PRIVACY POLICY
Who we are
Our website address is www.allyoursbox.co.uk
Keeping your personal information safe is very important to us. We are committed to complying with privacy and data protection laws and being transparent about how we use personal data.
We have policies and procedures in place to help our team understand their data protection responsibilities and follow the principles of data protection.
We have a nominated member of staff who serves as our Data Protection Lead. If you have any questions regarding our Privacy Policy, please email allyours@allyoursbox.co.uk
This privacy policy relates to personal information that All Yours Period Box C.I.C collects and uses.
​
How we collect personal information
We may collect your personal information from you directly from you when you:
-
communicate with us for any reason, by post, telephone, text, email, or via our website
-
make a donation to All Yours via JustGiving.com
-
make a donation via our Amazon WishList
-
work or make an application to work or volunteer with us
-
agree to help us promote our work
-
interact with us as a supplier, contractor, consultant, or in any other capacity.
We may also collect personal information about you from other organisations. For example, another organisation may refer you to us for help and they will send us your contact details.
The personal information that we collect
We only collect personal information that we genuinely need.
This may include:
-
Contact details such as name, address, email address, and phone numbers.
-
Which type of period product you require.
-
The number of people in the household who require period products.
-
The name of your organisation and the services that you provide.
Our legal basis for processing personal information
Our legal basis for processing personal information is usually for our legitimate interests, if we have your consent, for the performance of a contract or to meet our legal obligations.
We may collect and use your personal data if it is necessary for our legitimate interest and so long as its use is fair, balanced, and does not unduly impact your rights.
We will ask for your consent to send you marketing emails and text messages. You can withdraw consent for this at any time.
Usually, we will only process sensitive personal data if we have your explicit consent. In extreme situations, we may share your personal details if we believe someone’s life is at risk.
We may process personal information because it is necessary for the performance of a contract to which you are a party (or to take steps at your request prior to entering a contract), or because we are legally obliged to do so (for example to meet employment or charity laws).
​
Why we collect personal information
We collect and use personal information about people who request a box from All Yours Period Box C.I.C, people who support All Yours Period Box C.I.C, and volunteers for several reasons.
​
1.Assisting people that use All Yours Period Box C.I.C
We collect personal information from you directly if you use our website to request a period box, or if an organisation or individual refers you to us. Our legal basis for using this information is our legitimate interest, and where appropriate your consent. We use this information to respond to your need for help and ensure that we are providing help when and where it is most needed.
​
2.Developing relationships with supporters
All Yours Period Box C.I.C’s work is made possible by the generosity of our supporters. We may contact you to reply to a query or update you on a campaign or project you contacted us about.
3.Processing donations
If you kindly make a financial donation to us, or donate goods through our Amazon Wishlist, we will use your personal information to collect your donation and maintain a record of our supporters. Our legal basis for using your personal information for this purpose is to fulfil our legal obligations, and our legitimate interest in meeting our fundraising objectives.
​
4.Dealing with complaints and appeals
If a complaint is raised with us, we will process the personal information that is provided to us to manage and resolve the complaint or appeal. This may include sharing relevant information with other volunteers or person that the complaint has been made about. Our legal basis for using personal information for this purpose is legitimate interest. Where a complaint is about a third party, we will seek your consent before sharing your information.
​
5.Promoting our work
We will use personal information that you share with us only if you agree to help us promote our work. This might include photographs and videos. For example, we may use your information in case studies and stories that we publish or share with the media. We will only use your information for this purpose if you have given your consent for us to do so.
​
6.Volunteer Management
Where you apply to be a volunteer with All Yours Period Box C.I.C, your personal information will be held in our central email address or Facebook messaging service. Our lawful basis for using your personal information in this way is our legitimate interest, and where appropriate your consent.
Where you express an interest in volunteering with All Yours Period Box C.I.C, your data may be passed onto the volunteer for the area you wish to join. This information will be sent to them via their personal email address. Your personal information will then also be held by that volunteer in line with legislation and our data protection policy.
​
7.Processing expenses
If you are a Volunteer for All Yours Period Box C.I.C we will use your personal information including your bank account details to process expense claims. Our legal basis for using your information for this is for the performance of a contract.
​
8.Governance
We process relevant personal information about existing and potential volunteers for governance purposes. This might include checks to identify any criminal and other activity we need to be aware of to ensure that we select appropriate volunteers. Our legal basis for this processing is to meet our legal obligations with Companies House.
