We want to reach many more of our colleagues in need and do more than ever before to provide help when and where it's needed most
ABTA LifeLine is committed to protecting and respecting your privacy. This notice sets out how we will use any personal data that we hold about you.
The data controller is ABTA LifeLine of 30 Park Street, London SE1 9EQ.
Depending on the reason you have contacted us or we have contacted you, we will hold the following information about you:
Information you give to us This is information about you that you give us when you wish to make use of our services by filling in forms on our website www.abtalifeline.org.uk, or by corresponding with us by phone, email or otherwise.
It includes information you provide when you submit an enquiry form for help, subscribe to updates from us, and, when you report a problem with our site. In addition, if you are acting in a business or in a supporting capacity, it may include information you provide if you are enquiring about how to support ABTA LifeLine or need some advice on holding an event or participating in a challenge.
Information we receive from other sources Where relevant, we may receive personal data from third parties including, for example, other charities, debt advice services, Citizens Advice Bureau, Turn2Us, SSAFA, Stepchange, JustGiving, housing associations, care workers, medical support services, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies and debt collection and tracing agencies, and or other companies in the same group as ABTA / ABTA LifeLine.
Information relating to businesses only If you are acting in a business capacity, this information will include information required if you apply to support ABTA LifeLine's £1 Per Employee Appeal, make a corporate donation, or are involved in an ABTA LifeLine event. In such cases, the information may also include:
Company name
Number of employees
Payment details
Information we collect about you With regards to each of your visits to our website, we will automatically collect the following information:
Technical information; including the Internet Protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
Information about your visit; including the full Uniform Resource Locators (URL), click stream to, through and from our site (including date and time), services you viewed or searched for, page response times, download errors, lengths of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our helpline.
Where you consent, we will obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain certain information that is transferred to your computer's hard drive. They help us to improve our site, to deliver a better service, and more personalised content. They enable is to:
Estimate our audience size and usage pattern
Store information about your preferences, allowing us to customise our site according to your individual interests
Speed up your searches
Recognise when you return to our site
Types of cookies we use and why
Depending on the reason for holding your data, we will use the information we hold for the following purposes:
Where relevant, to provide assistance services
To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes
To send you correspondence and communicate with you
To further our charitable objectives
As part of our efforts to keep our site safe and secure
Who we might share your information with Where necessary, or where we have the right to do so, we will share your personal information with any member of our group of companies and/or selected third parties including:
Suppliers and sub-contractors for the performance of any contract we enter into with them or you or for the provision of services that we agree to provide to you:
If we exchange emails with you our email system is provided by the Microsoft Corporation in the European Union and Mimecast Services Limited n the United Kingdom on behalf of ABTA.
If we send you information about ABTA LifeLine services and events, your details are processed by MailChimp The Rocket Science Group in the United States of America on behalf of ABTA. MailChimp participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. You can view the MailChimp Privacy Policy here. so that these visitors do not have to enter their password for every Members only or admin page they visit.
Where relevant to processing an application and only with your permission:
We will disclose your personal information to third parties:
If substantially all of our assets are acquired by a third party, personal information held by us may be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use or terms and conditions of supply and other agreements; or to protect the rights, property, or safety of ABTA LifeLine, our partners, beneficiaries or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Using your data for marketing purposes If you are acting in a business capacity we will use your data for legitimate marketing purposes where we believe our services will be of interest to you. You can ask us not to use your personal data for marketing purposes. You can do this by checking certain boxes on the forms we use to collect your data and on any marketing emails we send you. You can also ask us at any time by contacting us.
The basis on which we might use your personal data We will only use your personal data where one or more of the following apply: 1. You have given your consent to the use (which you can withdraw at any time by notifying us), or, 2. It is necessary -
(a) for the performance of a contract between us, or, (b) for the taking of steps at your request with a view to entering into a contract or,
3. It is necessary for compliance with legal obligations that we must comply with, or 4. It is necessary in order to protect your interests. 5. It is either:
(a) the disclosure of personal data by us as a member of the anti-fraud organisation or otherwise in accordance with any arrangements made by such an organisation; or (b) any other use by us of personal data, and it is necessary for the purposes of preventing fraud or a particular kind of fraud.
6. It is necessary for us to pursue our legitimate interests such as marketing our services in the appropriate circumstances for example where you have used our services and have not objected to receiving information about further services of a similar nature.
How long will we hold your personal data for? We will keep your data for as long as it is necessary for the particular purpose or purposes for which we hold it unless there are any legal or operational reasons to hold it for a longer period. At the end of that period the data we hold will be securely destroyed.
Your rights in respect of the personal data we hold about you You can ask to see a copy of the information that we hold about you and for corrections to be made to any incorrect information. We want to be as helpful as possible and, in most cases will provide the information within one month of your request. We do not have to provide information in all cases including where it would involve disclosing information about another person or where a request is excessive or manifestly unfounded and may make a charge for providing the information in some cases.
You have the right to receive data concerning you in a structured, commonly used and machine readable format and you have the right to transmit those data to another controller.
You can also ask us for the following information:
the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipient to whom the personal data have been or will be disclosed;
where it is possible for us to provide the information, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
where we have not collected the data from you, any available information as to their source.
You can ask us to erase any data that we hold about you where one of the following grounds applies:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you withdraw your consent to the processing and there is no other legal ground for the processing;
you object to processing on grounds relating to your particular situation and our legitimate grounds for processing do no override your interests;
you object to processing for direct marketing purposes;
the personal data have been unlawfully processed;
the personal data have to be erased for compliance with legal obligation in Union or Member State law to which we are subject.
We are not required to erase your data where we need to process your data:
for exercising the right of freedom of expression and information;
for compliance with legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
for reasons of public interest in the area of public health;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes so far as the erasure of data is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercise or defence of legal claims.
You can ask us to restrict our processing of your data where one of the following applies:
you contest the accuracy of the personal data we hold about you for a period enabling us to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
we no longer need the personal data for the purposes of the processing, but the data are required by you for the establishment, exercise or defence of legal claims;
you object to processing on grounds relating to your particular situation pending the verification of whether our legitimate grounds for processing override your interests.
Where we store your personal data
We will take all steps reasonable necessary to ensure that your data is treated securely and in accordance with this privacy notice. The data we collect from you may be transferred to and stored at a destination outside the European Economic Area (''EEA''), for example MailChimp. It may also be processed by staff operating outside the EEA who work fr us or for one of our suppliers. This includes staff engaged in, among other things, the fulfillment of your order, the processing of your payment details and the provision of support services.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data and have contractual processes in place with our business partners to do this, we cannot guarantee the security of your data transmitted to our site. Once we have received your information, we will use relevant procedures and security features to try to prevent unauthorised access. Links from our website Our site may contain links to and from the websites of our partner networks, other charity providers, advice agencies and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy notices and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Advice and assistance Questions, comments and requests regarding this privacy notice are welcomed and should be addressed to ABTA LifeLine, 30 Park Street, London SE1 9EQ.
If you think that there is a problem with the way that we are handling your data, you have the right to complain to the Information Commissioner's Office. You can call their helpline on 0303 123 1113 or visit https://ico.org.uk/make-a-complaint/.
Changes to this privacy notice
We keep our privacy notice under regular review. This privacy notice was last updated on 3 December 2018.