Privacy and Data Protection

 

The Order of St John (Charity number 235979) is committed to protecting our members’ and supporters’ rights and privacy in line with the Data Protection Act 1998 (DPA). This statement explains the privacy and the data protection practices which apply to all personal data on our website and our use of text messaging.

We hold personal data about individuals such as members, trustees, employees and others, defined as Data Subjects in the Act. In order to comply with the Act, information about individuals must be collected and used fairly, stored safely and securely and not disclosed to any third party unlawfully.

Our aim is to safeguard our users' privacy whilst providing a personalised and valuable service. Collecting personal information is necessary if we are to satisfy the expectations and requirements of our users, e.g. by communicating with them and providing an interactive service. We appreciate that you do not want the personal information you provide to us distributed indiscriminately and here we explain how we collect information, what we do with it and what controls you have.

The Charity processes all the personal data it holds in accordance with the DPA and within the terms of our Notification to the Information Commissioner’s Office.

 

How is the information used?

Any personal data relating to you will be used and recorded by us in accordance with current data protection legislation and this Privacy Policy. We will use the information you provide to:

  • fulfil your requests, for example applications for membership, donations or participation in campaigns and provision of information;
  • process sales transactions, donations, or other payments and verify financial transactions;identify contributors;
  • provide a personalised service to you when you visit our websites e.g. by customising the content and/or layout of our pages for each individual user;
  • record any contact we have with you;prevent or detect fraud or abuses of our websites and enable third parties to carry out technical, logistical or other functions on our behalf;
  • in aggregate (and therefore anonymously) to profile your use of the websites and carry out research on our users' demographics, interests and behaviour to help us gain a better understanding of how our users navigate and use the websites, and to enable us to improve our service to you; and
  • provide you with information which we think may be of interest to you, as explained below.

As well as using personal information to fulfil requests, we also like to keep our supporters informed about St John International's activities, campaigns, appeals and membership or about updates to our sites. From time to time we also share personal information with other like-minded organisations, but we will not share your information if you have indicated that you do not want us to do so (see next paragraph).

If we contact you by email or text message, each time you receive a message you will also have the option to decline to receive further information from us in that manner.

We may use other companies to provide services on our behalf, including packaging, mailing and delivering purchases, answering customer's questions' about products or services, sending postal mail, e-mails and text messages, analysing data and processing credit card payments. We will only provide those companies with the information they need to deliver the service and they are prohibited from using that information for any other purpose. We require all such companies to treat your personal information as fully confidential and to fully comply with all applicable UK Data Protection and consumer legislation.

We may disclose aggregate statistics about our site visitors, customers and sales in order to describe our services to prospective partners, advertisers and other reputable third parties and for other lawful purposes, but these statistics will include no personally identifying information.

We may disclose personal information if we receive a complaint about any content you have posted or transmitted to or from our site, if required to do so by law or if we believe that such action is necessary to protect and defend the rights, property or personal safety of St John International, its sites or its visitors.

Except as indicated above we will not use or transfer this data to any third parties without your prior permission.

 

Links

Our sites contain links to other sites. We cannot be responsible for the privacy policies and practices of other websites even if you access them using links from our websites and recommend that you check the policy of each site you visit.

In addition, if you linked to our websites from a third party website, we cannot be responsible for the privacy policies and practices of the owners or operators of that third party site and recommend that you check the policy of that third party site and contact its owner or operator if you have any concerns or questions.

 

Security

We place great importance on the security of all personally identifiable information associated with our supporters, customers and users. We have security measures in place to attempt to protect against the loss, misuse and alteration of personal data under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to user information.

 

Use of cookies

In simple terms a cookie is a small piece of information sent from our website to your computer to help us to identify you quickly. If you prefer not to accept a cookie, you can navigate around our sites like a normal user. Any information gathered by the use of cookies is compiled on an aggregate, anonymous basis.

Cookies are pieces of information that a website transfers to your hard drive to store and sometimes track information about you. Most web browsers automatically accept cookies, but if you prefer, you should be able to change your browser to prevent that. You should read the information that came with your browser software to see how you can set up your browser to notify you when you receive a cookie, this should then give you the opportunity to decide whether to accept it. However, you may not be able to take full advantage of a website if you do so. Cookies are specific to the server that created them and cannot be accessed by other servers, which means they cannot be used to track your movements around the web.

Cookies can be used for a variety of purposes, such as providing personalised pages, but at present, we use them only to work out how many people visit our sites.

 

Session Cookies

The website stores a session (only) ID needed to aid the website performance which expires at the end of the web browsing session. This Cookie does not track any personal information.

 

Analytics cookies

We use Google Analytics to analyse the use of our website which generates statistical and other information about website use by means of cookies.

The analytics cookies used by our website have the following names: _utma, _utmb, _utmc and _utmz.

Visit Google Privacy Information for more information

 

Third-Party cookies

Embedded content

We sometimes embed video content from YouTube. As a result, when you visit a page containing such content, you may be presented with cookies from these websites. We do not control the dissemination of these cookies and you should visit YouTube Privacy.

Sharing tools

St John International also uses embedded ‘share’ buttons on some of our web pages which enable users to easily share content through different social networks. When you click on one of these buttons, a cookie may be set by the service you have chosen to share content through. Again, we do not control the dissemination of these cookies.

 

Where is the information stored?

Information which you submit via our websites is sent to a computer located in the United Kingdom. This is necessary in order to process the information and to send you the information you have requested. Information submitted by you may be transferred by us to our other offices and to other reputable third party organisations as referred to in this Policy, and these may be situated outside the European Economic Area.

 

Changes

We may make changes to this Policy from time to time. If we change our Privacy Policy we will post the changes on this page. If the change in our Privacy Policy affects the use of your personal information we will use our best endeavours to contact you by email to seek your consent to the use.

 

Your acceptance of this Policy

By using our sites, or by entering a competition, you consent to the collection and use of information by St John International in accordance with our Privacy Policy. If you do not agree to this Policy, please do not use our sites or enter our competitions.

 

Your rights

If you would like to review or revise information you have previously provided to us online, you may do so by emailing info@theorderofstjohn.org.

You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you or if you have any questions relating to this Privacy Policy or how we use the personal information we have about you, please write to:

The Secretary General
St John International

The Order of St John
St John House
3 Charterhouse Mews
London EC1M 6BB
Tel: +44 (0) 207 251 3292

 

As a Data Subject you have the right to access personal data held about you on computer and in structured manual files by the Charity. If you are not the person who is the subject of the held data you do not have any right to access it unless you have written consent from the Data Subject with proof of both your identities i.e. copy of passport details.

The Charity is required to permit individuals to access their own personal data held by the Order of St John by submitting a request in writing to the Charity.

Complaints are addressed to the Secretary General at the above address.

 

Data Protection Notification

The Information Commissioner's Office (ICO) maintains a public register of organisations that use personal data. Each organisation is obliged to notify the ICO with details of the types and purposes of personal data it processes.

The Order of St John is registered under the following reference:
- The Most Venerable Order of The Hospital of St John of Jerusalem - Z468151X

Notification details can be accessed by searching the Data Protection Public Register.

 

Further information          

Any personal information submitted via our websites or by text is treated in accordance with the Data Protection Act 1998. To find out more about your entitlements under this legislation, visit:

 

Approval Date: 4 October 2014

Related: Terms and Conditions