PRIVACY POLICY

YOUR PRIVACY AND SECURITY IS VERY IMPORTANT TO THE NATIONAL AIDS TRUST.

This privacy policy sets out how NAT uses and protects any information that you give us when you use NAT websites or contact us directly.

INFORMATION THAT IS GATHERED BY NAT AND WHERE IT IS STORED

NAT.org.uk and WorldAIDSDay.org.uk

In common with other websites, log files are stored on the web server saving details such as the visitor's IP address, browser type, referring page and time of visit.

We may collect the following information where users choose to supply this through our online forms:

  • name and job title
  • contact information including email address and telephone number
  • Your address and postcode (optional)
  • Your credit/debit card details (only via the NAT shop or through the NAT donation page)

Where this information is provided by the user voluntarily by signing-up to NAT communications through our website, the information will be stored on a secure external server which hosts NAT’s CRM system which has secure access. When making a donation or an online payment for goods, the information will be stored securely by partners who are contracted by NAT to process this payment. These partners do this on NAT’s behalf and are required to be compliant with GDPR in the storage and processing of your data. This data is only passed on to NAT with your permission for purposes outlined below. Any sensitive data transferred to or accessed by NAT will be encrypted and NAT will not store this unnecessarily.

Contacting NAT with personal information or questions

Users may also choose to email us about issues NAT is working on. For example, people living with HIV may share personal experiences with us. You may do this by emailing NAT staff directly or by voluntarily offering your email address or telephone number through the website contact form. This information will be sent to NAT via email and will be stored securely on our email server (NAT uses Microsoft Outlook). Information shared in personal emails with the NAT team may be saved securely on NAT’s server. Sensitive information will be password protected and will be anonymised unless you have agreed to be contacted again.

HOW THE INFORMATION IS USED

The information in log files is used to provide feedback on www.nat.org.uk and to help NAT continue to improve the content available.

Personal data is used for the purpose for which you supplied them, for example, if you have donated to NAT, fundraised for us or participated in an event, your information may be used to process payments (which will be done on our behalf by a third party, please see above), claim Gift Aid, or to send you email communications about your donation or similar events. If you have provided your contact details in order to receive information about our policy, campaigns work, activism or fundraising opportunities, we will store your information for this purpose.

You can ask not to receive NAT communications at any time. You can also ask for your personal information to be removed from our database.   

If provided through email or the website contact form

Users who voluntarily offer their email address or telephone number through the website contact form, or when emailing NAT staff directly, may be contacted to respond to your query, ask for further feedback or clarification. Record of contact will remain on the email server and will be archived securely. You will not be added to NAT’s CRM System unless you make a further request for information from us.   

NAT shop

Products ordered through the shop, including red ribbons for World AIDS Day, will be delivered to the name and address supplied on the order form. We may contact you by email and telephone if there are queries on the order, and to remind you to send funds collected back to NAT. We are unable to send out your order without this information.

Our policy and campaigning work

There may be circumstances where you will provide sensitive data to NAT, for example, for a case study to support our policy work. In such circumstances, this information will be secured confidentially on NAT’s server and where appropriate access will be limited to relevant staff member and will be password protected. If any information is published, NAT will do so only with your permission.

Where users supply information and photos in relation to any of our campaigns, NAT will also ask permission before publishing on any of our websites.

HOW LONG WE WILL KEEP YOUR INFORMATION

NAT will only store your information for as long as it is necessary for the purposes it is stored for, or for as long as legally required if being maintained for legal reasons.

SECURITY

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. All NAT staff are aware of NAT’s privacy statement, are committed to NAT’s GDPR (General Data Protection Regulation) policy. If volunteers or contractors working for NAT are accessing personal data, they are required to sign a confidentiality agreement.

CONTROLLING YOUR PERSONAL INFORMATION

If you provide us with any contact information, rest assured that we will never sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.

Under GDPR you have the right to access the information we hold about you; you have the right to withdraw your consent for the processing of the information we hold about you; and, you have the right to have personal information removed from our CRM system unless we are required by law to maintain that information.

If you believe that any information we are holding on you is incorrect or incomplete and you wish to amend it, you wish to withdraw consent for us to process your personal data, or wish your details to be permanently removed from our database, please fill in a Subject Access Request Form and send it to info@nat.org.uk.

IMAGE LICENSING

Images and/or photos within this website are the either: copyrighted property of ThinkStock and/or other image libraries, their Contributors or Licensed Partners, and are being used with permission under license; or are the property of NAT and have been taken and published with consent when required. These images and/or photos may not be copied or downloaded without permission, with the exception of the press images found on the media centre page. The people represented in any licensed images within this website are models and for illustration purpose only.

COOKIES

A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

The Commissioners Group pages use "cookies" to remember information allowing Commissioners to log in automatically however these pages are not accessible to the general public.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

LINKS TO OTHER WEBSITES

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

CONTACT

For any questions on this privacy policy, to request to access your data, or if you have submitted information through www.nat.org.uk or through another route and wish for us to remove it from our database please contact NAT at info@nat.org.uk.

This policy is the responsibility of the Data Controller for NAT, currently the Chief Executive, Deborah Gold. If you wish to make a complaint regarding NAT’s collection, storage or use of data please email this to info@nat.org.uk and it will be brought to the attention of the Data Controller.