​
Sharing personal information
We will only share your personal information where we need to, where someone’s life is at risk, or we are required to do so by law.
We may share your personal information with third party organisations who will process it on our behalf (for example a Royal Mail, Amazon, or our website administrator.)
We may also share your information with our bank to process a payment; our professional advisers (such as our legal advisers) where it is necessary to obtain their advice; and our IT service providers and data storage providers.
Where required, we will process personal information to comply with our legal obligations. In this respect we may share your personal data to comply with subject access requests; tax legislation; for the prevention and detection of crime; and to assist the police and other competent authorities with investigations including criminal and safeguarding investigations.
​
Transferring personal data outside of the United Kingdom
We don’t actively transfer data we collect about you outside of the United Kingdom. We may use service providers (for example web hosting) which are based outside of the UK. In this case, we ensure that the service providers comply with similar standards of data protection law to that applicable in the UK.
​
Cookies and aggregate information collected from our website
We use cookies to store information about how you use our sites. A cookie is a piece of data stored on the user’s computer tied to information about the user. This enables us to create a profile which details your viewing preferences. We use your profile to tailor your visit to our website, make navigation easier, and direct you to information that best corresponds to your interests and country.
Our website is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to offer our services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall. We only collect the cookies necessary to run and maintain our website.​
For more information about Cookies, Wix.com recommend visiting the All About Cookies website.
​
Your rights
If you no longer wish to receive communications about products and services from us, please contact admin@allyourbox.co.uk
You can also unsubscribe at any time to emails that we may send to you about the products and services that we think will be of interest to you. A method to unsubscribe from all direct marketing will be included in any communications.
You also have the right to:
-
Ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
-
Tell us to change or correct your personal information if it is incomplete or inaccurate.
-
Ask us to restrict our processing of your personal data or to delete your personal data if there is no compelling reason for us to continue using or holding this information.
-
Receive from us the personal information we hold about you which you have provided to us, in a reasonable format specified by you, so that you can send it to another organisation.
-
Object, on grounds relating to your specific situation, to any of our processing activities where you feel this has a disproportionate impact on you.
For all requests, please contact us at allyours@allyoursbox.co.uk
We will respond to any request within 28 days.
Please note that we may be entitled to refuse requests where exceptions apply; for example, if we have reason to believe that the personal data, we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this Privacy Policy.
​
How long we keep your personal information
We will hold your personal information only for as long as is necessary. We will not retain your personal information if it is no longer required. In some circumstances, we may legally be required to retain your personal information, for example for finance, employment, or audit purposes.
A summary of our retention policy is shown below:
People who request an All Yours Box
Your request is stored in a web based; password protected email account. We may contact you to establish how many people are in your household or to answer queries you raise. We may also contact you at a later to see if you require further products. We may forward your name and address to one of our volunteers to enable them to deliver your box more quickly. In this instance they will be told which period products you requested on your form. We do not sell your data and we do not pass it on to a third party without your consent. We may use your name and address to purchase postage online for your box on the Royal Mail website.
People who donate via Just Giving
We record the name provided and the amount donated on a spreadsheet.
People sending items via Amazon Wishlist
We only receive the information you put in the message field. This may be photographed and added to the All Yours Facebook page in the form of a thank you. If you do not wish to be thanked, please do not include your name or any identifiable message.
People who donate cash
We record your name and the amount donated on a spreadsheet.
Volunteers
We hold the information you provide us with in the web based, password secured email account or the All Yours Facebook messaging service. All emails exchanged are saved in the email account under your name.
​
Other organisations and referrals
We hold the information provided to us with in the web based, password secured email account or the All Yours Facebook messaging service. All emails exchanged are saved in the email account under your name or organisation name.
Changes to this policy
This Privacy Policy may change from time to time. Where practical we will provide you with an updated Privacy Policy from time to time. However, we also recommend that you please visit this webpage periodically to keep up to date with the changes in our Privacy Policy.
​
This policy was last updated on 30 September 2023
Next review due in September 2024
Making a complaint to the Information Commissioner’s Office
If you are not satisfied with our response to any query you raise with us, or you believe we are processing your personal data in a way which is inconsistent with the law, you can complain to the Information Commissioner’s Office
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113 (local rate)