Which principles do we value?
Data Protection is about your fundamental right to privacy and your right to access and correct data about yourself. This policy aims to help ensure that we comply with GDPR in collecting, processing, retaining, using an disclosing your information.
This policy reflects the key principles of Data Protection and GDPR, which include those relating to:
- Obtaining and processing information fairly, lawfully and transparently
- Keeping information for specified and lawful purposes only
- Using and disclosing data only in ways which are compatible with these purposes
- Collecting relevant, adequate data only
- Keeping data secure, accurate and up-to-date
- Retaining data for no longer than necessary for the purposes acquired
- Giving a copy of personal data to the relevant individual on request.
What information do we collect?
We collect information from you when you visit and use our website, make a general donation, place an order (such as in buying raffle or event tickets), complete a form, or register for an event.
When undertaking these activities, as and when appropriate, you may be asked to provide personal details, including your name, email and postal addresses, and phone numbers. You will always be made aware of when a certain function of the website is not possible without giving the necessary information.
Payment information is required for making donations or completing an order. Credit card donations made through our website are managed using a secure payment system called Realex Payments. Realex Payments, a division of Global Payments Inc., is one of Europe’s leading providers of ecommerce payment solutions. All credit card data provided is processed securely by Realex Payments. Our team receives your contact details and the amount of your donation only, so that we can acknowledge this and correctly allocate it to the area of our work which you wish to support.
Related to this, our website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
How do we use collected information?
Collecting your information enables us to carry out our work in support of the people of Haiti.
Primarily, the information collected from your use of the website is used to process your donations, complete your orders, and confirm your transactions with us. Your information will be used to fulfil your donation or order, and to follow up with you by phone, post or email with confirmation and receipts. If any issues arise in the process of completing your donation, we may also contact you to resolve this. We may also contact you with information about the charitable tax-giving scheme from Revenue which allows us to claim tax back on your donation at no extra cost to you.
We may use your information to share details about the different aspects of our work in Haiti and our future plans. These details can be shared, for example, through e-newsletters, appeals or campaigns, event announcements, and updates on the difference your donation is making. You can unsubscribe from these updates at any time: please email firstname.lastname@example.org to be removed from these updates.
Your information can also be used to enable our team to respond to the queries you submit through our Contact Form. Equally, if you completed a form on our website to express in an interest in volunteering or other projects, we may contact you using the details you have supplied to complete your registration and make any appropriate arrangements.
Additionally, we may collect and retain your information if you use our complaint mechanism or give us feedback on any of our projects. This allows us to respond to and deal with your feedback or complaint in the appropriate manner.
The anonymous information we receive from you through the use of our website is also used to enable our team to identify and implement improvements to the website.
Please note that we may contact you by phone, post or email for the purposes above.
Do we disclose any information to outside parties?
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties. The information you provide when interacting with our website will be kept securely and used only by the Haven team. Your information will not be shared with any other organisation, other than with your permission or where required by law.
We reserve the right to enforce our website policies in order to protect our rights and the rights of other individuals in a safe and legal manner.
Non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses. For example, we may disclose the total number of visits to our website to a partner organisation for these purposes.
How do we protect your information?
Our website is developed with the intention of keeping your information secure and protected. We use a secure server to store your information, and payment transactions are encrypted using Secure Socket Layer (SSL) technology. When you make a transaction through our website, our team cannot see your full credit card details: Realex Payments only shows us the card’s last four digits, expiry date and type.
We take all reasonable steps to guarantee the safety of the information you provide to us. However, due to the nature of the internet itself, we cannot guarantee the security of the data you share through our website.
How can you find out what information is held?
You have the right to be informed about any personal data relating to you, which you may have supplied to us through this website or in other interactions. As part of this, you are entitled to receive a copy of this information.
To avail of this right, please submit your request to Jessica Mullins at Haven, The Malthouse, South Block, Grand Canal Quay, Dublin 2, Ireland, including a copy of your passport and proof of address in order to verify your identity. We will respond to your request within one month from the date on which your request was received.
How can your information be deleted?
If you would rather not hear from us in the ways previously outlined, please use our Contact Form or email email@example.com to let us know which channels you would like to be removed from (i.e. emails, mobile or landline calls, post).