We (EMPOWER AFGHAN WOMEN) are committed to protecting your privacy and ensuring appropriate security for your personal information. This Privacy Notice explains the types of personal information we collect; how we use that information; who we share it with; how we protect that information; and your legal rights.
You should read this Privacy Notice together with any other privacy policy we may provide you on specific occasions when collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This Privacy Notice supplements other such notices and is not intended to override them.
For the purpose of applicable data protection laws, the data controller is Empower Afghan Women (EAW) not for profit organisation registered in England and Wales registered company number 15116786.
6 Moorhouse Street Blackpool FY1 2HL, U.K.
This means that we are responsible for determining how and why your personal data is processed.
CONTENTS:
Below is a list of Contents of this Privacy Notice. You can use the links in this section to go directly to the different sections of this Privacy Notice to help you understand our practices and your rights with respect to your information:
How we collect information
Information covered by this privacy notice
Information you provide to us
Third party sources and publically available sources
Website usage information and other information collected automatically
How we use personal information
With whom we share personal information
Where we store your personal information
How long we keep your personal information for security
Your choices and privacy rights
Contact us
How we collect information
Information covered by this privacy notice
This Privacy Notice explains how we collect and process personal information. In this Privacy Notice, "personal data" or "personal information" means information that (either in isolation or in combination with other information) enables you to be identified as an individual or recognised directly or indirectly. This may include, but is not limited to, your name, company name, postal address, email address, phone number, company, location, details of the preferences you express to us, your comments and questions, and technical information from the devices you use to access our website.
Information you provide
We may collect personal information from you when you access our website, contact us, communicate with us, make a donation online, purchase a product from us, register for services from us on our website or otherwise provide information to us, including:
• Name;
• Contact information (including email address, phone number, postal address);
• Eligibility criteria (including age and gender);
• Employment status and qualifications;
• Information relating to your online browsing activities on the Empower Afghan Women's website;
• Your communication preferences;
• Your payment details (including card information, name and address of bank card);
• Any other personal data contained within correspondence and communications between you and Empower Afghan Women.
In some cases, you may provide personal information to us about another person. In such cases, it is your responsibility to ensure that you have the authorisation of such person to provide us with such information.
Providing your personal data may be necessary for the purposes of entering into a contract with us or to receive our services, or may otherwise be voluntary. If you do not wish to provide your personal data to us, we may not be able to: (a) provide the services you request, (b) respond to your queries, or (c) provide you with updates about our organisation.
Third-party sources and publically available sources
We also work closely with third parties (such as fundraising sites and event organisers), who may provide us with information which we may combine with the information you have provided to us. We process all personal data we obtain from such other sources in accordance with this Privacy Notice.
Using our website and other information collected automatically
When you visit our website, we may use cookies and other technologies to automatically collect the following information:
• Technical information, including your IP address, browser type and version, device identifier, location and time zone setting, browser plug-in types and versions, operating system and platform, page response times and download errors;
• Information about your visit, including the websites you visit before and after our website; and
• Length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse overs) and methods used to browse away from the page.
To learn more about how we use cookies and how to control which cookies are used, please see our cookie
Notice
When you access Empower Afghan Women's Social Media
We might also obtain your personal data through your use of social media such as Facebook, WhatsApp, youtube, depending on your settings or the privacy policies of these social media and messaging services. To change your settings on these services, please refer to their privacy notices.
How we use personal information
We use the personal information we collect from and about you for a variety of purposes and based on one or more legal justifications, as set out below:
Purpose
To manage our relationship with you, including:
• responding to your comments, queries and other correspondence;
• processing donations;
• providing you with services you have requested via our website;
• registering you for events; or
• Providing you with products purchased from us.
• To assess your eligibility for our services.
• To monitor the accessibility, the quality, the success of our services and to maintain our internal records.
• To keep our website safe and secure.
• To collect and analyse information on your recent visits to our website and how you move around different sections of our website.
• To keep an up-to-date suppression list where you have asked not to be contacted, in order for us to not inadvertently re-contact you.
• To provide you with updates about our organisation where this has been requested by you. To capture images to use in marketing materials.
• To find out more information regarding our current supporters and to identify potential new supporters.
Information
• We will require certain personal information (such as name, email address, postal address, telephone number, IP address, website usage information, location (country), and any additional personal data provided by you via email or phone) to manage our relationship with you. Generally, where you make a donation online or purchase a product from us, your card information is not held by us, it is collected by our third party payment processors, who specialise in the secure online capture and processing of credit / debit card transactions.
• We require certain information such as age and gender in order to assess your eligibility for our services
• We collect certain information such as employment status and qualifications to monitor the accessibility of our services
• We will keep records of your personal information, including but not limited to your name, address, and communication preferences, in order to administer our business.
• We may need to process your personal information in order to keep our website safe and secure and protect against illegal or fraudulent activity such as cyberattacks.
• We may keep collect personal information such as browser type and version, device identifier, location and time zone setting, browser plug-in types and versions, operating system and platform, page response times and download errors, websites you visit before and after our website, length of visits to certain pages, page interaction information and methods used to browse away from the page in order to understand how people use our website so that we can make improvements.
• We understand that you may prefer for us not to contact you with details of our products, services, or promotions. We keep records of your preferences to ensure that we do not contact you if you have asked us not to. We may need to process certain of your personal information (such as your name and email address) in order to do this
• We also process your personal data in order to create separate mailing lists to help ensure that the content you receive is more relevant to you.
