Privacy Notice

Three Wishes (“Three Wishes,” “we,” “us,” or “our”) is committed to safeguarding your personal information and ensuring we meet our responsibilities under data protection law. As personal information can identify you, we want you to be confident that we are using it responsibly.

This Privacy Notice outlines the processes we follow when collecting, storing, and handling personal information, including when you use our website, platforms, or engage with our services. It also explains how we use your personal information, how we keep it secure, and how you can manage your preferences.

This Privacy Notice covers our processing activities on our website (www.3wishes.org) and any other digital or physical interactions with Three Wishes.

1. Who We Are

Three Wishes is a charitable incorporated organisation registered with the Charity Commission (with registration number 1209530). We work to improve the lives of those in need, providing support and resources to enhance the well-being of individuals and communities.

If you have any questions regarding your personal information or its use, do not hesitate to contact us.

2. What Personal Information We May Hold About You

Personal information is any information that relates to an individual. It does not include information where the identity of the individual has been fully and effectively removed (anonymous data). If you engage with us, we may collect the following personal information:

Identification Information: Such as your name.
Contact Information: Such as your email address, postal address, and phone number.
Financial Information: Such as your bank account details if you make a donation.
Communications: Records of your correspondence with us, including feedback or enquiries.
Website and Platform Information: Such as IP address, operating system, and browser type, which we collect for system administration and to improve your experience on our website.

3.1 Sensitive Personal Information

Under data protection legislation, certain personal information is considered more ‘sensitive’ (e.g., information relating to race, religion, political affiliation, and health). We do not anticipate collecting this information from you.

3.2 Where We Obtain Your Personal Information

We collect and retain personal information about you in various ways, such as:

When you use our website or platforms.
When you subscribe to our mailing lists.
When you engage with us via social media platforms.
When you contact us via email, phone, in person, or by post.
When you agree to share your data with us through a third party.

4. How We Use Your Personal Information

We may use your personal information to:

Process donations and Gift Aid.
Keep you updated with our work, events, and fundraising appeals (unless you opt-out).
Tailor and personalise our communications for your benefit.
Improve the performance of our website and enhance the user experience.
Deliver relevant online advertising.

5. Our Lawful Bases

We will only use personal information when the law allows us to (i.e., where we have a ‘lawful basis’). Commonly, we will use your personal information in the following circumstances:

Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. For example, we have a legitimate interest in providing our services and carrying out our charitable activities.
Where it is necessary to perform a contract with you, for example, to allow you to donate or participate in our events.
Where it is necessary to comply with a legal obligation (for example, reporting to HM Revenue and Customs).

In some cases, we may ask for your consent to use your personal information for a specific purpose. For instance, we may obtain your consent before sending you email marketing, newsletters, or other communications about topics we think might interest you.

You may withdraw your consent or unsubscribe from our communications at any time by following the instructions in any email we send or by contacting us via the email address provided below.

We do not engage in any automated decision-making using personal information that produces legal effects or otherwise significantly affects individuals.

6. Retaining Your Personal Information

We will not keep personal information for longer than necessary. The retention period will vary depending on the purpose for which we collected the information. Criteria we use to determine the retention period include:

Statutory retention periods.
Our contractual and/or business relationships with you.
Potential disputes.
Any guidelines issued by relevant regulators.

Once the relevant retention period has expired, we routinely delete the data unless it is still necessary for the fulfilment of a contract, the initiation of a contract, or to protect or defend our position or that of a third party.

7. How We Share Your Personal Information

We may share your personal information with third parties, including:

Other organisations and partners we work with as part of our charitable activities.
Contractors, suppliers, or third parties that provide services on our behalf (e.g., website hosting and payment processors).
As part of a sale, merger, acquisition, or other transfer of all or part of our assets, including during bankruptcy proceedings.
Pursuant to a subpoena, court order, or other legal process, or as otherwise required or requested by law or government authority, or to protect our rights or the rights or safety of third parties.
Our professional advisers, including lawyers, accountants, and auditors.
With your consent or as otherwise disclosed at the time of data collection or sharing.

8. International Data Transfers

We may transfer your personal information outside the UK if, for example, we use a service provider based in another jurisdiction. When transferring personal information out of the UK, we take steps to ensure it is protected in accordance with appropriate safeguards, particularly where the recipient country is not considered adequate under UK law. We may rely on safeguards such as the UK International Data Transfer Agreement.

9. How We Keep Your Personal Information Safe

To protect your privacy, we ensure that your personal information is kept securely and is only accessible to relevant personnel or representatives who need it to perform their roles. While we strive to use appropriate organisational, technical, and administrative measures to protect personal information, no data transmission or storage system can be guaranteed 100% secure. If you believe your interaction with us is no longer secure, please notify us immediately using the contact details below.

10. Your Rights

Under certain privacy laws, you have rights regarding your personal information, including:

The right to request access to the personal information we hold about you.
The right to request that we rectify or erase your personal information.
The right to request that we restrict the processing of your personal information.
The right to object to our processing of your personal information in certain circumstances.
The right, under certain circumstances, to ask us to port personal information about you that you have provided to us, to you or to a third party.
The right to withdraw consent to processing your personal information where we previously obtained your consent.

To exercise these rights, please contact us via the contact information below. Please note that we may be unable to fulfil certain rights if we are legally prevented from doing so or can rely on exemptions. Additionally, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk/make-a-complaint.

11. Other Websites

Our website and communications may contain links to other websites. Please note that when you click on these links, you are entering another website for which Three Wishes has no responsibility. We encourage you to read the privacy notices on these websites.

12. Cookies

Our website and platforms use cookies to enhance your experience. Cookies are small pieces of information that some websites transfer to your computer or device for record-keeping purposes. Using cookies makes web browsing easier by saving your preferences and making sure you don’t see the same ads repeatedly. For more information about our use of cookies, please visit our Cookies Notice.

13. Updates

This Privacy Notice may change from time to time, for example, to reflect changes at Three Wishes or changes in regulation or legislation. It was last updated on 30th August 2024. Updates will be posted on this page, and we will use reasonable efforts to inform you of any significant changes by email where appropriate.

14. Contact Us

If you have any questions or concerns about this Privacy Notice or how we handle your personal information, please get in touch with us.

Data Protection Officer: Aladdin Aljian.