Privacy: Using your data
By data protection law, we can only use your personal data if we have a lawful basis to do so, which will be one of the following depending on what we are using your data for:
- When it is in our legitimate interest, or
- When you consent to it, or
- To fulfil a contract we have with you.
A legitimate interest is when we have a business or commercial reason to use your information. But even then, it must not unfairly go against what is right and best for you.
Here is a list of all the ways that we may use your personal information, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are.
| Is It Coeliac Disease Online Assessment participants |
| Provide support through the assessment process or information you have requested. | Legitimate Interest
-assist people with identifying a possible diagnosis of coeliac disease |
| Use any health, ethnic or dietary information provided for anonymised research purposes. | Your data is retained on the basis of:
Legitimate Interest -under the condition of processing data for health or social care purposes if your data was held prior to the Data Protection Act 2018 or by consent if you prefer, Or Consent – explicit consent required if you provided your data after the Data Protection Act 2018 was implemented
You have the right to withdraw your sensitive data at any time.
Our interest is: -in providing anonymous data to support research into the condition and treatment -to use sensitive data for participation in research |
| To follow up on your diagnosis journey and provide further assistance. Provide marketing information on membership or relevant products and offers. | Legitimate Interest
-assist people with managing a diagnosis of coeliac disease -contact by post or live telephone calls PLUS Consent required for contacting you by email. |
| Catering Training | Provide support for the online and face to face catering training courses we provide including administration for the financial transaction and provision of completion certificate. | Contract |
| Marketing of our commercial services relevant to the catering/food sector and your role. | Legitimate interest
-marketing |
|
| Health Care Professionals | Health care professionals contacted in their professional capacity for the purpose of education and providing materials for their patients on services available from Coeliac UK. | Legitimate Interest
-to advance the standards of healthcare for those with coeliac disease and other conditions. |
| Research Professionals | Researchers and academics contacted in their professional capacity for the purpose of participation in research calls, research events or for recruitment to research related committees within Coeliac UK. | Legitimate Interest
-data provided directly or from a public source – to help research and advance understanding in coeliac disease and the impact of gluten, provide access to funding to support research |
| Business Customers | To fulfil contractual obligations made with any sale of services or goods or sponsorship agreements. | Contract |
| Marketing of other relevant Coeliac UK commercial services. | Legitimate Interest
-to extend availability of GF food by approaching business customers in the relevant sectors to develop and promote their GF offering. |
|
| Other Professional Contacts | Media, politicians and related others | Legitimate Interest
-to enable the dissemination of information about coeliac disease and the gluten free diet to the community and help to influence changes and improvements to benefit our members |
Purpose: Members, Donors, Volunteers and other Supporters |
Lawful Basis |
| Provide you with the member services you have subscribed to, products you have purchased, activities you have volunteered for, events you have signed up to or information you have requested. | Contract and/or Legitimate Interest (depending on the type and status of your transaction with us) – in administering any services, products, activities, events or information you have subscribed to. |
| Administer your financial transactions with us including any fees, donations and processing any related gift aid. | Legitimate Interest
-in processing any related financial transactions |
| Your communication preferences so we can contact you regarding any opportunities to support Coeliac UK, such as fundraising. | Legitimate Interest
-in holding your contact details for processing, and contacting you by post or via live telephone calls PLUS Consent required for contacting you by email |
| To keep a record of our relationship with you and to help us better inform our services to you in the future. | Legitimate Interest
-to analyse data provided by you, directly, through your online behaviour, or publicly available information to help us provide a better service |
| Use your health and ethnic data to support the research community for coeliac disease by providing anonymised group data, or for making you aware of any research projects which may be of specific interest to you. | Legitimate Interest
-under the condition of processing data for health or social care purposes if your data was held prior to the Data Protection Act 2018 or by consent if you prefer Or Consent – explicit consent required if you provided your data after the Data Protection Act 2018 was implemented You have the right to withdraw your sensitive data at any time Our interest is: -in providing anonymous data to support research into the condition and treatment -to use sensitive data to identify any suitable research projects which may be of interest |
| Use your experiences (including any photos you may provide) that you have shared with us as case studies to raise awareness, to be used for either/or external media publications, broadcast (ie TV or radio) and online. Or to be used on Coeliac UK’s website, marketing materials and social media posts. | Legitimate Interest
-as a member and wider community service to showcase the impact coeliac disease and gluten related conditions can have on people and why diagnosis, research, fundraising and support services are critical to create a better future for those affected. With additional consent -to permit access to personal information to be shared across our communication channels and via other media agencies for the purpose of awareness and engagement, and enable contact by media for the purposes of interviews and news stories |
| To send you third party advertising where we believe the products will support living gluten free and/or related health conditions, we will not provide your personal data to third parties for them to market to you directly. | Legitimate Interest
-as a member service as product information and offers are related to adhering to the gluten free diet as treatment Consent -for those not subscribed to membership |
| If you enter a competition via our social media channels or website we will capture what you have entered and may, in specific circumstances, pass your data to a third party but we will inform you of this before you submit your data so you can choose not to participate. | Legitimate Interest
-to allow engagement with wider community outside Coeliac UK |
| In the event you enter your details on one of our online forms but don’t complete the submission, we may contact you. | Legitimate Interest
-to see if we can help with any problems you may be experiencing, such as technical issue with our forms or website, or requiring more information |
| We use profiling and screening techniques to better understand your interests and preferences in order to contact you with the most relevant communications.
Apart from an analysis of geographic, demographic and other information relating to you, we may also use information from third party sources when it’s available. Such information is gathered using publicly available data about you, for example listed Directorships or typical earnings in a given area. Profiling allows us to target our resources effectively, which donors consistently tell us is important to them. |
Legitimate Interest
– Profiling allows us to send you information about any applicable local policy changes e.g. prescribing policies or opportunities to engage locally ensuring you have the chance to have your say.
– Profiling allows us to understand the background of the people who support us and helps us to make appropriate requests to supporters who may be able and willing to give more than they already do. Most importantly, it enables us to raise more funds for the charity, sooner, in a more cost-effective way. |
| If you join on behalf of a child under the age of 16 or an adult dependant, all our communications and services will be directed to you as the parent/carer to share with your child or dependant. We will never contact your child directly until they reach the age 16. We will never contact a dependant directly unless we have your explicit consent to do so. | Legitimate Interest
-to help safeguard young children and adult dependants by not allowing them to directly access services which may contain distressing medical information |
| Surveys – to capture views on our services or the experiences of people affected by coeliac disease and the impacts of gluten so that we can tailor and improve our offerings and ensure we represent the views of our members. Data from surveys will be reported anonymously unless otherwise mentioned and we have your explicit consent. | Legitimate interest
– to ensure the charity remains current, and understands and focuses on the needs of its members. Consent -if data requirement needs to contain personal data, we will ask for consent |
| Under Household membership, we ask the primary joiner to supply personal data of others in the household whom they wish to receive services. | Legitimate Interest
-to provide services as requested, unless under the age of 16, but we will inform additional householders that their data has been provided when we start providing services, so they can choose not to share their data |
| Additional Householders
|
Legitimate Interest -to provide services as requested, unless under the age of 16, but we will inform additional householders that their data has been provided when we start providing services, so they can choose not to share their data |