Privacy Policy

Introduction

The Institute for Financial Inclusivity (OFI, we or us) cares about the privacy of your personal information and is committed to protecting it. This Privacy Policy (Policy) explains what information we collect about you and why, what we do with that information, and how we handle that information.

For the purposes of the applicable data protection laws (the General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR), together with any implementing legislation, in particular, the Data Protection Act 2018), the company responsible for your personal information is OFI. This Policy applies to information obtained by us through your use of the information, software, products and services made available through the ofi.org.uk website (Website).

In simple terms………

OFI is responsible for protecting your personal information. This Privacy Policy applies to information obtained through your use of our website.

Collection of your Personal Information

OFI collects information that, alone or in combination with other data, could be used to identify you (Personal Information), such as your e-mail address, name, physical address, telephone number, or employment information. If you make a donation to OFI, we will collect and store your payment information. OFI may also collect anonymous demographic information which is not unique to you, such as your postal code and preferences (Non-Personal Information). Non-Personal Information is not linked to your Personal Information (for example, your IP address).

OFI will collect your Personal Information in a number of ways, including when you contact us through the Website, by telephone, post, e-mail or through the other means set out below.

In simple terms……….

We collect information that could be used to personally identify you, such as your name and contact details. We may also collect information that is not personal to you and not linked to your personal information.

Information you provide when you register for an account

When you register with OFI, you voluntarily give us certain Personal Information, including your:

  • Name and e-mail address.
  • Payment information, if you make a donation. This is required to complete a commercial transaction on the Website.

In simple terms……….

When you register for a account on our Website, you provide us with personal information, such as your name, e-mail address and billing information.

Information from third parties

We collect Personal Information about you from third parties such as social media networks. We use this information to source potential donator leads.

In simple terms……….

We collect information about you from third parties, that we use to help us source potential donator leads.

Other information we collect

We also collect this Personal Information as you use the Website:

  • User Content. This consists of all text, documents, content or information uploaded, entered, or otherwise transmitted by you in connection with your use of the Website.

In simple terms……….

If you upload any user content to our Website, this may contain your personal information, which we may collect and use for the purposes described here.

Automatically collected information

When you visit our Website, we automatically collect information about your computer hardware and software such as your IP address, browser type, domain names, access times, operating system, cookie information, referring website addresses, pages visited, links clicked, text entered, and Internet Service Provider. We analyse and use this information to better understand how our users use the service, to maintain and improve our service, and in some cases, to publicly disclose aggregated statistics regarding our services. Please refer to our Cookies Policy for further information.

In simple terms……….

We automatically collect certain information about you when you visit our Website. We use this information to analyse your use of the Website and to improve our services.

Use of your Personal Information

OFI collects and uses your Personal Information as necessary for our legitimate business interests, including to:

  • Operate the Website.
  • Communicate with you about the donations you make, as well as respond to requests for assistance, including support if you are having any difficulty using the Website. OFI will send a welcome email following registration to all registered users. We also periodically send service updates to registered users as well as news about OFI’s research and projects.
  • Display user content associated with our projects and make sure it is available to you when you use our Website.
  • Understand and improve how our users use and interact with our Website.
  • Publicly disclose aggregated statistics regarding our users’ donations, use of our Website, volunteering and our projects.

When you register with us and set up an account to make donations, the legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. When we process any donation made by you, we process your Personal Information to prevent or detect fraud, including fraudulent payments and fraudulent use of the Website. The legal basis for this processing is compliance with our legal obligations.

With your consent, we will send you direct marketing emails from our third-party partners.

In simple terms……….

We collect your personal information to perform the contract you enter into with us when you sign up to make donations. We also collect certain information when we have a good reason to do so. We will send you direct marketing emails from our partners, but only with your permission.

Storage of Personal Information

Unless a longer retention period is required or permitted by law, we will only hold your Personal Information on our systems for the period necessary to fulfil the purposes outlined in this Policy, or until you request that the information be deleted in accordance with your right of erasure (see “Your rights” section below).

Even if we delete your Personal Information, we reserve the right to maintain a copy for legal, tax or regulatory purposes, but in such event, we will do so only as long as necessary to fulfil those legal, tax or regulatory purposes. Please contact [email protected] for more information.

In simple terms……….

We’ll retain your personal information for no longer than is necessary.

Personal Information access and disclosure

We will only disclose Personal Information to third parties:

  • When we use vendors, lawyers and service providers to assist us in meeting business or operating needs, such as providing legal services, hosting our Website, communicating with users, delivering and improving our services, e-mail communication, invoicing and payments, customer support services and analytics. These service providers may only access, process or store Personal Information pursuant to our instructions and to perform their duties to us, and in accordance with applicable laws and regulations; or
  • when we have your explicit consent to share your Personal Information; or
  • when we determine that disclosure is required to protect the rights, property, or personal safety of OFI and users of the Website, or to respond to lawful subpoenas, warrants, or requests by public or regulatory authorities, including requests by law enforcement authorities; or
  • we may disclose Personal Information to a member of our group, which means any of our branches.

