Asthma and Lung UK (formerly known as Asthma UK and British Lung Foundation Partnership) is working to change the lives of everyone affected by asthma, bronchiectasis, COPD, ILD, mesothelioma, pulmonary fibrosis and all other lung conditions.
Our support helps people who struggle to breathe manage their lung condition and live well.
Our world-leading research finds new ways to prevent, treat and cure lung disease.
Our campaigns help make vital, lasting changes.
This notice tells you:
- Who we are
- The type of personal information we collect
- What we do with your information
- The legal basis for processing your information
- How we share information with other organisations
- How we protect your information
- How long we keep your information
- Your rights
- How to contact us
- Other information
By providing us with personal information, you consent to its collection and use as set out in this Privacy Notice. We aim to be clear, transparent and only to use your information in a way that you would reasonably expect us to. We may update this Privacy Notice from time to time so please check it regularly.
1. Who we are
Asthma and Lung UK comprises a charity with registered charity number 326730 in England and Wales, SC038415 in Scotland, and 1177 in the Isle of Man, and two trading companies: Asthma Enterprises Limited with company number 02355314 and ALUK Trading Ltd (Digital) with company number 02341027. In this Notice wherever you see the words ‘we’, ‘us’ and ‘our’, it refers to both the charity and the trading companies.
Our trading companies are wholly owned and controlled by our charity. Any information we collect may be used by any of our entities. Our trading companies exist to support our charitable objectives.
Our principal office is located at:
Asthma and Lung UK, The White Chapel Building, 10 Whitechapel High Street, London, E1 8QS
Asthma and Lung UK is registered as a data controller with the Information Commissioner’s Office under the General Data Protection Regulation 2016/679 and Data Protection Act 2018. Our registration is:
Asthma and Lung UK Z6901318
2. The type of personal information we collect
The types of personal information that we collect may include:
- Your title, name, gender and date of birth
- Your contact details (address, email, phone number and social media contact details)
- Your preferred way of being contacted by us
- Your current interests and activities
- Gift Aid status and records of donations
- Your IP address, location, browser type and information on how you interact on our website
- Any other information provided by you on our request
In some circumstances the personal information we collect about you may include “sensitive data”. This includes personal information relating to your health, racial or ethnic origins and living conditions. Where we request such sensitive data, we will explain to you why we need it.
If you are under the age of 13 you should ask permission of a parent or guardian before sending personal information to anyone online.
3. What we do with your information
We will use your personal information to:
- Provide you with the services or information that you asked for
- Provide you with information with other services or information we think might interest you, where you have consented to being contacted – which will include opportunities to support the charity.
- Administer your donation or support your fundraising, including processing Gift Aid
- Send you surveys to help us improve our operations
- Invite you to events
- Keep you informed about activities we are involved with in your area connected to your interests
- Keep a record of your relationship to us and record the contact we have had with you
- Confirm your preferred methods for communicating with us
We may also use personal information to carry out due diligence on prospective research grant recipients.
We also use publicly available information to research current and potential donors to understand their philanthropic interests and how we can best build and develop the relationship. We adhere to our internal policies and procedures which are aligned to the Fundraising Regulator’s Code of Best Practice. Donors may opt out of our research process at any time by contacting our supporter care team at email@example.com
4. The legal basis for processing your information
Under the UK GDPR and the DPA, we must have a legal reason to collect, keep and use your personal information. We rely on the following legal basis for processing your data:
- Legitimate Interests
We process your personal information for our legitimate interests to allow us to run, fund and evaluate Asthma and Lung UK as a charitable entity and in pursuit of our objectives. When we process your personal information for our legitimate interests, we make sure to consider and balance any potential impact on you and your rights under data protection laws. We will always ensure that your personal information will not be used where our interests are overridden by the impact on you. The following are some examples of the instances where we process your data for our legitimate interests:
We will send postal marketing and fundraising requests which further the aims and objectives of Asthma and Lung UK and don’t unduly impact the rights of the individual
Profiling and analysing information:
At Asthma + Lung UK, our vital work is only made possible thanks to the generosity of our supporters. We know how important your donation is, so we look to ensure that our fundraising efforts are as effective as they can be. We sometimes use publicly available sources to develop a better understanding of our supporters and to gain insight into their philanthropic interests. This allows us to make sure we are spending your donations effectively, by using research and analysis to inform our decisions and ensure our conversations with donors provide the best supporter experience possible
We use data which has been provided directly to Asthma and Lung UK and combine this with information from publicly available sources including but not limited to charity websites and annual reviews, corporate websites, the electoral register and Companies House in order to create a fuller understanding of someone’s interests. We only use reputable sources, where someone would expect their information may be read by the public.
