Last Revised: July 2018
If you are based in the UK or European Union, please see the “Additional information for Website Users in the UK and European Union (EU)” section below.
II. Collection of Information
Information You Provide Us: We collect information you provide directly to us. For example, we collect information when you sign up to receive emails, make a donation, become a fundraiser, participate in any interactive features of the Site (including creating an account and submitting a request through our contact forms) or otherwise communicate with us. The types of information we may collect include your name, email address, postal address, phone number, fax number, credit card information and any other information you choose to provide.
Information We Collect Automatically When You Use the Site: When you access or use our Site, we automatically collect information about you using Google Analytics, including:
- Log Information: We log information about your use of the Site, including the type of browser you use, access times, pages viewed, your IP address and the page you visited before navigating to our Site.
- Device Information: We collect information about the computer or mobile device you use to access our Site, including the hardware model, operating system and version, unique device identifiers and mobile network information.
- Information Collected by Cookies and Other Tracking Technologies: We use various technologies to collect information, and this may include sending cookies to your computer or mobile device. Cookies are small data files stored on your hard drive or in device memory that help us to improve our Site and your experience, see which areas and features of our Site are popular and count visits. We may also collect information using web beacons (also known as “tracking pixels”). Web beacons are electronic images that may be used in our Site or emails and help deliver cookies, count visits, understand usage and campaign effectiveness and determine whether an email has been opened and acted upon. For more information about cookies, and how to disable them, please see “Your Choices” below.
Information We Collect From Other Sources: We may also obtain information from other sources and combine that with information we collect through our Site. For example, if you interact with the Site through a social media site, we may have access to certain information from that site, such as your name, account information and friends lists, in accordance with the authorisation procedures determined by such social media site.
III. Use of Information
We may use information about you for various purposes, including to:
- Provide, maintain and improve our Site;
- Send you technical notices, updates, security alerts and support and administrative messages;
- Respond to your comments, questions and requests;
- Process and administer donations that you make to us;
- Communicate with you about services, offers, promotions, campaigns, and events offered by Malala Fund and others, and provide news and information we think will be of interest to you;
- Monitor and analyse trends, usage and activities in connection with our Site;
- Administer your online account with us;
- Personalise and improve the Site and provide advertisements, content or features that match user profiles or interests;
- To comply with applicable laws and regulations;
- Link or combine with information we get from others to help understand your needs and provide you with better service; and
- Carry out any other purpose for which the information was collected.
Malala Fund is based in the U.S. and the U.K. . By accessing or using the Site or otherwise providing information to us, you are aware that your personal data will be processed in the U.S, the U.K. and in limited circumstances, in other countries in which the Malala Fund operates.
IV. Sharing of Information:
- With partners, vendors, consultants and other service providers who need access to such information to carry out work on our behalf, for example, to help run our Site and IT systems, to send undertake online marketing and to send e-mails on our behalf, and to facilitate online payments (e.g. PayPal and Give Lively);
- In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation or legal process, or as otherwise required by any applicable law, rule or regulation;
- If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect the rights, property and safety of Malala Fund or others;
- In connection with, or during negotiations of, any merger, sale of organisational assets, financing or acquisition of all or a portion of our organisation to another entity; and
- With your consent or at your direction, including if we notify you through our Site that the information you provide will be shared in a particular manner and you provide such information.
- We may also share aggregated or de-identified information, which cannot reasonably be used to identify you.
Social Sharing Features: The Site may offer social sharing features and other integrated tools (such as the Facebook “Like” button), which let you share actions you take on our Site with other media, and vice versa. The use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the entities that provide these features.
We also participate in Facebook’s ‘Custom Audience’ program which enables us to display ads to our existing supporters when they visit Facebook. We provide your email address, mobile number and address to Facebook so they can determine whether you are a registered account holder with them. Our adverts may then appear when you access Facebook. Your data is sent in an encrypted format that is deleted by Facebook if it does not match with a Facebook account.
For more information please see Facebook's information about Custom Audiences and Facebook’s Data Policy - https://en-gb.facebook.com/policy.php
For more information about Internet-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit: www.networkadvertising.org/managing/opt_out.asp and www.aboutads.info/choices
Malala Fund takes reasonable measures to help protect information about you from loss, theft, misuse and unauthorised access, disclosure, alteration and destruction.
Please be aware that despite our best efforts, no data security measures can 100% guarantee security. We encourage you to review the privacy statements of websites you choose to link to from the Site so that you can understand how those sites collect, use and share your information. Malala Fund is not responsible for the privacy statements or other content on sites outside of the Site.
VI. Your Choices
Your Information: You may ask us to update, correct or delete information about you at any time by emailing us with your request at firstname.lastname@example.org, but note that we may retain certain information as required by law or for legitimate purposes related to our organisation.
We may also retain cached or archived copies of information about you for a certain period of time.
Cookies: Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Removing or rejecting browser cookies does not necessarily affect third party flash cookies used in connection with our Site. To delete or disable flash cookies please visit: www.adobe.com/products/flashplayer/security. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Site.
Promotional Communications: You may opt out of receiving promotional emails or messages from Malala Fund at any time by following the instructions in those emails or messages, or by contacting us using the details below. If you opt out, we may still send you non-promotional communications, such as those that are necessary in connection with our ongoing service relationship (if applicable).
VII. Donor Bill of Rights
Malala Fund strongly believes in the rights of donors and subscribes to the Donor Bill of Rights. This statement of rights was developed by the Association of Fundraising Professionals (AFP), the Association for Healthcare Philanthropy (AHP), the Council for Advancement and Support of Education (CASE), and the Giving Institute: Leading Consultants to Non-Profits.
