We are committed to protecting your privacy and will only use the information that we collect about you lawfully. This policy is intended to give you an understanding of how and why we use the information you provide to us both online and otherwise.
Please read this policy carefully to understand how we will collect, use and store your data.
Who are we?
SAT-7 UK TRUST LIMITED (known as “SAT-7 UK”) through satellite television in the Middle East and North Africa enables the Church in the region – isolated, often small and facing many restrictions – to make known the love of Christ, to teach and encourage believers, and share a positive Christian vision for life and society. SAT-7 UK also seeks in the UK to raise awareness of the needs of the church in the Middle East and North Africa (MENA) to encourage our supporters in the United Kingdom to pray regularly, to engage actively and to provide funding and resources towards the work of this vital ministry.
SAT-7 UK TRUST LIMITED is a company registered in England and Wales with company number 330173 and a charity registered in England and Wales with charity number 1060612. SAT-7 UK’s registered address is PO Box 3941, 3-4 New Road, Chippenham, SN15 1EJ.
SAT-7 UK is registered with the Information Commissioner’s Office (ICO) as a data controller, registration number A8463925. You can find out more about our registration here including a list of all data related activities that we have registered with the ICO.
- calling on 01249 765 865
- using the contact form of the website
- emailing: email@example.com
- writing to the Data Protection Coordinator at PO Box 3941, 3-4 New Road, Chippenham, SN15 1EJ.
By using our website or providing us with your personal information you agree to your personal information being used and stored in the manner set out in this policy.
Why do we collect personal data?
We aim to communicate meaningful information to our supporters by post, email, text, and telephone. Our communications may include news about our progress and ways our supporters can help us achieve our mission. We also use personal information to keep SAT-7 UK running, better understand how our supporters use our services, customise their experiences, prevent abuse and improve SAT-7 UK.
What personal data do we collect and where do we collect it from?
Personal data is any information that can be used to identify you. For example, it can include your name, email address, postal address, telephone number, mobile telephone number, correspondence with us, bank account details, credit/debit card details, and whether you are a taxpayer so that we can claim Gift Aid on any donations you may make. It also includes Internet Protocol (IP) addresses (the location of the computer on the internet), details of pages visited on our websites and files downloaded.
We ask for your personal data whenever you directly engage with us. This may be as a donor, an online/offline shopper, interacting with us on SAT-7 UK managed websites and emails, a subscriber for communications from us including news, prayer needs and magazine, a volunteer, an attendee at a SAT-7 UK event, an employee, a contractor, or someone else with a stated interest in our work.
Collecting personal data helps us to keep in touch, based on your stated preferences, and to provide you with relevant and timely information. We never share your details with third parties outside of SAT-7 UK’s contractual relationships and the SAT-7 International family (refer to section on ‘Sharing personal data’)
We collect personal data in the following ways:
Information you give us directly:
The data that we collect when you sign-up online, by telephone, at an event or enter a contract with SAT-7 UK will include:
- Your title, name and email address and / or postal address
Additional data may include:
- The name of the organisation/church you are associated with
- Your telephone number(s)
- Your communication preferences
- Your gender
- Your areas of interest in the work of SAT-7 UK
By visiting our website, depending on your browser settings, we will collect technical data. This may include:
- Your Internet Protocol (IP) address, browser type & ID, type of device or operating system, general location, browsing activity, date stamps, and other information about how you interact with our services (see Website Security below).
The technical data that we collect when you read our emails may include:
- IP address, device type, general location, date stamps, etc.
Information you give us indirectly:
Your data may be shared with us by sites such as JustGiving , and you should check their privacy notices when you provide your personal data, to understand how they will process your data.
Information we collect from your use of our website:
SAT-7’s website www.sat7uk.org has security measures in place to protect against the loss, misuse and/or alteration of the data under our control. We utilise industry-standard HTTPS certificated secure server connections across the website and provide additional encryption during the product ordering and donation process.
Log files – SAT-7 UK uses log files in its website to track trends, views of content and user activity. This data helps SAT-7 UK to develop its website to better suit visitor experience and to match your areas of interest. Be reassured that Log files are unable to identify your personal data e.g. name and address. Instead, these log files contain information about what search engine domains (e.g. Google.com) are used, what browser software and system software is used, and what pages are visited on our site. This data may be archived for analysis in the future.
