Orangutan Foundation Privacy Policy
This website is owned and operated by Orangutan Foundation. We are a UK registered charity, No.1095660, and a company limited by guarantee in England & Wales, No.4624177.
We are committed to protecting your privacy and maintaining the security of any personal information received from you. Orangutan Foundation strictly adheres to the requirements of data protection legislation in the UK.
This privacy policy only applies to the Orangutan Foundation website. It details what personal information the Orangutan Foundation collects from its website visitors, how this information is used, where it’s stored and how you can contact us regarding your data.
It is likely that we will need to update this privacy notice from time to time, and you are welcome to come back and check this at any point or contact us by any of the means shown below.
Our contact details
Name: Orangutan Foundation
Address: 7 Kent Terrace, London, NW1 4RP
Phone Number: +44 (0)207 724 2912
Email: info@orangutan.org.uk
What is personal data?
The EU’s General Data Protection Regulation (“GDPR”) defines “personal data” as:
“any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
The GDPR classifies certain data as belonging to “special categories”, as follows:
1. Racial origin;
2. Ethnic origin;
3. Political opinions;
4. Religious beliefs;
5. Membership to a trade-union;
6. Genetic data;
7. Biometric data;
8. Health data;
9. Data concerning a natural person's sex life;
10. Sexual orientation; and
11. Other.
The GDPR requires that consent is provided by the data subject for all types of personal data, including those pertaining to the special categories set out above and otherwise. Consent must be explicitly provided.
When Orangutan Foundation requests sensitive data from data subjects, we are required to confirm why the information is necessary and how it will be used.
What information do we collect?
Personal information
We collect personal data you provide to us. This includes the following:
Personal details (name, address, email address, telephone, etc.)
If you place an order on our online website and pay via a credit or debit card, your full credit card details are never stored on our database and payment information is deleted once the order has been processed by Squarespace.
We do not collect or store special categories of personal data (such as information relating to health, beliefs, or political affiliation) about supporters.
Non-Personal information
When you visit Orangutan Foundation’s website, our web servers may automatically recognise and collect information that does not identify you personally (“Non-Personal Information”), such as cookies, in-bound domain names, your computer’s IP address, the type of browser in use and pages viewed. This data tells us which pages our users visit on our website and how they move through our site.
How do we get the personal information and why do we need it?
Most of the personal information we process is provided to us directly by you for one of the following reasons, but are not limited to:
When you support us by giving a donation.
When you buy a product from us that supports our cause.
When you communicate or engage with Orangutan Foundation by letter, email, or other means, including social media.
When you access or engage with our website.
We will only use the information that you have given us with consent and for the purpose for which it was provided. For example, to send a user adoption update after an adoption pack is purchased by them or gifted to them. Non-personal information helps us to improve our website and share information which is most relevant for our audience.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
a) Your consent. You are able to remove your consent at any time. You can do this by contacting us at info@orangutan.org.uk, +44 (0)207 724 2912 or Orangutan Foundation, 7 Kent Terrace, London NW1 4RP.
b) We have a contractual obligation. For example, this might be a Gift Aid claim that you may have pledged.
c) We have a legitimate interest, which will reasonably be expected when we pursue our aims and objectives as a charity but not to the detriment of your rights, freedom, or interests.
We use Google Analytics, which installs cookies on users’ browsers, to understand the performance of our website and content contained within including, but not limited to website referral, number of visits and average time spent either to a single page or the entire site, number of pages viewed per session, or the sequence of pages visited. Google Analytics also collects information about the devices that are used to access our site, including computer type (Windows or Macintosh), screen resolution, operating system and version, device manufacturer and model, language, and Internet browser type and version. Google uses this data to report web trends. To opt out of cookies installed by Google Analytics, please see: https://tools.google.com/dlpage/gaoptout.
We also use Meta Pixel in ads we run on Facebook, Messenger and Instagram which allows us to see how users interact with website content after viewing our ads. Specifically, we record when a specific event happens that we want to track. This information is only collected when the user has clicked through from the ad shared and is stored on our Meta Business Account. You can view and update your Facebook ads settings at any time: https://www.facebook.com/help/568137493302217; and your Instagram ads settings: https://www.facebook.com/help/instagram/2885653514995517/?helpref=uf_share.
You can control the type of information collected through our website, for example by not accepting cookies from Orangutan Foundation, by erasing all Orangutan Foundation cookies from your browser, by not providing Personal Information when prompted or by unsubscribing from communications where applicable. Additionally, you can follow the links above to block other forms of tracking.
How do we protect and store your personal data?
Orangutan Foundation is committed to ensuring that all personal information collected and processed is appropriate for the stated purpose(s) and shall not constitute an invasion of your privacy.
We take every reasonable precaution to ensure privacy and to protect member's information, particularly contact and financial data. We store donor information on CRM system Capsule, which is GDPR compliant. Where sensitive information such as financial data is requested (e.g., credit/debit card details), that information is encrypted and protected with Secure Socket Layer (SSL) communication. Please note that financial information is never recorded on our CRM database.
We may share your personal data with third party service providers who are contracted by us, and we shall ensure that they will hold your personal data securely and shall use it only in order to fulfil the service for which they are contracted. When there is no longer a service need, or the contract comes to an end, the third party will dispose of all personal data according to our procedures.
Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purpose for which it was collected. After which, it will be deleted, put beyond use, or anonymised.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at info@orangutan.org.uk, +44 (0)207 724 2912 or Orangutan Foundation, 7 Kent Terrace, London NW1 4RP if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at Orangutan Foundation, 7 Kent Terrace, London NW1 4RP.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk
Document approved by Orangutan Foundation Director, Ashley Leiman OBE - 7th July 2023
