Privacy Policy

Oxfam Scotland on behalf of the ‘A Scotland That Cares’ campaign

1. Introduction

Oxfam Scotland promises to take great care with your personal data. We commit to protecting any personal information we obtain about you, whether you are a financial supporter, shopper, volunteer, partner or a campaigner. Developing a better understanding of those we engage with through their personal data (name, address, email, etc) allows us to operate and communicate more effectively. We are committed to protecting any personal information we have about you. This Privacy Policy sets out how we obtain, use and protect your personal information.

We are legally obliged to use your information in line with all laws concerning the protection of personal information, including the Data Protection Act 1998, the Privacy & Electronic Communications (EC Directive) Regulations 2003 and the General Data Protection Regulations (GDPR) in effect from 25 May 2018.

Oxfam Scotland communications, on behalf of ‘A Scotland That Cares’ campaign, may contain links to websites owned and operated by third parties. These third parties have their own privacy policies – we cannot accept any responsibility or liability for the privacy practices of such third-party websites.

In the event that you work with us in another way – for instance, enrol in a specific event, programme, apply for a job, or are a member of staff, there should be a separate Privacy Policy which describes how we use that data.

2. Who we are

Oxfam is a registered charity in Scotland (SC039042). Oxfam is also a registered charity in England and Wales (registration number 202918) and is constituted as a company limited by guarantee registered in England & Wales (registration number 612172).

Oxfam Scotland will act as the data controller and a data processor on behalf of the ‘A Scotland That Cares’ campaign and affiliated website www.ascotlandthatcares.org 

This Privacy Policy relates to information which is obtained by Oxfam Scotland and for which Oxfam Scotland is the Data Controller. That is to say, data for which Oxfam Scotland sets the purpose of the use as well as directing how this data will be used.

3. What information does Oxfam Scotland collect about me?

When you contact Oxfam Scotland such as signing up to mailing lists, by email, telephone, or in writing, or engage with Oxfam Scotland on social media channels, we may receive and retain personal information about you. This can consist of information such as your name, organisation, email address, language preferences and postal address. This allows us to contact you with information about our campaign, events, activities and projects that you tell us you are interested in.

Data Protection law recognises that certain categories of personal information are more sensitive. This is known as ‘sensitive personal data’ and covers health information, race, religious beliefs and political opinions. We will only collect the minimum information required for the efficient operation of the ‘A Scotland That Cares’ campaign.

4. How will Oxfam Scotland use the information collected about me?

Oxfam Scotland may use your personal information for a number of purposes including the following:

5. Your debit, credit card information and bank details

We will not require or request you to enter any debit card, credit card or bank account details. 

6. Your choice

It is your choice as to whether you want to receive information about ‘A Scotland That Cares’ campaign and the ways you can get involved. If you no longer want us to use your personal information in these ways, please let us know.

You may opt-out of communications at any time by clicking the ‘unsubscribe’ link in at the end of our mailing list (MailChimp) emails. You can also change any of your contact preferences at any time by emailing: scotland@oxfam.org.uk 

We will not use your personal information for marketing or other communication purposes if you have indicated that you do not wish to be contacted by us for such purposes. However, we may retain your details on a list to help ensure that we do not continue to contact you again. 

7. Will Oxfam Scotland share my personal information with anyone else?

Oxfam Scotland will not, under any circumstances, share or sell your personal data with any third party for marketing purposes and you will not receive offers from other companies or organisations as a result of giving your details to us.

We will share some data (your name, email address) with the party leaders of all parties represented in the Scottish parliament at the time your email is submitted to them. This data must be shared to enable a response from the recipients. Oxfam Scotland is not liable for how this data is handled by the office of each MSP. These offices must also follow the General Data Protection Regulations (GDPR) in effect from 25 May 2018 and should have their own Privacy Policy in place.

We may need to share your information with “data processors” such as service providers, associated organisations or agents who may help us to prepare and send communications to you relating to our activities. These “data processors” will only act under our instruction and we will not allow these organisations to use your data for their own purposes and will take care to ensure that they keep your data secure.

We will also comply with legal requests where disclosure is required or permitted by law (for example to law enforcement agencies for the prevention and detection of crime, subject to such bodies providing us with a relevant request in writing).

We will generally only keep your data for as long as is reasonably required for the purpose(s) for which it was submitted.

However, we will hold your personal information on our systems for as long as is necessary for the relevant activity and up to a maximum of 5 years.

If you request that we stop communicating with you, we may keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us.

If you only give us your information for the purpose of sending the campaign email, and do not additionally sign up to receive the newsletter, we will only hold your data for as long as it takes to complete content moderation where appropriate, and the anonymisation of location data that will be used for the purpose of the campaign. Your data will not be held for these purposes for any longer than 30 working days. 

If you have signed up to the campaign on behalf of an organisation, the information you supply to us will be retained for contact purposes, for a maximum of 5 years from the point of generation.

9. How does Oxfam Scotland update, correct, or delete my personal information?

The accuracy of your information is very important to us. We want to ensure that we are able to communicate with you in ways that you are happy with, and to provide you with information that is of interest. If you wish to change how we communicate with you, or update the information we hold, please contact us by email at: scotland@oxfam.org.uk 

Under the Data Protection Act you have the right to request a copy of the personal information we hold about you and to have any inaccuracies corrected.

Please address requests and questions about this or any other question about this Privacy Policy to Oxfam Scotland at scotland@oxfam.org.uk 

10. Changes to Oxfam Scotland’s Privacy Policy

This Privacy Policy may be updated from time to time so you may wish to check it each time you submit personal information to ‘A Scotland That Cares’ campaign or to Oxfam Scotland. The date of the most recent revision will appear at the bottom of this page. If you do not agree to these changes, please do not continue to use the ‘A Scotland That Cares’ website to submit personal information to Oxfam. If material changes are made to the Privacy Policy we will notify you by placing a prominent notice on the website.

11. Complaints, compliments or comments

If you are unhappy with our services or something that we have done or failed to do, we want to know about it. We also welcome your views on what we do well. Your comments enable us as an organisation to learn and continuously improve our services.

If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.

You can contact them by calling 0303 123 1113.

Or go online to www.ico.org.uk/concerns (opens in a new window; please note we can’t be responsible for the content of external websites).

Oxfam Scotland, Updated – 5 September 2022