Information from public sources:
We may combine information you provide to us with information available from public sources or records, social media platforms or third party data providers in order to gain a better understanding of our supporters and those who engage with us. For example: If we receive updated delivery and address information from our mail & delivery services, we will then correct your records. We may also check data against public records e.g. deceased records in order to keep our database accurate and up to do date. This helps us to improve our fundraising methods, resources and programmes. We also receive information from public sources as part of our research and profiling activity as explained above. Such information is taken from publicly available sources, for example from public registers, such as listed Directorships, typical earnings in a geographical area, information from the electoral roll, press reports and social media posts and other information that has been published online and in print. We may use third party suppliers to undertake these activities on our behalf and share your information with them to the extent required.
Sensitive/special categories of data
Data Protection law recognises that certain categories of personal data are more sensitive. This is known as sensitive personal data or special categories of data and covers health information, race and ethnicity, religious or philosophical beliefs and political opinions amongst other things. We do not collect sensitive personal data about you unless there is a clear reason for doing so. We do from time to time collect data about the church you attend, this for instance helps us to keep you informed about appropriate events in your area, as allowed by GDPR article 9-2 (a) and 9-2(b). We do not share any sensitive personal data with any other party.
SAT-7 UK does not hold personal data for children below the age of 16 years.
How do we use personal data?
SAT-7 UK is extremely careful with the collection, storage and processing of personal data you provide. We use it for the following purposes:
- To keep you informed about the work of SAT-7 UK including news, prayer and fundraising appeals
- To fulfil your requests
- To inform you of relevant events organised by SAT-7 UK
- To process your donations including gift aid
- To process your purchase of gifts from our online or offline shop
- To provide you with a receipt and acknowledgement of donations
- To keep a record for any lawful purpose and requests from statutory agencies
- To carry out research to find out more information about our supporters’ background and interests
- To prevent fraud or the misuse of our website.
- To keep a record of your relationship with us
- We may analyse and screen your personal information using information from public sources and create a profile of your interests and preferences. This allows us to ensure communications are relevant and timely and provide an improved experience for our supporters. It also helps us understand the background of our supporters so that we can make appropriate requests to those who may be willing and able to give more than they already do, enabling us to raise funds sooner and more cost-effectively.
SAT-7 UK will always provide a way for you to be removed from our mailing lists through mailing response forms, email unsubscribe options or when you ask us to do so directly.
SAT-7 UK never publishes the personal data of its supporters to others.
Refer to the section ‘Sharing your information’ for details about how when and how SAT-7 UK may share your data.
What is our lawful basis for processing data?
We rely on a variety of lawful bases for processing data depending on the purpose of the activity being undertaken.
We ask for your personal data whenever you directly engage with us. This may be as a donor, an online/offline shopper, a subscriber for news, prayer and magazine, a volunteer, an attendee at a SAT-7 UK event, an employee, a contractor, or someone else with a stated interest in our work.
We use a contractual basis for processing data relating to online and offline shopping.
We rely on legitimate interests for a variety of purposes. Legitimate interest is about balancing the interests of SAT-7 UK against your rights and freedoms and having due regard to your reasonable expectations about the use of your data. These purposes include:
- mailing you information related to your subscription to prayer, news and our magazine, and about related resources and events that you might be interested in, given your previous purchases and attendance
- thanking those of you who have made a financial gift
- sharing with you by mail or telephone the fundraising needs of the charity and to ask for your support; you can alter your communication preferences at any time.
Our Legitimate Interest to Send You Direct Marketing Communications by Post and Phone: We believe that our supporters share our genuine interest in seeing a growing Church in the Middle East and North Africa, confident in Christian faith and witness, serving the community and contributing to the good of society and culture.
We also believe that our supporters expect us to tell them about new opportunities to contribute to our unique and rewarding work.
We depend our supporter’s generosity to continue our work and believe that this type of communication is a legitimate interest of ours that also respects our supporters’ rights and freedoms (see ‘Right to Object to Direct Marketing’).
We rely on consent for all email marketing communications such as newsletters and fundraising appeals; every email newsletter you receive provides a clear opportunity for you to opt out or alter your communication preferences.
We use compliance with a legal obligation as the basis for processing any legally required activities such as Gift Aid returns to HMRC.
Who has access to your personal data and how do we keep it safe?
SAT-7 UK is committed to keeping your personal data safe by only using secure, world-class, cloud-based solutions. All your information will be transmitted in a secure fashion. Our whole website is protected by a security certificate.
