Data Usage & Cookies
Data Usage Policy
- Your Choices
- Who has access to your information?
- Transferring Data Outside the EU
- Legal Bases for Using and Collecting Information
- Data Usage Policy Changes
Data Usage Policy
Our website uses an encrypted connection using an HTTPS security certificate. Most browsers enable you to verify this by looking for a (usually green) padlock near the website address. This means that any information between the website and your browser is sent securely and can't be intercepted or snooped on in transit.
When you visit our website we use Google Analytics to collect information on your journey through the website. This information is anonymous and we do not use it to identify you. Google provides a Google Analytics opt-out add on for all popular browsers.
When you create a user profile on our website we will collect your name and email address. We store this information securely on the back-end of our website.
As a searchable database on business and human rights, we sometimes publish and link information which includes personal details (like names and dates of birth). We only do this where the information is already in the public domain and we link to it (for example where we summarise a newspaper article). If your name or other personal details appear on our website and you would like them removed, please contact us to discuss this. We will review these requests on a case by case basis and make a decision to remove this information based on the type of information and whether it is necessary to include in our database.
If you sign up to our Weekly Updates or other email communications, we will collect your name, email address, sector and region. This information is stored in MailChimp and managed by us. We do not use any data to profile users for the purposes of targeted advertising or newsfeeds. When you sign up to our emails and optionally disclose your region/country and sector, we use this data to report internally and to our donors on our readership.
- If you would like to receive Weekly Update emails from us, please sign up here.
- If you would like to unsubscribe from our Weekly Update emails do so here.
- If you would like to unsubscribe from all Business & Human Rights Resource Centre communications, please contact us using the details below.
- If you would like to review or update your subscription settings for any of our emails, please click the 'update subscription preferences' link which is at the bottom of every email we send.
When you register for an event run by Business & Human Rights Resource Centre, we collect your name, email address and organisation. This information is stored in Eventbrite to allow us to keep track of attendance levels and carry out day-of-event tasks including registration, name badges and content customisation. Eventbrite will use this information to send transactional emails regarding the event you have registered for (e.g. your ticket and attendance reminders).
A record of your registration will be synchronised with Mailchimp to allow us to keep you up to date in the run up to the event, and share news of future events if you consent to our doing so. We will never use this information for marketing purposes unless you explicitly give consent.
When you donate to our organisation, your information is stored securely in our customer relationship management system, CiviCRM. This includes name, email, telephone number, address, and amount donated.
When you donate through our website this information is also stored securely on the back-end of our website, whilst your credit/debit card details are processed and stored securely by WorldPay.
If you are based in the United States, you can also choose to create a will with our partner FreeWill, and bequeath us a donation as part of our Planned Giving program.
We may also use your personal information for administrative reasons, including:
- for reasons related to administering any donations you have made, your tax status with regard to Gift Aid if claimed, or online content you have signed up for;
- to confirm receipt of donations (unless you have asked us not to do this), say thank you and provide details of how your donation might be used;
- in relation to correspondence you have entered into with us whether by email, letter or any other means, and to contact you about any content you provide;
- for internal record keeping to keep a record of your relationship with us;
- to implement any instructions you give us to with regard to withdrawing consent to send marketing information or informing us that you do not wish to receive any marketing information.
If you apply for a job at our organisation we will store your CV/application form in a central secure repository for up to 6 months, after which point it will be deleted. We do not collect any data from your CV or application form other than for the purpose of that particular recruitment.
For some recruitments, we ask you to apply through our Freshteam jobs portal. In this case, your information with be processed and stored securely by Freshworks. As with other applications, we will remove your information after 6 months.
From time to time Business & Human Rights Resource Centre may invite users of its services and other stakeholders to participate in questionnaires, for the purposes of providing feedback on the effectiveness of the services, information regarding consumption and interests, or other purposes as defined at the point of survey. When completing questionnaires, you may be asked to optionally provide your email address should we wish to follow up on any of your answers. This is never mandatory, and we will always welcome your feedback anonymously should you wish to provide it as such.
If you do opt to provide an email address, we may be in touch with you with regards to the responses you provided. Your email address will only be retained as long as is necessary to complete the survey activity, and at any rate for no longer than 6 months. We utilise Microsoft Office 365 and Google Forms to build our questionnaires, and the data you provide will be held securely by these services.
It is your choice as to whether you receive communications from Business & Human Rights Resource Centre.
If you wish to opt-out and stop receiving Weekly Updates you can do so by unsubscribing here.
Please contact us directly to request to view, edit or remove your personal data:
- Email [email protected]
- Phone 020 7636 7774
- Write to Business & Human Rights Resource Centre, 2-8 Scrutton Street, London, EC2A 4RT.