• We may ask if we can take photographs and capture videos of your involvement in our organisation in order to demonstrate the different ways that young women get involved with us. We would only do this with your consent
• We may collect personal information from publicly available sources (such as the electoral roll, public registers, press reports and social media), including:
• Job
• Income
• Networks
• Charitable giving
Justification
• Necessary for our legitimate interests (to operate our business effectively and respond to your queries).
• Performance of a contract, where we have a contract with you or are about to enter into a contract with you.
• Necessary for our legitimate interests (to ensure that the correct individuals are receiving our services).
• Necessary for our legitimate interests (to monitor the success of our business).
• Necessary for our legitimate interests (to monitor the quality of our services and to resolve any safeguarding issues).
• Necessary for our legitimate interests (to administer our business).
• Compliance with our legal obligations, where we are required to retain the information by law.
• Necessary for our legitimate interests (to detect and prevent fraud, other crimes, and the misuse of our website).
• Necessary for our legitimate interests (to review the performance of our website in order to improve its functionality).
• Necessary for our legitimate interests (to maintain an up-to-date suppression list and ensure that we do not contact you where you have asked us not to).
• Processing based on consent of the data subject.
The creation of the marketing lists is necessary for our legitimate interests (to ensure that recipients receive the most relevant updates).
• Processing based on the consent of the data subject.
• Necessary for our legitimate interests (to identify supporters and potential supporters for our organisation).
Who we share personal information with
Your personal information is intended for us and may be shared with third parties in certain circumstances.
Our website may, from time to time, contain links to and from the websites of our partners, or affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy notices and that we have no control over how they may collect or use your personal information. You should check the privacy notices of third-party websites before you submit any personal information to them.
We may share your personal information with the following third party organisations:
Our service providers.
We use other companies or contractors ("Service Providers") to perform services on our behalf. We may share personal information with the following categories of Service Provider:
• Infrastructure and IT service providers;
• Insurance companies;
• Legal advisors;
• Auditors;
• Payment service providers; and
• Accountants.
In the course of providing such services, these Service Providers may have access to your personal information. However, we will only provide our Service Providers with the information that is necessary for them to perform the services, and we ask them not to use your information for any other purpose. We will always use our best efforts to ensure that all the Service Providers we work with will keep your personal information secure.
Third parties permitted by law.
In certain circumstances, we may be required to disclose or share your personal information in order to comply with a legal or regulatory obligation (for example, we may be required to disclose personal information to the police, regulators, and government agencies or to judicial or administrative authorities). We may also disclose your personal information to third parties where disclosure is necessary for our legitimate interests of protecting or defending our legal rights.
Where we store your personal information
We keep the information collected about you here in the United Kingdom and is governed by the English Law.
How long we keep your personal information
We will only retain your personal data for as long as it is reasonably necessary for the purpose for which that data was collected and to the extent permitted by applicable laws (including for the purpose of satisfying any legal, regulatory, tax, accounting or reporting requirements). We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. When we no longer need to use your information, we will remove it from our systems and records and / or take steps to promptly anonymise it so that you can no longer be identified from it.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.
Security
We have implemented technical and organisational security measures in an effort to safeguard personal information in our control, including limiting access to personal information only to employees and authorised Service Providers who need to know such information for the purposes described in this Privacy Notice, as well as other technical, administrative and physical safeguards.
While we endeavour to always protect our systems, sites, operations and information against unauthorised access, use, modification and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others, such as hackers.
Your choices and privacy rights
If you reside in the UK or any other country in the EEA, you have various rights in connection with our processing of your personal information, each of which is explained below.
Access. You have the right to request access to your personal information we are processing about you. For your own privacy and security, in our discretion we may require you to prove your identity before providing the requested information.
Rectification.
You have the right to have incomplete or inaccurate personal information that we process about you rectified.
Deletion.
You have the right to request that we delete personal information that we process about you, except we are not obliged to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
Restriction. You have the right to restrict our processing of your personal information where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it. In such case, we would mark stored personal information with the aim of limiting particular processing for particular purposes in accordance with your request, or otherwise restrict its processing.
Portability.
You have the right to obtain personal information we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal information which you have provided to us, and (b) if we are processing that data on the basis of your consent or to perform a contract with you and (c) the data is processed by automated means. Additionally, you have the right to require us to transmit such personal data directly to another controller, where technically feasible. This right is not applicable if it adversely affects the rights and freedoms of others.
Objection.
Where the legal justification for our processing of your personal information is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.
Withdrawing Consent.
If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge. This includes where you wish to opt out from marketing messages.
You can make a request to exercise any of these rights in relation to your personal information by sending the request by mail Empower Afghan Women, 6 Moorhouse Street Blackpool, FY1 2HL, U.K. or email to info@empowerafghanwomen.org.
Please note that we may require you to prove your identity before providing the requested information. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
You also have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with our data protection obligations. If you are based in, or the issue relates to, the UK, the Information Commissioner's Office can be contacted as follows:
Telephone +44 0303 123 1113
Website www.ico.org.uk
Web-form www.ico.org.uk/concerns
Address Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Note that the rights outlined above only extend to personal information.
Changes to this privacy notice
This Privacy Notice is written in English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this notice, the English version shall prevail.
We reserve the right to change our Privacy Notice from time to time. If we decide to change our Privacy Notice we will notify you by adding a notification to the home page of our web site.
Contact us
If you have any questions about this Privacy Notice or about the privacy policies and practices of our service providers, please contact us at info@empowrafghanwomen.org, or at: Empower Afghan Women, 6 Moorhouse Street, Blackpool, FY1 2HL, U.K.