“Philanthropy is based on voluntary action for the common good. It is a tradition of giving and sharing that is primary to the quality of life. To assure that philanthropy merits the respect and trust of the general public, and that donors and prospective donors can have full confidence in the nonprofit organisations and causes they are asked to support, we declare that all donors have these rights:
- To be informed of the organisation's mission, of the way the organisation intends to use donated resources, and of its capacity to use donations effectively for their intended purposes;
- To be informed of the identity of those serving on the organisation's governing board, and to expect the board to exercise prudent judgment in its stewardship responsibilities;
- To have access to the organisation's most recent financial statements;
- To be assured their gifts will be used for the purposes for which they were given;
- To receive appropriate acknowledgement and recognition;
- To be assured that information about their donation is handled with respect and with confidentiality to the extent provided by law;
- To expect that all relationships with individuals representing organisations of interest to the donor will be professional in nature;
- To be informed whether those seeking donations are volunteers, employees of the organisation or hired solicitors;
- To have the opportunity for their names to be deleted from mailing lists that an organisation may intend to share*; and
- To feel free to ask questions when making a donation and to receive prompt, truthful and forthright answers.”
VIII. Additional Information for Website Users in the UK and European Union (EU)
Our Legal basis for Using Data: Data controllers need a lawful basis to collect and use your personal data under EU data protection law. The law allows for six ways to process personal data (and additional ways for sensitive personal data). Three of these are relevant to the types of processing that the Malala Fund carries out. This includes information that is processed on the basis of:
- A person’s consent (for example to send you direct marketing by email);
- Processing that is necessary for compliance with a legal obligation (for example to process a donation); and
- Malala Fund’s legitimate interests (please see below for more information).
Personal data may be legally collected and used if it is necessary for a legitimate interest of the organisation using the data, as long as that interest is not overridden by the privacy rights of the individual whose data is being used. Malala Fund’s legitimate interests include:
- Charity governance, including delivery of our charitable purposes, statutory and financial reporting and other regulatory compliance purposes;
- Administration and operational management, including responding to solicited enquires, providing information, research, events management, the administration of volunteers and employment and recruitment requirements.
- Fundraising and campaigning, including administering campaigns and donations, and sending direct marketing by post, sending thank you letters and maintaining communication suppressions.
If you would like to change our use of your personal data in this manner, please get in touch with us using the details in the “Contact Us” section below.
How Long We Retain Data: We will keep your personal data for no longer than is necessary for the purposes for which it is processed, in accordance with our internal policies. The length of time that data will be kept may depend on the reasons for which we are processing the data and on the law or regulations that the information falls under such as financial regulations, statutory limitation periods or any contractual obligation we might have. Subject to the above, we will typically store data relating to donors and supporters for 7 years after their last donation or interaction with us unless there is a justifiable reason to keep it for longer. Once the retention period has expired, the information will be confidentially disposed, permanently deleted, or in some cases archived.
If you request to receive no further contact from us, we will keep some basic information about you on our suppression list in order to avoid sending you unwanted materials in the future.
Transfers Outside of the European Economic Area (“EEA”): As Malala Fund is based in the U.S. Any data that you provide to us via the Site or otherwise will be transferred to and held in the U.S. Data transfers that are made from Malala Fund UK to Malala Fund in the U.S. will be conducted securely and in accordance with EU-approved model contract clauses.
Your Rights: You have a number of rights under EU data protection legislation. These include:
- Right of Access: You have the right know what information we hold about you and to ask, in writing, to see your records. We will supply any information you ask for that we hold about you as soon as possible, but this may take up to 30 days. We will not charge you for this. You will be asked for proof of identity as the person dealing with your request may not be the staff member you have met before. We need to be sure we are only releasing your personal data to you. This is called a data subject access and can be done by writing to us using the “Contact Us” details.
- Right to be Informed: You have the right to be informed how your personal data will be used. This policy as well as any additional information or notice that is provided to you either at the time you provided your details, or otherwise, is intended to provide you with this information.
- Right to Withdraw Consent: Where we process your data on the basis of your consent (for example, to send you marketing emails) you can withdraw that consent at any time. To do this, or to discuss this right further with us, please contact us using the details in the “Contact Us” section below.
- Right to Object: You also have a right to object to us processing data where we are relying on it being within our legitimate interests to do so (for example, to send you direct marketing by post). To do this, or to discuss this right further with us, please contact us using the details in the “Contact Us” section below.
- Right to Restrict Processing: In certain situations you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
- Right of Erasure: In some cases, you have the right to be forgotten (i.e. to have your personal data deleted from our database). Where you have requested that we do not send you marketing materials we will need to keep some limited information in order to ensure that you are not contacted in the future.
- Right of Rectification: If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated. To update your records please get in touch with us using the details in the “Contact Us” section below.
- Right to Data Portability: Where we are processing your personal data because you have given us your consent to do so, you have the right to request that the data is transferred from one service provider to another.
- Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing of your personal information which produces legal or similarly significant effects on you, unless such a decision (a) is necessary to enter into/perform a contract between you and us/another organisation, (b) is authorised by EU or Member State law to which the Malala Fund is subject (as long as that law offers you sufficient protection); or (c) is based on your explicit consent.
If you would like to exercise any of these rights please get in touch with us using the details in the “Contact Us” section below. If you are unhappy with the way in which we have handled your personal data please contact us using the details below. You are also entitled to make a complaint to the data protection regulator within your EU member state, for example, the Information Commissioner’s Office in the UK.
IX. Contact Us