In simple terms……….

We disclose your personal information to third parties such as service providers. We also disclose your personal information when we have your explicit consent, or if we are required to do so by law.

Transfers outside of the EEA

As part of the services offered to you through the Website, the Personal Information you provide to us will be transferred to and stored in the United Kingdom and in certain circumstances, other countries outside of the European Economic Area (EEA). By way of example, a transfer of your Personal Information may happen if one of our service providers is located in a country outside of the EEA.

We will only transfer Personal Information outside of the EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your Personal Information, for example, by way of data transfer agreement incorporating the current standard contractual clauses adopted by the European Commission, or by self-certifying to the EU-US Privacy Shield Framework in the event that the organisation in receipt of the information is based in the United States.

To ensure that your Personal Information receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your Personal Information with. This ensures your information is treated by those third parties in a way that is consistent with data protection laws.

In simple terms……….

We may transfer your personal information to locations outside of the EEA, but only where there are appropriate safeguards in place. We may transfer your information outside the EEA if, for example, one of our service providers is located in such a location.

Data security & integrity

OFI is committed to taking reasonable and appropriate steps to protect the Personal Information that we hold from misuse, loss, or unauthorised access. We do this by using a range of technical and organisational measures including measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your personal information, please let us know immediately.

The Website is designed to secure the Personal Information you provide on computer servers in a controlled, secure environment, with protections from unauthorised access, use or disclosure. When Personal Information is transmitted to other websites, it is protected through the use of encryption.

However, while we do our best to protect your Personal Information, we cannot guarantee the security of all data which is transmitted to the Website or to another website via the internet or similar connection. If we have given you (or you have chosen) a password to access certain areas of the Website, please keep this password safe.

In simple terms…………..

OFI’s website is designed to keep your personal information safe, however, we cannot guarantee the security of information transmitted over the internet or similar connection. You can do your part by keeping your password safe.

Your rights

Under the GDPR, you have various rights in relation to your Personal Information, such as the rights of access, rectification, restriction, objection, portability, and erasure. Please note that these rights are subject to certain limitations set forth in applicable law.

To exercise these rights, please contact our DPO. We will seek to deal with your request without undue delay, and in any event in accordance with the requirements of applicable laws. Please note that we may keep a record of your communications to help us resolve any issues you raise.

In simple terms……….

You have rights in relation to your personal information. Just contact our DPO to find out more.

Complaint resolution

If you believe that we have not complied with this Policy or your data protection rights, you have the right to file a complaint with the UK Information Commissioner’s Office, however, we hope that you’ll attempt to resolve the complaint with us first. Please contact us for more information.

In simple terms……….

If you’re not happy with the way we’ve handled your personal information, you have the right to bring a complaint. Please contact us to find out more.

Children

We do not intend to solicit or collect Personal Information from anyone under the age of 18. If you are under 18, do not enter information on this Website or engage our services. If you believe a child or yours under the age of 18 has entered Personal Information, please contact us to have the data removed and terminate the child’s account.

In simple terms……….

No one under the age of 18 should use OFI’s Website

Changes to this Policy

We will occasionally update this Policy to reflect company and customer feedback. OFI encourages you to periodically review this Policy to be informed of how we are protecting your Personal Information.

In simple terms……….

We may change this policy from time to time. We encourage you to review this policy regularly.

Contact information

OFI welcomes your comments regarding this Policy. Please contact us at [email protected] or write to us at:

Data Protection Officer
OFI
20 Conduit street, 2nd Floor, London
W15 2XW, United Kingdom

Liability disclaimer

The information, software and services included in or available through the Website may include inaccuracies or typographical errors. Changes are periodically added to the information on the Website. OFI and/or its suppliers may make improvements and/or changes to the Website at any time. Information and opinions received via the Website should not be relied upon for personal, medical, legal or financial decisions and you should consult an appropriate professional for specific advice tailored to your situation.

Although OFI will use its reasonable efforts to keep the Website available and the information on the Website reasonably accurate, OFI and/or its suppliers make no representations about the suitability, reliability, availability, timeliness, and accuracy of the information, software, products, services and related graphics contained on the Website for any purpose. All such information, software, services and related graphics are provided “as is” without warranty or condition of any kind. OFI and/or its suppliers disclaim all warranties and conditions with regard to this information, software, services and related graphics, including all implied warranties or conditions of merchantability, fitness for a particular purpose, title and non-infringement.

Guest users

You use the Website at your own risk. Neither OFI nor any of our respective agents, employees and subcontractors, shall be liable to you or any other party for any losses or damages whatsoever or howsoever arising in connection with the Website (whether under these Terms or other contract or as a result of any misrepresentation, misstatement or tortious act or omission, including negligence).

OFIPrivacy Policy