Donate

Privacy Policy

Northern Counties Kidney Research Fund (NCKRF), charity number 700037, understands the importance of protecting your privacy. This policy is designed to ensure that NCKRF complies with the Privacy and Electronic Communications Regulations (PECR) and the UK General Data Protection Regulation (UK GDPR) and related UK data protection laws.

 

The PECR governs how personal data is collected, stored, and used in relation to electronic communications, including email marketing, text messaging, and cookies. This policy outlines the charity’s approach to protecting the privacy of individuals when we collect and process personal data in these contexts.

*This privacy notice tells you what to expect us to do with your personal information.

Contact Details

Post: c/o Professor Neil Sheerin, Renal Services Centre, Freeman Hospital, Freeman Road, High Heaton, Newcastle upon Tyne NE7 7DN

Email our Chairman: john.kirby@NCKRF.onmicrosoft.com

What information we collect, use and why 

We collect or use the following information:

  • Your first name, surname, and title.
  • Contact details: your email address.

We may collect your personal data to:

  • To keep you updated about our work and opportunities to support us further.
  • If you ask for information or updates.
  • If you make a donation whether one-off or regular.
  • Responding to queries or concerns.

We will ensure that we only collect data relevant to our interactions with you.

Cookies

A computer cookie is small text file that website sends to your computer when you visit it. Cookies help websites remember information about you, such as your preferences. You can choose to disable cookies in your browser. Our cookie policy and information collected can be found here: https://www.nckrf.org.uk/cookie-policy

More information about Cookies can be found on the Information Commissioner's Office (ICO) website: https://ico.org.uk/for-the-public/online/cookies/

Lawful bases and data protection rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the Information Commissioner's Office (ICO) website. Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptionss which may apply on the ICO's website:

  • Your right of access. You have the right to ask for copies of your personal information. Yo can request other information such as detais about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
  • Your right to rectification. You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
  • Your right to erasure. You have the right to ask us to delete your personal information.
  • Your right to restriction of processing. You have the right to ask us to limit how we can use your personal information.
  • Your right to object to processing. You have the right to object to the processing of your personal data.
  • Your right to data portability.  You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
  • Your right to withdraw consent. When we use consent as our lawful basis you have the right to withdraw your consent at any time.

If you make a request, we must respond to you without undue delay and in any event within one month.

Our lawful basis for collecting or using personal information is:

  • Consent. We have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do you have the right to withdraw your consent at any time.
  • Email marketing
    • We will only send marketing emails to individuals who have opted in to receive such communications.
    • Individuals must opt in to receive email marketing from us, and they will be given clear instructions on how to do so.
    • All marketing emails will include and easy-to-use method for individuals to opt out or unsubscribe from future communications.
  • Cookies and Tracking Technologies
    • We will ask for consent before placing non-essential cookies (e.g., cookies used for analytics or advertising) on users' devices.
    • We will provide a clear notice about the use of cookies in this document and on our website, and allow users to manage their cookie preferences.

Where we get personal information from

We get personal data directly from you whenever you contact us. This could be face-to-face social media, post, email, telephone, or our website. We may also receive limited personal data from our third-party fundraising platforms after you have consented.

How long we keep information

We will only retain personal data for as long as it is necessary to fulfill the purpose for which it was collected or as required by law.

Our Data Retention Schedule can be found here.

Data Security

All personal data is stored and protected on a secure IT platform. We will implement appropriate technical and organisational measures to protect personal data from unauthorised access, accidental losss, or damage. This includes.

  • Access Control: Limiting access to personal data to authorised personnel only.
  • Data Minimisation: Only collecting the necessary amount of personal data required for purpose.

We do not transfer data outside the UK.

Who we share information with

The following are third-party platforms used by NCKRF for fundraising activities, including information and payment collection. They are known as Data Controllers under GDPR, which means each is an organization that determines the purposes and means of processing personal data and so they must comply with all data protection principles and demonstrate their compliance to relevant authorities. Refer to their Privacy Policy for further information about how they process your data.

JustGiving

This data controller does the following activities for us: process donations to NCKRF, either ad-hoc, monthly or through events.

Eventbrite

This data controller does the following activities for us: process information about events, including sales of tickets e.g. Burn's Supper.

Sumup Store

This data controller does the following activities for us: process sales of items e.g. Christmas cards.

Enthuse

This data controller does the following activities for us: process event information and payments e.g. Great North Run.

Jumblebee

This data controller does the following activities for us: process auction events and sales when required.

Legacy Link

This data controller does the following activities for us: process administration of legacies from wills and trusts.

Legal Jurisdiction

Any disputes regarding this privacy statement will be resolved under the laws of the United Kingdom.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us via our website: https://www.nckrf.org.uk/complaints

If you remain unhappy with how we've used your data after raising a complaint with us, you can also raise a complaint to the ICO:

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Helpline number: 0303 123 1113

Website: https://ico.org.uk/make-a-complaint

Policy Review

Last updated: April 2025

This policy will be reviewed and updated as necessary to ensure compliance with PECR, UK GDPR, and any changes in applicable regulations.

The latest version will always be available on our website.