Your privacy is important to us. The information below sets out how we collect, use and protect any personal data that you give to us. It also sets out details about your rights in relation to the personal data that we hold about you and how to contact us if you have any questions or would like to change the way in which we communicate with you.
We may change this Privacy Notice from time to time in order to remain compliant with changes to regulations. Should this be the case and we need to make any significant changes in the way we treat your personal information, we will make this clear on our website or by contacting you directly. For further information please see the guidance from the Information Commissioner’s Office.
Who Are We
The Mare and Foal Sanctuary is a registered charity in England and Wales (No. 1141831) and a company limited by guarantee registered in England and Wales (No. 7584914).
We are a recognised Data Controller with the Information Commissioner’s Office (ref. Z9576224).
If you have any questions or concerns about how we handle your personal data, you can contact us by either writing to the Data Protection Officer, at the address below or by emailing [email protected]
The Ways We Collect Personal Data
When you share personal data with us directly
We collect personal data about you if you fill in forms on our website, in mailings or correspond with us by post, phone or email.
Personal data that we process could include details such as your name, postal address, phone number, email address, IP address or banking details. We collect this for a variety of reasons, such as responding to your enquiry, providing a service or processing your donation.
If you give us personal information about a third party – for example, if you’re buying a horse/pony adoption as a gift for a friend – we’ll also let them know how we plan to use their personal data. All communications connected to the adoption process will always include details of how to opt out of receiving further information.
We use Mailchimp as our email marketing platform. By subscribing to our emails online, by post or in person, you acknowledge that your information will be transferred to Mailchimp for processing. MailChimp store data on servers based in the US. Learn more about Mailchimp’s privacy practices.
When you use our website
Our website contains forms that you can complete. We only ask for the information we need in order to provide you with the service or information you have requested. We will process your personal data in accordance with this policy. If you would prefer, you can print out and post the form to us.
We use platforms like Google Analytics to understand how visitors are using and engaging with our website. This allows us to make improvements to our web services and your online experience. We also use Google Analytics in conjunction with additional advertising cookies. We use these cookies to select advertising based on what is relevant to you, to measure interactions with the ads we display and to improve reporting on campaign performance.
For more information about Google’s data privacy and security in regards to Google Analytics, please read Google’s policies and data privacy information page.
We use FundraiseUp for the purpose of processing one-off or regular donations via our website. For more information about our use of FundraiseUp, please read our FundraiseUp policy.
Publicly available information
On occasion, we may use publicly available information to gain a better understanding of our supporters to improve our fundraising methods, products and services. This may include information found in places such as Companies House and information that has been published in articles or newspapers.
When we receive information from other sources, we rely on those sources having the appropriate provisions in place telling you how they collect data and who they may share it with. We carefully check our sources to ensure that we only receive your information when it is lawful for us to do so.
When you support us via a third party
In some cases, your information may be shared with us by another organisation, for example fundraising sites like JustGiving. These independent third parties will only do so when you have indicated that you wish to support The Mare and Foal Sanctuary and you have given your consent.
When you have given permission to another organisation to share your information
You may have given permission for a company or other organisation to share your data with third parties. This could be when you buy a product, register for an online competition, complete a survey or sign up with a comparison site.
When you have given permission using social media
Depending on your settings or the Privacy Policies for social media and messaging services like Facebook, Instagram or Twitter, you might give us permission to access information from those accounts or services.
How we use your personal information
We will collect, store and use the personal data you provide in order to carry out the activities relevant to the provision of our services to you. We may use your personal information in numerous ways:
- To provide you with information that we think may be of interest to you or to fulfil your request about ways to support The Mare and Foal Sanctuary, such as rehoming a horse or pony, making a donation, campaign actions, newsletter requests, product purchases, competition entries etc
- To keep a record of your relationship with us and for administration purposes (such as accounting and supporter records)
- To claim Gift Aid on your donations (if applicable)
- To look into and respond to complaints, legal claims or other issues
- We use data to analyse the number and nature of contacts that use our service to help achieve our objectives to inform the public on matters of equine welfare
- To carry out research on the demographics, interests and behaviour of our users and supporters to help us gain a better understanding of them and to enable us to improve our services. This research may be carried out internally by our employees or we may ask approved third parties to do this work on our behalf
- To be used as part of our efforts to prevent or detect fraud or abuses of our website
Lawful Basis for Processing
To comply with current Data Protection regulations, we must have a legal basis for processing your personal data.
