Privacy

We are committed to protecting your privacy and promise to respect your personal information and do all we can to keep it safe. We always aim to communicate with you respectfully, effectively and efficiently. Our forms give clear choices and we include information on how to change your communication preferences whenever we contact you. This helps us send you news of our work only if you have explicitly stated you are happy for us to do so in ways that are most convenient to you (email, SMS, phone, post). We aim to be clear about how we obtain your details and only process them in ways we believe you would reasonably expect. This includes not selling or sharing personal details with third parties for the purposes of their marketing.

Mission Aviation Fellowship UK (MAF UK) is the data controller for your personal data. We are a registered charity in England and Wales (1064598) and Scotland (SC039107).

You can contact us using the following details:

Postal address:

Data Protection Officer
Mission Aviation Fellowship UK
1st Floor, Castle House
Castle Hill Avenue
Folkestone
KENT
CT20 2TQ

Tel: 01303 852819

Email: dpo@maf-uk.org

We receive your personal data both directly and indirectly.

Receiving your personal data directly

We receive your personal data when you contact MAF UK to make a donation, register to receive news about our work, sign up to MAF UK’s online content, or you telephone, email, write to or text MAF UK, engage with MAF UK via social media channels, sign up for one of our events, or order our resources online.

We receive your personal data when you attend a meeting or an event, fill out a questionnaire, join our business club or have a conversation with us and provide us with information about yourself.

Receiving your personal data indirectly

We sometimes receive your personal data indirectly. For example, your information may be shared with us by independent fundraising sites such as JustGiving or Virgin Money Giving when you give a gift. These organisations will only do so with your consent if you have indicated that you wish to support MAF UK. You should check their Privacy Notice when providing your information to understand fully how they will process your data.

Publicly available data

In addition, we may seek further information about you that is publicly available from external sources. We use this to gain a better understanding of our supporters (particularly our major donors) to enable us to communicate with you in more appropriate ways that may suit your interests.

If you have not heard from us before, we will contact you to provide you with our Privacy Notice to ensure you are aware that MAF UK is processing your data and why.

The information we get from other organisations may depend on your privacy settings or the responses and permissions you give to that other organisation, so you should check them regularly.

This publicly available information comes from the following sources:

Social media

Depending on your settings or the Privacy Notices for social media and messaging services like Facebook, WhatsApp or Twitter, we might have permission to access information from those sources. We will not add this information to your personal details.

Other information that is available publicly

This may include information found in publicly available sources such as Companies House, LinkedIn, the Charity Commission, companies, grant-making trusts and Government websites, biographical directories and information that has been published in reputable media.

When you use our website

Like most websites, we use ‘cookies’ to help us make our site, and the way you use it, better. Cookies are small text files that sites transfer to your device (computer, phone or tablet) and make interacting with a website faster and easier – for example, by automatically filling in your name and address in text fields.

MAF UK may store information about you and your activity in cookies. If you want to delete any cookies that are already on your computer, please refer to the instructions for your file management software to locate the file or directory that stores cookies.

For more information about cookies, how we use them and your personal consent preferences, please click here.

If you support us — for example, make a donation, sign up to receive news of our work, volunteer, take part in an event, or order our resources — we will usually collect:

-Your name.

-Your contact details, including postal address, email, telephone numbers, along with your preferences as to which of these we should use to contact you in the future.

-Your date of birth.

-Bank account details if you make a regular donation by direct debit or standing order.

-Debit or credit card details used to donate to us or when ordering resources – this could be online, over the phone or by mail. We will process your information securely and in accordance with the Payment Card Industry Standards. Your details are only used to complete the transaction requested; we do not store your debit or credit card details. If you have provided them physically, they are securely destroyed once your donation or payment has completed.

-Your Gift Aid status.

-Your position within an organisation or charitable trust (if relevant).

-In some cases, we may also gather additional personal information which may include your interests in aviation, overseas development, philanthropic activities and your other interests.