We’re committed to putting you in control of your data and you’re free at any time to opt out from this activity. To find out more, please contact firstname.lastname@example.org
5. How we share information with other organisations
We are committed to protecting your information and therefore it will never be sold to external organisations and will only be disclosed to those acting as agents and data processors carrying out work on our behalf. Where we enter into an agreement with an external party, such arrangements will be subject to a formal agreement between Asthma and Lung UK and that organisation to protect your information. These parties may include:
- Suppliers who send out communications on our behalf
- Fulfilment organisations to process payments received as donations
- Research agencies supporting not-for-profit organisations, including database screening
- Other partners engaged in the Taskforce for Lung Health
When we work with carefully selected partners for either research, analysis or fundraising. These partners will only have access to your information when the necessary contractual arrangements have been agreed and signed, these contracts dictate our requirements for them to process the information and conform to data protection legislation
6. How we protect your information
We aim to ensure that there are appropriate physical, technical and managerial controls in place to protect any personal information you may provide to us, for example our online forms are always encrypted, and our network is protected and monitored. All Asthma and Lung UK staff members are required to complete training on handling data securely.
Where we use external companies to collect or process personal information on our behalf, we carry out comprehensive checks on them before we work with them and ensure that contracts are in place that set out our expectations and requirements. We may work with external companies that transfer personal information outside of the European Economic Area (EEA) to allow them to perform services on our behalf. In doing so your information may be stored and processed outside of the EEA. Where this happens, we will endeavour to ensure your information is processes in accordance with the appropriate security requirements to meet all our legal responsibilities.
Despite all our precautions no information transmission through the internet, email, the post or by telephone can ever be guaranteed to be 100% secure. The transmission of information to us is at your own risk.
7. How long we keep your information
We will hold your information on our systems for as long as is necessary for the relevant activity. If you request that stop sending you materials, then we will hold a record of that request indefinitely. All our regular communications offer you an option not to receive any further communication.
8. Your rights
You are entitled to know what personal information we hold about you and you may ask us to make any changes to ensure that it is accurate and up to date. This includes:
- You may request a copy of the personal information we hold about you at any time
- You may request us to cease sending you any correspondence, email updates and newsletters at any time by notifying us in writing or following any “unsubscribe” instructions included in any email sent to you
- If you have received unwanted, unsolicited emails sent via our system or purporting to be sent via our system, please forward a copy of that email to us with your comments
Please let us know if any of the information which we hold about you needs to be corrected or updated at any time.
Any such request should be sent to email@example.com, we will review your request and respond to let you know when we have made the requested changes.
9. How to contact us
For any comments or complaints about this Notice or how we have used personal information, please contact us by post at:
Asthma + Lung UK, The White Chapel Building, 10 Whitechapel High Street, London, E1 8QS
Or by email at:
10. Further information
The laws governing how your personal information can be used are:
General Data Protection Regulation 2016/679 (UK GDPR)
Data Protection Act 2018 (DPA)
The Privacy and Electronic Communications Regulations 2003 (PECR)
We also follow the best practice code set by the Fundraising Regulator: Code of Fundraising Practice.
You can also contact the Information Commissioner’s Office (ICO) at ico.org.uk for further information. You can raise a complaint or concern about data protection compliance with the ICO through their website, by calling their helpline on 0303 123 1113, or by post to:
The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.