The lawful bases for processing are set out in Article 6 of the UK GDPR. At least one of these must apply whenever we process personal data:
(a) Consent: the individual has given clear consent for us to process their personal data for a specific purpose.
(b) Contract: the processing is necessary for a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract.
(c) Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
(d) Vital interests: the processing is necessary to protect someone’s life.
(e) Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
(f) Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
We consider that we have a legal basis where:
- You have given us consent to do so for the specific purposes which we have told you about – for example, claiming Gift Aid or marketing purposes (Consent)
- It is necessary for us to do so to enable us to provide you with the services that you have requested from us – for example, contacting you regarding a donation or fulfilling an information request (Consent; Legitimate Interests)
- Provide you with information that we think may be of interest to you if you have had contact with us previously – for example, sending you fundraising information or newsletters (Legitimate Interests)
- Where we need to comply with a legal and or contractual obligation – for example you have made a purchase from our website and we require purchasing history in order to provide a refund (Contract)
Where we process data concerning health in association with our Equine Assisted Services (which is defined as special category data), we will make sure that we only do so in accordance with one of the additional lawful grounds for processing which is by obtaining your explicit consent.
Where we process your personal data under the lawful basis called legitimate interests, we balance our legitimate interests in all cases against your rights as an individual and make sure we only use personal information in a way or for a purpose that you would reasonably expect. We also ensure it does not intrude on your privacy or previously expressed marketing preferences.
By providing your personal details to us, we can carry out our charitable objectives, to provide lifelong, life-changing loving care and support to horses and ponies in need. It is crucial that we ask our supporters for donations to carry out our charitable activities, including providing sanctuary for rescued horses and ponies, providing welfare outreach and advice to the equine owning community and Equine Assisted Services.
We have carried out a Legitimate Interests Assessment (LIA) and carefully evaluated and considered any impact on you and your rights.
Examples of when we might use ‘legitimate interests’ include direct mail marketing, data analytics, processing donations and measuring the success of our fundraising campaigns.
We are keen to keep our supporters informed about our work, such as how we use funding and updates on current campaigns. We may use your personal data to send you information about opportunities on how to get involved in our work or how you can support us through donations, volunteering or fundraising activities.
Occasionally, we may include information from partner organisations or organisations that support us in these communications – for example, those working with us to improve the welfare of horses and ponies.
If you prefer not to receive any marketing communications from us, you can change your preferences and unsubscribe at any time by contacting us using the details at the bottom of this privacy notice.
If you choose not to receive this information, we will be unable to keep you informed of our work and promotions that may interest you.
We may make use of additional information, including information about your geographical location or marketing preferences help us understand more about our supporters. This enables us to ensure that communications are relevant and provide an enhanced experience for our supporters. It also helps us to understand the interests of our supporters so that we can make appropriate requests to those who may consider making a donation again, enabling us to raise funds sooner, more cost effectively and proportionately than we otherwise would.
We may use third party service providers to undertake these activities on our behalf and share your information with them to the extent required. Such information is compiled (either by us or our third party) using publicly available data e.g. information available from public registers, such as listed Directorships, the electoral roll and media coverage.
Who will have access to your information
We make sure that there are appropriate controls in place to protect your personal details in accordance with current Data Protection legislation. We undertake regular reviews of those who have access to information that we hold to ensure that your information is only accessible by appropriately trained staff, volunteers and approved third parties.
