MDA UK and Your Personal Information
MDA UK are registered with the UK Information Commissioner’s Office as a Data Controller, with Registration Number Z7908328. We are committed to treating your personal information in accordance with our responsibilities under applicable laws, which include:
- the EU General Data Protection Regulation (EU) 2016/679 and the UK Data Protection Act 2018
- the Privacy and Electronic Communications (EC Directive) Regulations 2003.
We are committed to protecting your personal information and being transparent about what we do with it, no matter how you interact with us. This Privacy Notice explains how we collect, use and protect your personal information when you use this website and when you interact with us in various other ways, and explains your rights under Data Protection and Privacy law.
The processing of your personal information is carried out by or on behalf of Magen David Adom UK, a company limited by guarantee (Company number 5718138); registered as a charity in England and Wales (1113409).
If you have any queries about our Privacy Notice, please get in touch with us:
Your rights to your personal information
Data Protection legislation gives you the right to request access to the personal information about you which is processed by Magen David Adom UK, to keep it up to date and to have any inaccuracies corrected.
You also have the right to ask us to erase your personal information, ask us to restrict our processing of your personal information or to object to our processing of your personal information.
If you wish to exercise these rights, please send your request to us using the details below, along with copies of two separate identification documents which provide photo identification and confirm your address, such as a passport, driving licence, or utility bill.
Please also provide any additional information that is relevant to the nature of your contact with us, as this will help us to locate your records.
You can send us the documents via post to:
Magen David Adom UK
2 Dollis Park
Alternatively email a copy of the form along with scans or photos of your two forms of identification to: [email protected] and we will get in touch in order to process your request. We will respond within 72 hours of the request in order to acknowledge its receipt, and normally resolve the request within 30 days. Where this is not possible we will explain to you the reasons for any additional time taken.
How to make a complaint or raise a concern
If you would like more information, or have any questions about this policy, to make a formal complaint about our approach to data protection or raise privacy concerns please contact us:
If you would like to make a complaint in relation to how we have handled your personal information, you can raise your concern with the relevant statutory body:
Information Commissioner’s Office
Alternatively, you can visit their website.
How and when we collect information about you
When you directly give us information
We may collect and store information about you when you interact with us. For example, this could be when you:
- support our work through a donation
- fundraise on our behalf
- register for an event
- tell us your story
- purchase MDA merchandise
- submit an enquiry
- register for or use our services
- participate in our training
- give us feedback
- make a complaint
- use one of our apps
- apply for a job
- register as a volunteer
- enter into a contract with us
When you indirectly give us information
When you interact with us via social media platforms such as Facebook, WhatsApp, Twitter or LinkedIn, we may also obtain some personal information about you. The information we receive will depend on the privacy preferences you have set on each platform, the privacy policies of each platform, and the privacy settings you have chosen on your computer, phone or tablet’s operating system preferences.
What information we might collect
When you engage with us by phone, mail, in person or online, we may collect information about you (referred to in this Privacy Notice as ‘personal information’). This may include your name, address, email address, telephone number, date of birth, job title and details of your education and career, and other information relating to you personally which you may choose to provide to us.
Data protection law recognises that certain types of personal information are more sensitive. These are known as ‘special category’ personal information and covers information revealing racial or ethnic origin, religious or philosophical beliefs and political opinions, trade union membership, genetic data, biometric data (when used to uniquely identify you or someone else), information concerning health or data concerning a person’s sex life or sexual orientation.
Special category data is not collected unless you provide it to us, and is never obtained simply by visiting the MDA website. For example, we may need to collect health information from you when you register for a challenge event or to deliver a community service as a volunteer or member of staff. Clear notices will be provided at the time we collect this information, stating what information is needed and what the legal basis for collecting and processing the data is.
How and why we use your information
We are required by data protection law to explain the legal basis for processing your personal information, and this is set out below. In each case, our legal basis is either your consent (in which case you have the right to withdraw your consent at any time), necessity for performance of a contract with you (or taking steps at your request prior to entering into a contract with you), necessity for compliance with a legal obligation, necessity to protect the vital interests of you or someone else or necessity for our legitimate interests (in which case we will also explain what those legitimate interests are).
- Donation processing: We will process personal information you provide in order to administer any one-off or on-going donations you make and claim Gift Aid (our legal basis is your consent).
- Responding to a request: If you contact us with a query, we will use your personal information to provide you with a response (our legal basis is your consent).
- Fundraising or direct marketing: Our marketing database is used to send you fundraising promotions, relevant news and progress updates by email or SMS if you have given us consent. If you withdraw your consent and then subsequently opt in to receive marketing information again, then your most recent preference will supersede. If you have responded to a letter of appeal or other MDA fundraising campaign, you will receive non-promotional communications strictly relating to your donation.
- Email – [email protected]
Phone – 020 8201 5900
Address – Magen David Adom UK, Winston House, 2 Dollis Park, London, N3 1HF
- Processing an application to work with us: We may process your information if you send or fill in an application form or send us your CV or details in respect of an opportunity to work with us in order to evaluate your suitability and respond to you (our legal basis is your consent, given that you have voluntarily supplied us with your information).
