We care about your privacy and are committed to protecting your personal data. Please take a moment to read this notice so you understand how your information is used and what your rights are.

Big Change Charitable Trust is the data controller for your personal data. This means we decide how and why your personal information is used and are responsible for keeping it safe.

Our details:

• Address: 7 Savoy Court, London, WC2R 0EX
• Email: dataprotection@big-change.org

If you have any questions about this notice or how we handle your data, you can contact us at any time.

“Personal data” means any information that can identify you as an individual, either on its own or combined with other information. This may include, for example; your name and contact details, payment or donation details and online identifiers such as IP address or device information.

We only use your personal data where the law allows us to do so. Most commonly, this is because:

• we need it to provide a service you’ve asked for
• it’s necessary for our legitimate interests as a charity
• you’ve given us your consent
• we’re required to comply with the law

What we use your data for

We use your information to:

• provide and run our website and services
• manage registrations, accounts and donations
• respond to enquiries and provide support
• keep a record of our relationship with you
• improve our website, services and communications
• let you know about updates, events or opportunities (where permitted)
• meet legal, regulatory and safeguarding obligations

We do not use automated decision-making or profiling.

If you already have a relationship with us, we may contact you about similar activities, services or opportunities that we think may interest you.

You can opt out at any time by:

• using the unsubscribe link in our emails, or
• contacting us at dataprotection@big-change.org

We’ll always respect your preferences.

We collect personal data in the following ways:

Information you give us

This includes information you provide when you:

• register on our Site
• make a donation
• contact us by email, phone or online forms
• take part in events, meetings or recorded sessions
• submit content, comments or feedback
• take part in promotions or reward schemes

Some information (such as medical or dietary needs) may be collected only where relevant and necessary.

Information from social media

If you connect our Site to social media platforms (such as Facebook, Twitter, Instagram or YouTube), we may receive information from those platforms based on your privacy settings. You can control this through your social media accounts.

Information we receive from others

We may receive information from partners or third parties where you have agreed to share it with us.

Information collected automatically

When you visit our Site, we automatically collect technical information such as:

• device type and browser
• operating system
• pages viewed and time spent
• referral website
  This information is collected using cookies (see below).

Cookies are small text files stored on your device that help websites work properly and improve your experience.

Types of cookies we use

• Essential cookies – required for the Site to function
• Functionality cookies – remember your preferences
• Analytics cookies – help us understand how the Site is used
• Social media cookies – enable sharing and interaction with social platforms

We use Google Analytics to help improve our website. This data is aggregated and does not identify you personally. You can opt out using Google’s browser tool if you wish.

Managing cookies

You can manage or disable cookies through your browser settings. Please note that some parts of the Site may not work properly if cookies are disabled.

We only share your personal data where necessary and appropriate, including with:

• service providers who support our website, payments, communications or IT
• partners or affiliates (where relevant)
• third parties you’ve specifically agreed to share data with
• authorities or regulators where required by law
• organisations involved in a business transfer or restructuring

All third parties we work with are required to:

• keep your data secure
• use it only for agreed purposes
• treat it confidentially

We may use anonymised data (which cannot identify you) for research, reporting and improving our services. This data is no longer personal once anonymised.

Our Site may include links to third-party websites or platforms. We are not responsible for their privacy practices, so please check their privacy notices before sharing information.

If you post content on public areas of our Site, that information may be visible to others and should be considered public. Please be careful about sharing personal or sensitive information.

Your personal data may be transferred outside the UK or EEA, including to countries that may not offer the same level of protection. Where this happens, we use approved safeguards (such as standard contractual clauses) to protect your data.

We use appropriate technical and organisational measures to protect your personal data. Access is limited to those who need it, and all staff are trained in data protection.

No system is 100% secure, but we take security seriously and will notify you and regulators of any data breach where required by law.

We only keep your personal data for as long as necessary for the purposes it was collected, or as required by law. When it’s no longer needed, it’s securely deleted. 

Our Site is not aimed at children under 16, and we do not knowingly collect their personal data. If we become aware that we’ve collected such data without consent, we will delete it promptly.

We do not intentionally collect special category data (such as health, ethnicity or political beliefs), unless you choose to share it with us (for example, in user-generated content). By doing so, you consent to us processing it in line with this notice.

Under data protection law, you have rights including:

• access to your data
• correction of inaccurate data
• deletion of your data (in certain cases)
• restriction or objection to processing
• withdrawal of consent
• data portability
• opting out of marketing

To exercise your rights, contact dataprotection@big-change.org. We’ll respond as soon as possible and always within one month.

If you’re unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

If you have questions, concerns or feedback about this notice, please contact:

Email: dataprotection@big-change.org
Address: 7 Savoy Court, London, WC2R 0EX