Date of Last Update: 23/04/2019
This section of the privacy notice is relevant for all MPD (ministry partner development) communications and rights that you have as a recipient of any digital or postal mailings from Agape or a member of staff. For Agape’s full privacy notice, visit www.agape.org.uk/privacy.
Staff with Agape often create electronic or postal communications with those that have consented to pray, and often, those who give financially to Agape in support of that staff member. and to receive any newsletters or communications from them. Those who give and pray are called ministry partners.
Being a Prayer and/or Financial supporter means that your data will be stored in a system called MPDX. MPDX is owned and controlled by Cru, the US organization of Campus Crusade for Christ International, the Global organization of which Agape UK is a part. MPDX is hosted in the US.
Staff may send postal newsletter updates under Agape’s legitimate interests. If you currently receive postal mailings and you wish to stop receiving them, please contact that member of staff directly, or you may contact Agape at email@example.com, whom will pass on your request. Your postal address and any other details you want, will be deleted upon processing your request. Similarly, if you receive any other postal mailings from Agape, you can unsubscribe at any time, also by contacting firstname.lastname@example.org.
If you receive electronic communications updates/newsletters from a staff member, you will have consented to do so. Staff are trained to log how and when you gave your consent. If you no longer wish to receive digital updates/newsletters from a staff member, you can remove your consent at any time either by contacting that member of staff, who will remove your email address and any other data you wish to have removed upon receiving your request. You are also given an additional opportunity to unsubscribe and stop receiving those mailings directly in the newsletters themselves, in the footer. Your data will then be deleted by the staff member.
Agape staff are trained and required to use Mailchimp to send digital communications. MailChimp’s privacy notice is here: https://mailchimp.com/legal/privacy/ MailChimp may use your data for their own statistical and analytical purposes.
If you are a financial donor to Agape centrally or to a specific member of staff, your financial details are required to be processed by the legal basis of legal obligation. Agape are required to process financial details for no less than 6 years and will be deleted after. If you would like a copy of this information, please email email@example.com and we will process your request within 30 days.
How and when we share your information
Agapé is part of an international organisation and we work with organisations outside of the EU. Please be aware that we may need to transfer your data to countries outside the European Economic Area (EEA) to process it. We will only transfer your personal information outside the EEA with adequate safeguards in place and in full compliance with applicable laws. For example, we will only transfer your personal information to countries that have been deemed to provide an adequate level of protection. We have established standard contractual clauses with our service providers to ensure they protect your information and to enforce legal transfers of data internationally.
Generally, we will not disclose or share your personal information with anyone outside our organisation without your permission. However, we may need to use or share your information with trusted partners and agents who enable us to deliver our charitable objectives and provide goods and services to you on our behalf, or if required to by law, i.e. with the police or a regulatory body.
Your information may be disclosed:
To Campus Crusade for Christ International or CCCI, of which Agapé UK is a part. The privacy notice for CCCI (and Cru) may be found here: https://www.cru.org/us/en/about/privacy.html
To other parts of CCCI (including CCCI offices around the world, e.g. Agapé UK, Cru, Agape Europe, Tandem, Power to Change, etc.);
To public or regulatory authorities;
Cloud service providers for the hosting of apps and sites;
Direct and email marketing service providers (e.g. Mailchimp); and
Companies that assist us in processing your donations.
At all times we remain legally responsible for your data. We take steps to safeguard your information and we have contractual provisions requiring all third-party service providers to respect the security of your personal data and to treat it in accordance with our data protection policies and all applicable laws. We never share your data with any third parties for their own purposes. We will not allow any third party, including service providers and other charities, to use your personal information for their own marketing or commercial purposes and they will only be allowed to process your personal information in accordance with our instructions.
The GDPR gives you various rights in respect of the personal information we hold about you – these are set out in more detail below. If you wish to exercise any of these rights or make a complaint, you can do so by contacting us:
- By Post: 167 Newhall Street, Birmingham, B3 1SW.
- Rectification (editing and updating personal information)
- Access your personal information (Data Subject Access Request)
- Erasure (deletion of personal information)
- Restriction of processing of personal information
- Objecting to certain types of processing including automated decision making
- Portability of personal information
- Filing a complaint with a data protection authority
We will try to resolve any problems that you have but you are always able to contact the local data protection supervisory authority for assistance or to make a complaint at https://ico.org.uk/.
For more information about your rights under the GDPR, please see section 14 of Agape’s master privacy notice “Your rights” at www.agape.org.uk/privacy