Privacy Policy
Your Privacy. Our Responsibility.
At Khushamdid, we are committed to protecting your personal information, respecting your privacy and handling your data responsibly.
Policy Information
Organisation: Khushamdid
Registered Charity Number: 1112396
Privacy Contact: info@khushamdid.org
Website: khushamdid.org
Policy Status: Draft for trustee approval
Last Updated: To be confirmed
Review Date: 12 months after adoption
Our Commitment to Your Privacy
At Khushamdid, we are committed to protecting your personal information and respecting your privacy.
As a registered charity supporting the health, education, social inclusion and wellbeing of Asian women, particularly those of Pakistani heritage in Tameside, we recognise the importance of handling personal information responsibly.
This policy explains what information we collect, why we collect it, how we use and protect it, when it may be shared, and the rights available to you under UK data protection law.
Khushamdid aims to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy legislation.
Who Is Responsible for Your Information?
Khushamdid is responsible for deciding how and why personal information is processed in connection with its charitable activities, except where another organisation independently determines its own processing.
Organisation: Khushamdid
Registered Charity Number: 1112396
Data Protection Contact: info@khushamdid.org
Website: khushamdid.org
You may contact us through our website’s Contact Us page with questions or concerns about how your information is handled.
Information We May Collect
Depending on how you interact with Khushamdid, we may collect:
- Your name and contact details, including telephone number, email address and postal address.
- Information submitted through our website contact forms.
- Information provided when registering for community activities, events or services.
- Information relating to volunteering, employment or other applications.
- Donation and Gift Aid information, where applicable.
- Communication preferences and records of correspondence.
- Feedback, enquiries and complaints.
- Technical information about visits to our website.
Where necessary and lawful, we may also process sensitive information, such as health or accessibility requirements, to help individuals participate safely and appropriately in our activities.
We will only collect information that is reasonably necessary for the relevant purpose.
How We Collect Information
We may obtain personal information when you:
- Contact us through our website, email or telephone.
- Register for a luncheon club, wellbeing session, educational programme or community event.
- Subscribe to communications or newsletters.
- Make a donation or submit Gift Aid information.
- Apply to volunteer or work with Khushamdid.
- Provide feedback or raise a concern.
- Visit and interact with our website.
We may also receive information from third-party organisations, including event organisers, referral partners or fundraising platforms, where there is an appropriate lawful basis for the information to be shared.
How We Use Your Information
Khushamdid may use personal information to:
- Respond to enquiries and requests for information.
- Manage registrations for community activities and services.
- Communicate with participants about sessions, events and programme changes.
- Support the safe and effective delivery of charitable activities.
- Process donations and maintain financial records.
- Administer Gift Aid claims where applicable.
- Manage volunteering, recruitment and applications.
- Obtain feedback and improve our services.
- Meet legal, regulatory and safeguarding obligations.
- Send newsletters, fundraising appeals or other communications where permitted by law.
We will not use personal information for purposes that are incompatible with those for which it was collected unless permitted by law.
Our Lawful Bases for Processing
Under UK GDPR, Khushamdid must have a lawful basis for processing personal data.
Depending on the circumstances, we may rely on:
- Consent: Where you have freely agreed to a particular use of your information, such as receiving optional email marketing.
- Contract: Where processing is necessary to provide a service or fulfil an agreement with you.
- Legal Obligation: Where information must be processed to comply with applicable law, including certain financial or regulatory requirements.
- Legitimate Interests: Where processing is necessary for the charity’s legitimate activities and those interests are not overridden by individuals’ rights and freedoms.
- Vital Interests: Where processing is necessary to protect someone’s life in an emergency.
Where special-category personal data is processed, we will also identify an appropriate additional condition under Article 9 of UK GDPR and, where required, the Data Protection Act 2018.
Website Visitors, Analytics and Cookies
When you visit our website, certain technical information may be processed, such as:
- IP address.
- Browser and device information.
- Operating system.
- Date and time of access.
- Pages visited.
- Website performance and security information.
Some information may be collected through essential cookies, server logs or analytics technologies.
Where non-essential cookies or similar technologies are used, we will seek consent where required before placing or accessing them.
Visitors should be able to understand their choices and withdraw consent for non-essential cookies where applicable.
Information about specific cookies and analytics services will be provided through the website’s cookie information or consent mechanism.
Donations and Payment Information
Where Khushamdid accepts donations online, payment transactions may be processed through specialist third-party payment providers.
