Privacy Policy Privacy and Cookies for Aortic Centre Trust This is the Privacy and Cookies Policy for the website www.aorticcentretrust.co.uk ("we","us" and "our site"). The site is operated by or on behalf of Raising IT (189-190, Shoreditch High Street, London, E1 6HU, UK). We are committed to protecting and respecting your privacy. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By using the site you acknowledge you have read and understood this privacy policy. For the purposes of European Economic Area data protection law, (the "Data Protection Law"), the data controller is: Raising IT Information we collect about you We will collect and process the following personal data from you: Information you give us This is information about you that you give us directly when you interact with us. Find out more This is information about you that you give us by filling in forms on our site or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our site, subscribe to our service, search for a product, place an order on our site, participate in discussion boards or other social media functions on or via our site, enter a competition, promotion or survey, submit a query, and when you report a problem with our site. The information you give us may include your name, address, e-mail address and phone number, financial and credit card information, personal description and photograph, login and password details. Information we collect about you from your use of our site: We will automatically collect information from you each time you visit our site. This includes: Technical information Information about your visit · Technical information may include the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; · Information about your visit may include the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number or social media handle used to connect with our customer service team. In this case we will have informed you when we collected that data if we intend to share your data internally and combine it with data collected on this site. We will also have told you for what purpose we will share and combine your data. We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, and search information providers). We will notify you when we receive information about you from them and the purposes for which we intend to use that information. Cookies and other technologies Our site uses cookies and/or other similar technologies such as to collect and store certain information. These typically involve pieces of information or code that a website transfers to or accesses from your computer hard drive or mobile device to store and sometimes track information about you. Cookies and similar technologies enable you to be remembered when using that computer or device to interact with websites and online services and can be used to manage a range of features and content as well as storing searches and presenting personalised content. Our site uses cookies and similar technologies to distinguish you from other users of our site. This helps us to provide you with a good experience when you browse our site and also allows us to improve our site. Most web browsers automatically accept cookies and similar technologies, but if you prefer, you can change your browser to prevent that and your help screen or manual will tell you how to do this. We also give you information about how to disable cookies here. However, you may not be able to take full advantage of our website if you do so. A number of cookies and similar technologies we use last only for the duration of your web or app session and expire when you close your browser. Others are used to remember you when you return to the site and will last for longer. We use these cookies and other technologies on the basis that they are necessary for the performance of a contract with you, or because using them is in our legitimate interests (where we have considered that these are not overridden by your rights), and, in some cases, where required by law, where you have consented to their use. We use the following types of cookies: · Strictly necessary cookies. These are cookies that are required for the operation of our website and under our terms with you. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services. · Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us for our legitimate interests of improving the way our website works, for example, by ensuring that users are finding what they are looking for easily. · Functionality cookies. These are used to recognise you when you return to our website. This enables us, subject to your choices and preferences, to personalise our content, greet you by name and remember your preferences (for example, your choice of language or region). Except for essential cookies, all cookies used on our site will expire after seven years. You can find more information about the individual cookies we use and the purposes for which we use them here: How we use your information We use information held about you in the following ways: Information you give to us: We will use this information to: Provide you with information about our charitable purpose, if you have given your consent to receiving marketing material from us at the point we collected your information, where required by law or otherwise in our legitimate interests provided these interests do not override your right to object to such communications. Ensure in our legitimate interests that: content from our site is presented in the most effective manner for you and for your computer. we provide you with the information, products and services that you request from us. Information we collect about you from your use of our site We will use this information in our legitimate interests, where we have considered these are not overridden by your rights: To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes. To keep our site safe and secure. For measuring or understanding the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you. To improve our site to ensure that content is presented in the most effective manner for you and for your computer. To allow you to participate in interactive features of our service, when you choose to do so. Our promotional updates and communications Where permitted in our legitimate interest or with your prior consent where required by law, we will use your personal information for marketing analysis and to provide you with promotional update communications by email about our charity. You can object to further marketing at any time by selecting the "unsubscribe" link at the end of all our marketing and promotional update communications to you, or by sending us an email to [email protected] Who we give your information to We may give your information to: Selected third parties. Our selected third parties may include: · Organisations who process your personal data on our behalf and in accordance with our instructions and the Data Protection Law. This includes in supporting the services we offer through the site in particular those providing website and data hosting services, providing fulfilment services, distributing any communications we send, supporting or updating marketing lists, facilitating feedback on our services and providing IT support services from time to time. These organisations (which may include third party suppliers, agents, sub-contractors and/or other companies in our group) will only use your information to the extent necessary to perform their support functions. · Analytics and search engine providers that assist us in the improvement and optimisation of our site and subject to the cookie section of this policy (this will not identify you as an individual). · Payment processing providers who provide secure payment processing services. Please note your payment card details are not shared with us by the provider. We will disclose your personal information to third parties: · In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets subject to the terms of this privacy policy. · If we or substantially all of our assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets. · If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of supply terms and other agreements with you; or to protect our rights, property, or safety and those of others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction and to prevent cybercrime. Where we store your information Payment processing Payment details you provide will be encrypted using secure sockets layer (SSL) technology before they are submitted to us over the internet. Payments made on the site are made through our payment gateway providers. You will be providing credit or debit card information directly to Stripe (Stripe,185 Berry Street, Suite 550, San Francisco, CA 94107, USA) which operates a secure server to process payment details, encrypting your credit/debit card information and authorising payment. Information that you supply to Stripe is not within our control and is subject to Stripe’s own privacy policy and terms and conditions. Direct debit facilities are managed on our behalves by GoCardless (GoCardless Ltd., Sutton Yard, 65 Goswell Road, London, EC1V 7EN, UK). You will be providing details of bank accounts directly to GoCardless who operate a secure system to process payment details, encrypting your bank account details and authorising payment. Information which you supply to GoCardless is not within our control and is subject to GoCardless’ own privacy policy and terms and conditions How we protect your information All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our site. You are responsible for keeping this password confidential. We ask you not to share a password with anyone. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site, any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. Our site may, from time to time, contain links to external sites. We are not responsible for the privacy policies or the content of such sites. How long we keep your information We retain personal data for as long as we are required by law to retain it. We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services. You cannot be identified from aggregate information retained or used for these purposes. Your rights You have the right under certain circumstances: to be provided with a copy of your personal data held by us; to request the rectification or erasure of your personal data held by us; to request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example); to object to the further processing of your personal data, including the right to object to marketing; to request that your provided personal data be moved to a third party. Your right to withdraw consent: Where the processing of your personal information by us is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us. You can also exercise the rights listed above at any time by contacting us at [email protected] If your request or concern is not satisfactorily resolved by us, you may approach your local data protection authority, (see http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html ). The Information Commissioner is the supervisory authority in the UK and can provide further information about your rights and our obligations in relation to your personal data, as well as deal with any complaints that you have about our processing of your personal data. Changes to this policy Any changes we make to our privacy policy in future will be posted on this page and, in relation to substantive changes, will be notified to you by e-mail. This policy was last updated on [insert date]. Contact Us Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to: Aortic Centre Trust 5 New Street Square London United Kingdom EC4A 3TW Email: [email protected] Manage Cookie Preferences