Purple Field Productions (PFP) respects the privacy of our supporters and website users, and understands how important it is that your personal information remains secure. Your personal data is protected by UK legislation, specifically the Data Protection Act 1998, the Privacy and Electronic Communications (EC Directive) 2003 and the General Data Protection Regulation (GDPR) 2018.
PFP takes the care of your data seriously and undertakes to protect your personal information in a range of ways including the use of secure servers, firewalls and modern and secure email marketing systems.
The type of data we collect
Personal information is collected directly from supporters when they interact with PFP and specifically choose to receive further communications about our work, events and fundraising.
This interaction will typically include contacting us by post, email or telephone to make a donation, using or contacting us via our website, or as part of an event.
The information we collect will typically include:
Information necessary to process donations and where applicable regular giving such as a standing order
Information necessary to process and fulfil our legal obligations for gift aid
We may also collect anonymised and unidentifiable website usage data via third party provider Google Analytics. This helps us to improve our website by refining our content, understanding how and when it is used.
If you attend a PFP event, such as a fundraising event, your photograph may be taken which we may use on our website or social media channels including Facebook. If you do not wish your photograph to be used, you can let us know at the event, or afterwards by contacting us by email: firstname.lastname@example.org
Lawful basis for processing your data
As a charity, PFP processes all supporter data on one of three lawful bases:
- Consent – where you have given us clear consent to process (record and use) your data for specific purposes such as contacting you about fundraising or our latest film projects.
- Legitimate interests – where the processing is necessary for our legitimate interests, for example, to raise funds to continue our work as a charity.
- Legal obligation – where the processing is necessary for us to comply with the law. For example, where we have to maintain records of gift aid donations.
PFP will only contact those individuals who have specifically opted in to receive information about out work, such as fundraising updates, newsletters and event information. This will normally be by email and in some circumstances, direct mail (post).
Your data protection rights
Where PFP is processing your data on the basis of consent, you have a right to withdraw your consent at any time.
You can unsubscribe from communications from us at any time by writing to PFP, 10 Hill View Terrace, Ilminster, TA19 9AL or by emailing email@example.com
You can obtain a subject access report detailing the information we hold about you at any time. Please write to PFP at 10 Hill View Terrace, Ilminster, Somerset TA19 9AL.
You have the right to be forgotten, and have personally identifiable information erased from our records at any time. Please write to PFP at 10 Hill View Terrace, Ilminster, Somerset TA19 9AL.
PFP aim to issue an initial response to all enquiries within seven working days, and will offer a full response to all information processing requests within thirty working days of receipt.
We will not sell your information to third party organisations. We will not share your information with third party organisations, unless required to do so by law, for example to fulfil our obligations to process and record gift aid donations accurately.
To process donations via our website, we use third party services, currently ‘Everyclick’, and ‘PayPal’ to collect and process your payment. Everyclick and PayPal collect payment details from you to process your donation, but these are not held by PFP. Therefore, we recommend you review the privacy policies of both Everyclick and PayPal.
Retention of your data
We will retain your information for as long as you have an active relationship with PFP. If you request to receive no further contact from us we will cease sending communications and delete your information from our database.
Any alterations to our policy on the collection or use of data will be posted on this website.
Data breach process
We take the security and confidentiality of your data very seriously and maintain accurate and secure records. However, in the event of a breach of our systems, we will comply with the requirements for a data breach as set out by the Information Commissioner’s Office (ICO) and GDPR regulations.
In summary, we are aware of the potential risks of a data breach and have a process in place to notify the ICO within 72 hours of the breach where there is a high risk to the rights and freedoms of the person(s) affected. In this situation we will also inform the person(s) affected without undue delay.
All breaches will be documented and processes and structures reviewed to ensure the continued security of the data we hold.
Links to other websites
Our website may contain links to other websites. Please bear in mind we are not responsible for the content of any website we link to or for the protection and privacy of any data you submit to those websites. We recommend you review their privacy policies before submitting your data.
A cookie is a small file placed on your computer’s hard drive. It enables our website to identify your computer as you view different pages on our website.
Cookies allow websites and applications to store your preferences in order to present content, options or functions that are specific to you. They also enable us to see information like how many people use the website and what pages they tend to visit.
Cookies do not provide us with access to your computer or any information about you, other than that which you choose to share with us.
To learn more about cookies and how they are used, visit All About Cookies.