If you have any queries about our privacy or cookies policies, please contact our compliance officer at Kidney Research UK, Stuart House, City Road, Peterborough, PE1 1QF or via email: [email protected] or by calling our supporter care team on 0300 303 1100.

We are Kidney Research UK, a UK registered charity (charity number: 252892 in England and Wales, SC039245 in Scotland) and company limited by guarantee (company number 00905963) together with our trading company Kidney Research Enterprises Limited (company number 02932606).

Our registered, and only office is:

Nene Hall
Lynch Wood Park
Peterborough
PE2 6FZ

If you have any queries about our privacy or cookies policies, please contact our Compliance Officer via post or email: [email protected].

We are registered with the UK Information Commissioner’s Office (ICO) as a data controller, registration number Z3501743 (Kidney Research UK) and Z7443350 (Kidney Research Enterprises Limited).

If you have concerns about how we are handling your information, that you do not wish to discuss with us, you can raise these with the Information Commissioner’s Office at: https://ico.org.uk/concerns/.

Every time you get in touch with us by post, email, telephone, through our website, face to face and occasionally via social media, we collect or update basic information about who you are, for example, your name. If you have been in contact with us previously, we may have already collected this information.

We hope you will be happy to tell us your first name, surname and your title if you use one. We like to be polite and friendly when we are in touch with you, and this information helps.

In addition, we like to ask for:

• your address
• your telephone numbers
• your email address

With your consent, we may collect some sensitive personal information such as health information, your children’s information, or, for certain purposes, information about any criminal convictions (eg job or volunteer applications).

When your personal information is given to us indirectly

Occasionally, other organisations such as event organisers, fundraising platforms or recruitment agencies may send us information about you. When we receive this information we will make you aware of who gave us your information, why we’re getting in touch, how to access our privacy policy for more detail and you can let us know whether you wish for us to continue.

We rely on legitimate interest as the legal basis for undertaking outbound postal direct marketing. Occasionally, for charity appeals we may obtain postal lists of potential customers from external companies. We will only deal with reputable companies that take privacy and data protection as seriously as we do, and we will always let you choose not to receive further communications from us.

Sometimes an existing supporter or contact of ours may pass your information to us if they think you would like to be involved or support our work. If this happens we will always check that they have your permission before we get in touch. When we first get in touch, we will also check with you that you would be happy for your personal details to be stored onto our database and that you wish to be considered a supporter. We will also make sure that you have access to our privacy pol-icy and understand how we collect, process and store your personal information.

We will pass your information to third party suppliers who we partner with to deliver our business and charitable activities. If we need your consent to do this then we will always ask you first. For instance if you are a patient and we think you may like to be involved in the development of one of our research projects, or to feature in one of our media stories.

There are various reasons for which we may collect your information. These include:

• If you ask us for information;
• If you register an interest or take part in an event or fundraising;
• If you give us a financial gift;
• If you apply for a job or volunteer role;
• If you apply for a grant;
• If you are a patient in any of our research projects;
• If you would like to make a suggestion or complaint.

Children and young adults’ information

When we know you are under 18, we will ask your parent or guardian if we can keep and use information about you. This is so that we can help you raise money for us, include you in stories about our work or to thank you for your support. We will only send you things relevant to how you are helping us by post. If we need to call or email you, we will ask your parent or guardian first.

We are committed to ensuring that your personal information is kept safe. To prevent your personal information from being lost, misused, accessed by unauthorised individuals, modified or disclosed, we invest in the appropriate means. We manage all information that we hold in accordance with legal requirements.

We are Cyber Essentials Plus accredited.

We may process your personal information for our legitimate charitable interests. This enables us to deliver on our research ambitions and ultimately achieve lives free from kidney disease. These interests include some or all of the following:

Processing information internally

• Updating our records to make sure we have the correct information, or if we require additional information about you;
• Processing sales transactions, financial gifts, or other payments and verifying financial transactions;
• Responding to any enquiries or issues;
• To collect or deliver any large items to or from our shops;
• To send your organ donation registration form to the NHS;
• Fixing problems with the website to improve your user experience.

Creating great relationships with our supporters

• We will use your information to tailor our communications with you;
• Contacting you with information and support for any fundraising events and activities you have registered for;
• Contacting you with information about any research that you have agreed to participate in;
• To help us use our resources more efficiently, we use profiling and analysis techniques so that we can tailor our approach to our supporters and stakeholders, ensuring they receive appropriate information about the aspects of the Charity’s work that interest them. Sometimes we use publicly available information to do this;
• Asking you to financially support our life-changing work;
• To send you raffle tickets, catalogues or any other materials that you request;
• Keeping you up-to-date about our work and events;
• Inviting you to participate in surveys, campaigns or research to find out more about the demographics, interests and behaviours of our supporters.

Reviewing our organisational activities

• Enhancing or reviewing our activities to improve our supporters’ experience with us;
• Conducting analysis using, where possible, anonymised information.