We have also put security measures in place for the data we hold, including Cyber Essentials accreditation IASME-A-09538, to attempt to protect against the loss, misuse, and alteration of personal information under our control.
All staff and volunteers are fully briefed on SAT-7 UK’s data protection policies and procedures relevant to their role. Staff only have access to data that they need to be able to carry out their duties.
Transferring your information outside of Europe
Most of the data we store and process stays within the UK or the European Economic Area (EEA), however some data may be transferred to countries outside the EEA.
This may occur if, for example, one of our supplier’s servers on which personal data is stored is located in a country outside the EU or if we use a cloud IT platform where data is dispersed between a number of different servers. These countries may not have similar data protection laws to the UK. However, we will ensure that your privacy continues to be protected as outlined in this privacy notice and in accordance with our legal obligations under applicable data protection legislation.
By submitting your personal data to us you agree to this transfer, storing or processing at a location outside the EEA.
Payment by credit or debit card
If you use your credit or debit card to donate to us, buy something or pay online or over the phone, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard through compliant online virtual terminals managed by Blackbaud Merchant Services or PayPal. Find out more information about PCI DSS standards by visiting their website at www.pcisecuritystandards.org.
Only those staff authorised to process payments will be able to see your card details. Once your transaction is completed, we will not store your full credit or debit card details.
Sharing your information
SAT-7 UK does not share or sell your data with third parties for their own marketing purposes. We do not share your information with other individuals or organisations outside the SAT-7 international family. We do not share sensitive personal data with any other party.
SAT-7 UK may disclose your personal data only in the following circumstances:
- To third parties who provide a service to us and are our data processors. We employ other companies and individuals to perform functions on our behalf. Examples include fulfilling orders, delivering packages, sending postal mail and email, removing repetitive information from customer lists, analysing data (including wealth screening), providing marketing assistance, processing credit card payments, and providing customer service. These data processors have access to personal data needed to perform their functions but may not use it for other purposes. We require these third parties to comply strictly with our instructions and data protection laws and will make sure that appropriate controls are in place.
- Where we are under a duty to disclose your personal data in order to comply with any legal obligation (for example to government bodies and law enforcement agencies), or in order to enforce or apply our rights (including in relation to our website or other applicable terms and conditions) or to protect SAT-7 UK (for example in cases of suspected fraud or defamation).
How long do we keep your personal data for?
We have a retention policy for every personal data set. We will hold your personal data on our systems for as long as is needed to fulfil the purpose for which we hold the data or as long as is required by law for the relevant activity. For example, HMRC requires us to keep a record of donations, Gift Aid and financial transactions for seven years.
If you request that we stop sending you marketing or fundraising information, we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us.
Where your data is no longer required, we will ensure that it is disposed of in a secure manner.
What are your rights and how can you exercise them?
The Data Protection Act and the upcoming General Data Protection Regulation give you certain rights over your data and how we use it. You have the following rights:
- Informed – this privacy notice
- Access – you may request a copy of the data we hold about you and details of the purposes for which we process your data (known as a subject access request). This is normally without charge and will take up to one month from the date we receive your data subject access request and have confirmed your identity
- Rectification – update or amend the data we hold about you if it is wrong, change your communication preferences at any time or withdraw your consent to use of your personal data where we are relying on consent as the legal ground for processing it
- Erasure – ask us to remove your personal data from our records
- Restrict processing – ask us to restrict the processing of your personal data
- Data portability – obtain a portable copy of certain personal data where this is processed automatically
- Object – object to the processing of your data for marketing purposes
- Related to automated decision-making including profiling – ask us to explain any automated processing we carry out and the impact of this on you.
If you wish to exercise any of these rights, please contact us in any way listed in the ‘Who are we’ section at the start of this privacy notice. We may ask for reasonable proof of your identity before providing you with data or carrying out any of the above actions.
To change your communications preferences, you may find it easier to use the unsubscribe link in the emails we send, or the response slip when we send information by post.
If you wish to make a complaint to SAT-7 UK, we endeavour to respond to you within 20 working days from receipt of your correspondence related to privacy matters. You can read our complaints policy in full at www.sat7uk.org/terms-and-conditions/our-complaints-policy. However, you have the right to contact the data protection supervisory authority to lodge a complaint with the UK Information Commissioner’s Office online at https://ico.org.uk/concerns/handling
Changes to this statement
SAT-7 UK reserves the right to make changes to this privacy statement and its associated policies at any time and requests that you review this statement periodically for updates.
Last revised on 15/5/2019