We do not intend to store full payment card details on our website.
Payment providers may process information independently or on our behalf in accordance with their respective responsibilities and privacy notices.
We may retain donation records, donor contact details and Gift Aid declarations where necessary for administration, accounting, regulatory compliance and charitable purposes.
Sharing Your Information
Khushamdid does not sell or rent personal information to third parties.
We may share relevant information with trusted organisations where necessary, including:
- Website hosting and IT service providers.
- Email and communication service providers.
- Payment and donation processing organisations.
- Event registration providers.
- Professional advisers and authorised service providers.
- Public authorities or regulators where disclosure is required by law.
- Appropriate safeguarding organisations or authorities where necessary and lawful.
Where service providers process personal information on our behalf, we will seek appropriate contractual and security protections.
We will only share information that is necessary and appropriate for the relevant purpose.
Marketing and Communication Preferences
Khushamdid may provide information about its activities, events, community programmes and fundraising opportunities.
Where consent is required for electronic marketing, we will obtain it before sending those communications.
You may withdraw marketing consent or request that optional communications stop at any time.
To update your preferences, contact:
We may still contact you about essential matters relating to a service or activity in which you are participating, where there is an appropriate lawful basis.
How We Protect Your Information
Khushamdid aims to take appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.
Depending on the information and systems involved, these measures may include:
- Secure website connections using HTTPS.
- Access controls and appropriate user permissions.
- Secure passwords and account management.
- Limiting access to authorised trustees, staff or volunteers.
- Appropriate arrangements with external service providers.
- Secure handling and disposal of personal records.
- Reviewing data protection and security practices.
Although reasonable steps are taken to protect information, no method of electronic transmission or storage can be guaranteed to be completely secure.
How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including any applicable legal, accounting, regulatory or safeguarding requirements.
Retention periods may differ depending on the type of information involved.
For example, financial and Gift Aid records may need to be retained for prescribed periods, while routine enquiries may be deleted sooner when no longer required.
Information will be securely deleted, anonymised or otherwise appropriately disposed of when retention is no longer justified.
Your Data Protection Rights
Under UK GDPR, individuals may have the following rights, depending on the circumstances:
- Right to be informed: To understand how personal information is used.
- Right of access: To request a copy of personal information held about them.
- Right to rectification: To request correction of inaccurate or incomplete information.
- Right to erasure: To request deletion of information in certain circumstances.
- Right to restrict processing: To request limitations on how information is used in certain circumstances.
- Right to data portability: To receive certain information in a portable format where applicable.
- Right to object: To object to certain processing, including direct marketing.
- Rights relating to automated decision-making: To receive applicable protections concerning certain solely automated decisions.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
You can exercise your rights by contacting: info@khushamdid.org
We will respond to valid requests within the timescales required by law, normally within one month, subject to applicable extensions or exemptions.
Requests are generally handled free of charge, although the law permits charges or refusal in limited circumstances.
International Transfers
Some website, communication or payment service providers may process personal information outside the United Kingdom.
Where international transfers occur, Khushamdid will seek to ensure that appropriate legal safeguards are in place, as required by applicable data protection legislation.
Children’s Personal Information
Where Khushamdid provides activities involving children or young people, personal information will be handled with particular care.
We will consider the age and circumstances of participants, safeguarding responsibilities and any applicable requirements concerning parental responsibility or consent.
We will not knowingly collect more information about children than is necessary for the relevant lawful purpose.
Complaints and Concerns
If you have concerns about how Khushamdid collects, uses or protects your personal information, please contact us first so that we have an opportunity to investigate.
Privacy Contact: info@khushamdid.org
Organisation: Khushamdid
Registered Charity Number: 1112396
You also have the right to complain to the UK’s independent data protection regulator, the Information Commissioner’s Office (ICO).
ICO Website: ico.org.uk/make-a-complaint
ICO Telephone: 0303 123 1113
Changes to This Privacy Policy
Khushamdid may update this policy from time to time to reflect changes in legislation, technology, charitable activities or the way personal information is processed.
Any revised version will be published on our website with an updated review date.
Where changes materially affect how personal information is processed, we will provide additional information or seek consent where required.
Policy Governance
Organisation: Khushamdid
Registered Charity Number: 1112396
Responsible Body: Board of Trustees
Approval Date: To be confirmed
Next Review: 12 months after formal adoption