Business & Human Rights Resource Centre takes the following precautions to keep your data secure:
- When you make a donation, your data is stored securely on our CiviCRM system, which is hosted and maintained by Circle Interactive. Access is limited to a small number of employees.
- When you sign up to our newsletter your data is held in Mailchimp. Access to our Mailchimp account is password protected and limited to a small number of employees.
- When you send us your CV a copy is held in Office 365 Exchange Email Server. This is password protected and encrypted. Access is limited to only necessary employees.
- When you register for an event your data is held in Eventbrite. Access is limited to the a small number of employees for the purposes of putting on the event.
- When you register as a user or donate on our website your data is kept secure by FatBeehive, who in turn use Amazon Web Services (AWS) for hosting. Access to your information is limited to a small number of employees.
We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.
The following third-party services work on our behalf. Follow any of the links to view the Privacy Policies for those services.
- Microsoft Microsoft run Office 365, the subscription software service that hosts our email and document storage systems.
- Google Google’s Cloud Services, notably Google Forms, Sheets and Drive, are used on occasion to administer questionnaires.
- Worldpay Worldpay merchant services allows small and large businesses to take card payments securely online, over the phone or using card machines. We use them to process donations from our website.
- Circle Interactive Circle Interactive are a digital agency who host our CiviCRM contact management system on their secure servers.
- CiviCRM CiviCRM is a web-based contact relationship management (CRM) system. It allows an organisation to record and manage information about the various people and organizations it interacts with.
- Eventbrite is an event management and ticketing system. We use them to carry out event registration, keep track of event attendance figures and send out reminders.
- Fat Beehive are a website design agency for charity and not-for-profit organisations. They design, build and support our website, which is stored on Amazon Web Services servers.
- Amazon Web Services Amazon Web Services (AWS) is a subsidiary of Amazon.com that provides on-demand cloud computing platforms.
- FreeWill Freewill are a social venture who allow you to quick and easily create a last will and testament that includes a charitable donation. We partner with them to provide our Planned Giving service for US-based donors.
- Freshworks is a business software provider. We use their product, Freshteam, to process and track some of our job recruitments.
Your personal data may be transferred outside of the EU to countries with different data protection laws. When you submit your personal data, you consent to this transfer, storing and processing. When transmitting data outside of the EU we take all necessary precautions to ensure that it is done so securely and that your right to privacy is upheld.
Anyone aged under 13 must seek parental permission in order to allow their data to be stored. If you know of someone under 13 with their data stored with us, you should contact us directly to notify us.
Under EU data protection laws, we collect and process information on the following bases:
- We have a legitimate interest in using your information – for example in order to provide the content on our website and in our briefings, to carry out our hiring process or to seek funding for our charitable activities;
- We have a legal obligation – for example to keep financial records, to fulfil reporting commitments or to maintain records for libel purposes;
- We have your consent – for example if you have accepted the placement of cookies or opted in to receive email communications.
Business & Human Rights Resource Centre may change its Data Usage Policy from time to time and encourages visitors to frequently check this page for any changes. Your further use of the Services after a change to our Data Usage Policy will be subject to the updated policy.
This policy was last updated on: 06/09/2018
June 19th 2018 (v1): New Data Usage Policy implemented.
July 31st 2018 (v1.1): More detail added regarding Events, including the information we collect, and how it’s processed for email communications. MailChimp unsubscribe/opt-out URLs updated.
September 7th 2018 (v1.2): New recruitment portal, Freshteam, in use. Corresponding information added to the ‘Who Has Access To Your Information?’ and ‘Recruitment’ sections.
September 9th 2018 (v1.3): Detail added to the ‘Who Has Access To Your Information?’ and ‘Donations’ sections regarding FreeWill.
August 8th 2019 (v1.4): ‘Survey’ section and all information under this section added. Google added under ‘Who has access to your information?’ list.
For more general information on cookies see the Wikipedia article on HTTP Cookies.
You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the this site. Therefore it is recommended that you do not disable cookies.
This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content. This cookie is set when you click "Accept" on our cookie banner when you first visit the site. If you do not wish for this cookie to be placed, you can continue to browse the site without accepting the banner, which will in no way impact the site's functionality. For more information on Google Analytics cookies, see the official Google Analytics page.
Some of the content on our site is provided by third parties. This includes but is not limited to: Google Maps for interactive mapping, YouTube or Vimeo for hosted video and Flickr for images. When you visit a page containing content from one of these sites a cookie may be set. We do not have any control over these cookies and you should check the relevant third party website for more information about these.
Hopefully that has clarified things for you. If there is something that you aren't sure whether you need or not, it's usually safer to leave cookies enabled in case it does interact with one of the features you use on our site.
This policy was last updated on: 18/05/2020
May 18th 2020 (v1.1): Clarity added to how the Google Analytics cookie is set.