-Other personal information or sensitive data you share with us, such as your family information, denomination, and your home church, and any appropriate health issues you may have told us about that will help us communicate with you in the most appropriate way (eg, large print).

The information we gather helps us to send you what you want when you want it, to fulfil orders for resources, and send you updates and information about our work.

It also helps us to shape our fundraising activities to ensure that our communication is relevant and timely, and provides you with a good experience of supporting MAF UK. Importantly, having accurate information that we can analyse enables us to tailor approaches and to be wise stewards of the resources entrusted to us, ensuring that the maximum amount possible goes to providing life-saving flights in developing countries.

We do not sell or share personal details to third parties for the purposes of their marketing.

The below table shows the purposes for which we process your personal data and the lawful bases we rely on for those purposes.

The security of your information is very important to us. We ensure that there are appropriate controls and procedures in place to protect your personal details. For example, information you submit on a physical form or when filling out online forms is encrypted and stored on a secure server. We also use encryption and secure servers when you make a donation via our website.

However, despite all the security and protection we put in place, the Internet cannot be guaranteed to be 100% secure.

We undertake regular reviews of who has access to information we hold to ensure that your details are only accessible by appropriately trained and authorised staff.

Some of your information will be passed to third-party service providers that perform functions on our behalf, such as:

• Digital advertising/marketing including social media organisations.
• Paper advertising/marketing.
• Payment processing.
• Sending postal mail.
• Managing data.
• Storing data.
• Analysing data.
• Research and lead generation.

These companies may only use your information to perform these functions and may not use it for any other purposes. We carry out comprehensive checks on these companies before we work with them and put a contract in place, wherever possible, that sets out our expectations and requirements, especially regarding how they manage the personal data they have collected or to which they have access. They are required to destroy this information once the function for which it has been transferred has been carried out.

If required, we may need to disclose your details to the police, regulatory bodies or legal advisors.

Due to the nature of servers and cloud-based storage all over the world, this may mean that, during the processing of your data, it leaves the UK. Although they may not be subject to the same data protection laws as in the UK, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law.

For data that is stored outside of the UK, we share data to countries for which an adequacy decision is in place. If there is no adequacy decision in place, we have Standard Contractual Clauses (SCCs) in place with the relevant third parties.

If you would like further details of the protections we have put in place regarding international data transfers, please contact us.

We intend to minimise the amount of personal data that we store about you. We will keep personal data for the shortest time necessary in accordance with our Retention Policy.

Where there are legal obligations in place, we may have to keep your data for longer. For example, we will keep a record of any donations you have made for at least seven years.

If you ask us to cease communications with you, we will keep a record of your contact details and appropriate information to enable us to comply with your request.

You have the following rights under data protection law. You can exercise your rights by contacting us using the contact details at the top of this privacy notice. We will respond to your request without undue delay and in any case within one month. It may be necessary to take steps to ascertain your identity if there are reasonable doubts about your identity, in which case we may request further information from you.

Right of access

You have the right to ask for a copy of the information we hold about you.

Right to rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. If there are any discrepancies in the details we provide, please let us know and we will correct them.

Right to erasure

You have the right to ask us to erase your personal information in certain circumstances.

Right to restriction of processing

You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Right to object and withdraw consent

You have the right to object to the processing of your personal information in certain circumstances. Where processing is based on consent, you have the right to withdraw your consent at any time. You can also change or stop what you receive from us by following the instructions at the bottom of any postal communication or email, or you can contact us by phone at any time.

Right to portability

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

If you have any concerns or questions about our use of your personal information, you can contact us using our contact details at the top of this Privacy Notice. We will respond to you within one month.

If we are unable to resolve your concerns, you can also complain to the ICO or your local supervisory authority.

ICO website: https://www.ico.org.uk

We may update this Privacy Notice from time to time to ensure it provides fully up-to-date information. The latest version of our Privacy Notice can always be found on this page. For any major changes, we may contact directly you to inform you of these.

Please read our full Recruitment Privacy Notice for more information.