We may share your personal data with third-party service providers who assist us with administering the provision of our services to you including:
- with business partners, suppliers and sub-contractors
- to HMRC in relation to Gift Aid, if applicable, and when your consent has been obtained
- with our regulators, the Charity Commission and the Fundraising Regulator in order to comply with our regulatory obligations and to help resolve complaints or other issues
- with third party service providers whom we may engage to perform functions on our behalf including fulfilling order deliveries, printing and mailing customer communications, analysing data, providing marketing assistance, when using auditors/advisors, processing credit/debit card payments and providing customer service. They have access to personal information needed to perform their functions, but may not use it for other purposes. Where we use external third party service providers to collect or process personal data on our behalf as described above, we carry out comprehensive checks and data sharing agreements in place before we work with them.
We will never sell your personal information to any organisation or third parties.
How we look after your data and for how long
We have a Data Retention Policy that outlines how we look after your data and for how long. This explains how we will retain your information for as long as needed in order to provide the relevant services to you or until you decide you no longer wish to support us. It also explains how long information will be kept for afterwards in order to deal with any queries or maintain your communications preferences.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, volunteers, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Any third parties that we engage will keep your data stored on their systems for as long as is necessary to provide the relevant services to you or us. If we end our relationship with any third party service provider, we will make sure that they securely delete or return your personal data to us.
You have a number of rights in relation to your personal data. There are circumstances in which your rights may not apply. You have the right to request that we:
- Inform you how your personal data is used (right to be informed)
- Provide you with a copy of the information we hold about you (right of access)
- Update any of your personal information if it is inaccurate or out of date (right to rectification)
- Delete the personal data we hold about you (right to erasure) – if we are providing services to you and you ask us to delete personal data we hold about you then we may be unable to continue providing those services to you
- Restrict the way in which we process your personal data (right to restrict processing)
- Transfer your personal data to a third party (right to data portability)
- Stop processing your data if you have valid objections to such processing (right to object)
- Inform you of any decisions made solely on automated processing with your data (rights related to automated decision making including profiling)
Even if you consented to the processing of your personal data for marketing purposes you have the right to ask us to stop processing your personal data. You can exercise this right at any time by contacting us using the details provided below.
For more information on your rights and how to use them please see the guidance from the Information Commissioner’s Office. If you would like to make any of the requests set out above, please contact us using the details provided below. We will respond to all such requests within the time period required by law.
If you have any questions, concerns or wish to make a complaint about how we handle your personal data you can contact us through our website using the complaints form.
The Data Protection Officer
The Mare and Foal Sanctuary
Unit 2, Olympus Business Park
Telephone: 01626 882660
Email: [email protected]
Author: Dawn Vincent
Job Title: Director of Fundraising and Communications
Date: August 2023
What are cookies?
Our cookies help us:
- Make our websites work as you’d expect
- Improve the speed/security of the sites
- Allow you to share pages with social networks like Facebook
- Offer you free services/content
- Continuously improve our websites for you
- Collect any personally identifiable information (without your express permission)
- Collect any sensitive information (without your express permission)
- Pass personally identifiable data to third parties
- Pay sales commissions
What are cookies used for?
The main purposes for which cookies are used are:
- For technical purposes essential to effective operation of our websites, particularly in relation to site navigation and products
- For The Mare and Foal Sanctuary to market to you, particularly web banner advertisements and targeted updates
- To enable The Mare and Foal Sanctuary to collect information about your browsing and shopping patterns, including to monitor the success of campaigns, competitions, etc
- To enable The Mare and Foal Sanctuary to meet its contractual obligations to make payments to third parties when a product is purchased by someone who has visited our websites from a site operated by those parties
What information is collected?
How are cookies managed?
The cookies stored on your computer or other devices when you access our websites are designed by:
- third parties who participate with us in marketing programmes
- third parties who broadcast web banner advertisements on behalf of The Mare and Foal Sanctuary
How do I disable cookies?
What happens if I disable cookies?
This depends on which cookies you disable, but in general the website may not operate properly if cookies are switched off. If you only disable third party cookies, you will not be prevented from making purchases on our sites. If you disable all cookies, you will be unable to complete a purchase on our sites.