- Administration: We may use your personal information to record and deal with a complaint, record a request not to receive further marking or fundraising information, record what our volunteers have done for us, and for other essential internal record keeping purposes (our legal basis is compliance with a legal obligation).
- Prevention of crime: We may record your image on CCTV which we use to prevent crime and keep our people and the public safe. We may process your personal information when we reasonably think that there is a risk of serious harm or abuse to you or someone else (our legal basis is vital interests).
- Market research and surveys: We may invite you to participate in surveys or market research to help us improve our website, fundraising, services and strategic development (our legal basis is consent or our legitimate interest in carrying out research and surveys). Participation is always voluntary and no individuals will be identified as a result of this research, unless you consent to us publishing your feedback in a form that identifies you.
- Analytical: We may occasionally for the purposes of our legitimate interests use your personal information to conduct analyses of our supporters or potential supporters. This will help us target communications in a more focused, efficient and cost-effective way. You can object to such use of your personal information for profiling at any time by contacting us via the details set out within this Privacy Notice.
Our analytical activities can be broken into five categories:
- Data matching
We may combine the personal information you have given us with data obtained from external sources, such as the Office for National Statistics, to infer the likely social, demographic and financial characteristics, so we can tailor our communications and services to better meet your needs or the needs of others like you based on the insight we gain from the profile we build. We will not use the results of this data matching activity in a way that intrudes on your privacy or your previously expressed privacy preferences.
We may conduct analysis of supporters by group, post code or particular area where supporters may be based. This is to ensure that campaigns or mailings are sent to those who will be most interested or likely to respond. This type of activity is not aimed at identifying specific individuals to target, but rather many individuals who may fall within a certain segment of supporters.
- Major donor analysis
We may carry out research to determine whether an individual could be a potential major donor. We may use publicly available information from third party sources such as Google, Companies House, published biographies and publicly available LinkedIn profiles.
The type of information we collect can include:
- career overview
- gift capacity
- areas of interest
- history of giving to us and others
- how the individual is connected with us and others
- public information on any philanthropic activities.
- High value event planning
We may also use personal data to produce short biographies of people who are due to meet with our leadership or attend an event that we may be hosting. This helps our people to understand more about those we engage with, and their interests or connection to us.
- Ethical screening and minimising risk
As a registered charity, we are subject to a number of legal and regulatory obligations and standards. The public naturally expect charities to operate in an ethical manner and this is integral to developing high levels of trust and demonstrating our integrity.
This means that we may carry out appropriate due diligence of donors, check donations and implement robust financial controls to help protect the charity from abuse, fraud and/or money laundering.
We may carry out background checks and due diligence on potential donors or anyone planning on making a significant donation or gift before we can accept it.
We may also ethically screen supporters to minimise risk of creating an association with an individual or group that conflicts with our ethical standards.
Who we share your information with
We will only use your information for the purposes for which it was obtained, or for compatible purposes. We will not, under any circumstances, sell or share your personal information with any third party for their own purposes, and you will not receive electronic marketing communications from any other companies, charities or other organisations as a result of giving your details to us.
We will only share your data for the following purposes:
- Third party suppliers: We may need to share your information with data hosting providers or service providers who help us to deliver our services, projects, or fundraising activities and appeals. These providers will only act under our instruction and are subject to pre-contract scrutiny and contractual obligations containing strict data protection clauses.
- Where legally required: We will comply with requests where disclosure is required by law, for example, we may disclose your personal information to the government for tax investigation purposes or to law enforcement agencies for the prevention and detection of crime. We may also share your information with the emergency services if we reasonably think there is a risk of serious harm or abuse to you or someone else.
How we protect your information
We use technical and organisational safeguards to ensure that your personal information is secure. We limit access to information on a need-to-know basis and take appropriate measures to ensure that our people are aware that such information is only used in accordance with this Privacy Notice.
If you use your credit or debit card to donate to us, buy something or make a booking online, we pass your card details securely to our payment processing partners. We do this in accordance with industry standards and do not store the details on our website.
However, please be aware that there are always inherent risks in sending information by public networks or using public computers and we cannot 100% guarantee the security of data (including personal information) disclosed or transmitted over public networks.
How long we retain your information
We will keep your personal information in respect of financial transactions for as long as the law requires us to for tax or accounting purposes.
In respect of other personal information, we will retain it for no longer than necessary for the purposes for which it was collected or for which it is otherwise processed, taking into account our legal and regulatory obligations, the purposes for which we are using the information, the amount and sensitivity of the information, and the potential risk from any unauthorized use or disclosure of the information.
International transfers of information
We may on occasion decide to use the services of a supplier outside the United Kingdom which means that your personal information must be transferred, processed and stored outside the UK. You should be aware that, in general, legal protection for personal information in countries outside the UK may not be equivalent to the level of protection provided within the UK.
However, we take steps to put in place suitable safeguards to protect your personal information when processed by a supplier such as entering into the approved Standard Contractual Clauses (SCCs), and ensuring that the adequacy of a third party for data protection purposes is validated before your data is shared. You can obtain a copy of these clauses by contacting us using the details below.
Changes to our Privacy Notice
Our Privacy Notice may change from time to time, so please check this page occasionally to see if we have included any updates or changes.
(Last updated: December 2021)