer, The Primrose Foundation, The Primrose Breast Care Centre, Level 7, Derriford Hospital, Plymouth, PL6 8DH. Email: info@primrosefoundation.org
You have a right to ask us to restrict our processing of your information (‘right to restriction’) if:
You contest its accuracy, and we need to verify whether it is accurate
The processing is unlawful and you ask us to restrict the use of it instead of erasing it
We no longer need the information for the purpose of processing, but you need it to establish or defend legal claims
You have objected to the processing of your information being necessary for the performance of a task carried out in the public interest, or for the purposes of our legitimate interests. The restriction would apply while we carry out a balancing act between your rights and our legitimate interests.
If you would like to exercise any of your rights above, please contact the Data Protection Officer at our address, unless we have provided specific contact details in respect of one of the rights we have set out. We will act in accordance with your instructions as soon as reasonably possible and there will be no charge.
You have a right to report any of your concerns about our use of your data to the Information Commissioner’s Office. You may do so by calling their helpline at 01752 431579.
Trademarks and copyright
The Primrose Foundation’s website contains material which is protected by copyright and/or other intellectual property rights. All copyright and intellectual property rights including the names, images and logos are owned by The Primrose Foundation unless otherwise stated. All rights are reserved.
You are responsible for complying with all applicable copyright laws. We permit you to make copies of information on The Primrose Foundation’s website as necessary incidental acts during your viewing and you may take a print for your personal use of so much of the site as is reasonable for private purposes. All other uses are prohibited. Nothing in these terms shall be construed as conferring any right to use any trademark, logo, patent right or copyright of The Primrose Foundation.
Changes
We may change the terms of this privacy statement on occasion but will not reduce your rights under this Privacy Policy without your explicit consent. If we do so, we will post the changes here, so please check from time to time. We will also keep prior versions of this Privacy Policy in an archive. By continuing to use our websites you will be deemed to have accepted such changes.
If you have any questions about this policy or how we use data please contact the Data Protection Officer at the above address or via email to info@primrosefoundation.org
Data Protection Regulator
Further information and advice about data protection is available from:
The Data Protection Officer, The Primrose Foundation, The Primrose Breast Care Centre, Level 7, Derriford Hospital, Plymouth, PL6 8DH. Email: info@primrosefoundation.org
Fundraising Preference Service
The Primrose Foundation supports the Fundraising Regulator and its efforts to develop the Fundraising Preference Service as a means of rebuilding trust between charities and the public. The Charity is committed to upholding fundraising best practices and being as transparent as possible with our donors.
Review date: January 2026