Other

• When we consider your job or volunteer application;
• To process grant applications and award grants and promote research funded by Kidney Research UK;
• Contacting research specialists for support in reviewing grant applications;
• Contacting corporate organisations to discuss partnership and collaboration opportunities;
• To engage with parliamentarians, policy makers and public bodies;
• Using information for auditing purposes;
• Troubleshooting and fixing.

Whenever we process your personal information for these purposes we will uphold your Personal Data rights. You have the right to object to this processing if you wish, and can do so by contacting us via email [email protected] or phone on 0300 303 1100.

We will ask for your explicit consent to collect, process and store your information, for the following purposes:

• Direct marketing via email
• Direct marketing via SMS
• Contacting you via telephone if you are registered on the Telephone Preference Service (TPS)
• Patient engagement activities
• Developing case studies
• Involvement in clinical trials.

Legal requirements

There are occasions when there are statutory, legal or regulatory reasons which guide the collection and storage of your information. For example, we are required to keep and use some of the information we have collected, processed and stored about you to supply information to Her Majesty’s Revenue and Customs (HMRC) or other relevant statutory or regulatory bodies. We may also have to supply information in the event that we are requested to do so, in order to assist police enquiries or respond to court orders.

Processing your sensitive personal information

We may process some of the sensitive personal information you provide, (eg information about your health, your children or your religion) where you have given us your consent to do so.

This information helps us:

To inform our research priorities

To send you information about Patient Engagement opportunities such as Patient Survey, Patient Education Grants, volunteering opportunities, and opportunities to respond to consultations

To send you information about research project participation opportunities such as providing evidence to support a project, patient expertise and experience in the development of research projects

To support your fundraising activity and provide you with an excellent experience

To make you aware of opportunities to participate in or provide support to a research project

To create media case studies

To ensure that we have a diverse range of kidney patients involved in our volunteer groups such as our Lay Advisory Committee and

To consider which volunteer roles may be most suitable to you.

We will never sell your personal information. Unless required for statutory obligations, we will never share your personal information with third parties for their own purposes. However, we know that sometimes it is better and more cost effective to employ trusted suppliers to help us deliver the best service in certain areas of our work. Where possible, information is anonymised before being shared with the suppliers to ensure that you are not identifiable from the information.

These third parties include:

• Suppliers that meet the highest professional standards and help us deliver the best service in certain areas of our work. Our trusted suppliers only use your information to carry out the work requested by Kidney Research UK. They cannot give, sell or rent your personal information to anyone else for any reason. Examples of our suppliers include marketing companies, social media platforms, events’ organisers, designers, print and fulfilment partners;
• Any organisations who acquire any rights in us through merging with or acquiring Kidney Research UK;
• Any professional or legal advisers that assist us in developing our organisation and complying with legal obligations;
• Law enforcement bodies and/or regulatory entities, in order to comply with any legal obligation or court order.

Where trusted suppliers operate outside of the European Economic Area, we only share personal information if we are entirely satisfied that they have sufficient protections in place to keep your personal information safe and that they are complying with the applicable privacy laws in their countries.

We like to be able to keep you updated with news about the research we are undertaking, invite you to events, opportunities to get involved in research and patient activities and to let you know about how you can support our work. We do this through a tailored approach based on how you have previously interacted with us, offered your support to us and your motivation for supporting us.

We may do this by post, email, telephone and SMS. We rely solely upon your consent to send you this information by email or SMS. We actively check our supporters’ telephone numbers against the Telephone Preference Service. This means that if you are registered with the service, we will not call you unless you have given us consent to do so.

Changing the communications you receive from us

You can let us know at any time if you wish to change your preferences or stop the communications you receive from us by emailing us at [email protected] or by calling our Supporter Care Team on 0300 303 1100.

We keep your personal information in accordance with applicable regulations. We destroy or anonymise personal information that we hold when it is no longer needed for the purposes outlined above.

For individuals who have not made a financial gift, we will keep your personal information for five years. For individuals who have made a financial gift, we will keep your personal information for eight years. For individuals about whom we hold sensitive data (such as health information or children’s information) we will keep information for two years before asking you to reaffirm your consent. If you have been involved in one of our research projects in any way, we will keep your personal information related to the project on a permanent basis.

You can request a copy of all personal information that we hold about you at any time.

Use of Cookies

'Cookies' are small data files stored by the browser on your computer or a mobile device. Websites are able to read and write to these files, storing data such as personalisation details or user preferences. You cannot be personally identified from information captured in cookies and our aim is purely to improve your user experience. If you would like more information about our use of cookies, please read our Cookies Policy.

Third party websites

Our website contains links to other websites that we think may interest you. We cannot be responsible for the content and data protection practices of third party websites, even if you access those using links from our website, or they provide a link to our site. We recommend that you check the Privacy Policy of each website that you visit and contact its owner or operator if you have any concerns or questions, before sharing any personal or financial data.

Your Rights

You are in control of how we, and any other organisation, use and keep your personal information. You can request a copy of all personal information that we hold about you at any time. If you know that any of your personal information is inaccurate, you can ask us to correct it or erase it. You may also ask for your personal information to be erased if you have changed your mind about us holding it.

You can request that we send an electronic copy of all your personal information to yourself or another organisation. You can ask us to stop processing your personal information and/or withdraw your agreement to us processing it if you had previously provided consent, unless we are required to process it for legal reasons.

Updates to this privacy policy

We will check this policy at least once a year to make sure it is up-to-date and accurate. As a result, we may need to make some changes to our Privacy Policy from time to time, which will be made clear on our website: www.kidneyresearchuk.org or by contacting you directly.

This version of the Privacy Policy was published on 14 February 2018.

Cookies' are small text files that are stored by the browser on your computer or a mobile device when you visit a website. They allow our website to remember your preferences and to tailor our website to your interests and needs.

Each cookie is a unique tag which allows us to see how many people access our site, how they use our website, and sometimes remember a user (which, for example, means your shopping basket contents won’t disappear when you move around our online shop). Cookies also help advertisers provide you with relevant marketing materials.

You cannot be identified by the information gathered.

If you would like to disable cookies on your device, please visit: http://www.aboutcookies.org.uk/managing-cookies.

First party cookies used by Kidney Research UK
These are cookies that are served directly by us to your computer. They are often used to recognise the IP address of your device when it revisits our website and to remember your preferences as you browse our website.

• ASP.NET_SessionId: General purpose platform session cookie, used for completing our forms.
  https://msdn.microsoft.com/en-us/library/ms178194.aspx
• _ga _gat _gid _utma _utmz: Google Universal Analytics. These cookies are used to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come to the website from and the pages they visited. https://www.google.com/policies/technologies/cookies/
• __atuvc __atuvs: Known as AddThis, this is a social sharing widget which is used to enable visitors to share content with a range of networking and sharing platforms. It stores an updated page share count.

Third party cookies used by Kidney Research UK
Third party cookies are served by a service provider on our behalf. They can be used by the service provider to recognise your device when it visits other websites. Third party cookies are used for various reasons, but they are mostly used for website analytics or advertising purposes.

To improve the way we engage with our supporters and ensure the money we invest in online advertising is well spent we work with a number of third party suppliers who set cookies on the charity’s web site, as this allows them to offer the best service.

• Issuu.com - we use this website to provide an online version of our Update Magazine and other publications. https://issuu.com/legal/privacy
• JGAnalytics - We use Just Giving for fundraising and in memory donations. Just Giving uses cookies to perform key processes, remember user preferences and to record statistics such as length of time on site. https://www.justgiving.com/info/cookies
• DoubleClick advertising cookies - Non-identifiable data is stored to analyse online advertising. Used to track when and where users have viewed or clicked on adverts, to limit the number of times an advert is displayed to the user, ensure that users see relevant adverts and to track actions or sales that have taken place. These cookies expire after 30 days. https://support.google.com/dfp_premium/answer/2839090?hl=en
• Hotjar - We use Hotjar to better understand our users’ needs and to optimise this service and experience. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
• Facebook cookies -This cookie identifies the browser connecting to Facebook. It is not directly tied to the individual Facebook user. This is used to help with security and suspicious login activity. We use Facebook buttons to link to our Facebook pages. The buttons use cookies to keep updated with sharing statistics. https://www.facebook.com/policies/cookies/
• YouTube cookies - We embed videos on our website from YouTube. These cookies are used for profiling and targeting for advertising, to track video statistics such as views and store user preferences. https://www.google.com/policies/technologies/cookies/
• Vimeo cookies - we sometimes use Vimeo to embed videos onto our website. https://vimeo.com/cookie_policy

If you would like to find out more about cookies and their use on the Internet, you may find the following links useful:

• Microsoft Cookies guide;
• All about Cookies;
• Information Commissioner's Office Cookie Guidance.

1. The right to be informed - you have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Privacy Policy.
2. The right of access - you have the right to obtain access to your information (if we’re processing it), and other certain other information (such as a paper copy of this Privacy Statement). This is so you’re aware and can check that we’re using your information in accordance with data protection law.
3. The right to rectification - you’re entitled to have your information corrected if it’s inaccurate or incomplete.
4. The right to erasure - this is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
5. The right to restrict processing - you have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further.
6. The right to data portability - you have rights to obtain and reuse your personal data for your own purposes across different services.
7. The right to object - you have the right to object to certain types of processing, including processing for direct marketing (which we do only with your consent).

To exercise any of these rights at, any time, you can:

• Call our Supporter Care team on 0300 303 1100
• Write to us at Kidney Research UK, Nene Hall, Lynch Wood, Peterborough PE2 6FZ
• Email us at [email protected]

We will check this policy at least once a year to make sure it is up-to-date and accurate. As a result, we may need to make some changes to our Privacy Policy from time to time, which will be made clear on our website or by contacting you directly.

This version of the Privacy Policy was published on 14 February 2018.