PRIVACY POLICY

Amana Trust strives to protect your personal information and use it in a manner consistent with UK laws. Part of these laws is that you have a right to privacy information in a way that is easy to access, read, and understand.

Please read this Policy to understand which types of information we collect from you, for which purposes, and which choices you have regarding our collection of your information. By visiting www.amanatrust.org.uk, www.amanaradio.org.uk, www.woodlandcamp.co.uk, or any of its related websites (collectively, the “Website”), you accept the practices described in this Policy.

WHO WE ARE

Your information will be held by Amana Trust (registered in England and Wales, Company Number 4366897, and Charity Number 1093401). For more information, see About Us. We are a registered data controller with the Information Commissioner’s Office in the UK.

Please contact us if you have any questions about our privacy policy or information we hold about you:

Amana Trust
Bower House
Orange Tree Hill
Romford, Essex
RM4 1PB,
United Kingdom

+44 (0) 1708 380 300
[email protected]

Information we collect

Amana Trust may gather personal information from you when you:

• Request information from us.
• Order products from us.
• Receive a Bible from us.
• Register to attend our events, such as Bible seminars, retreats, trainings, and conferences. See our separate Privacy Notice for Event Participants.
• Sign up for our services, such as newsletters.
• Apply to volunteer for us.
• Make bookings at Woodland Camp.
• Contact us using our forms.
• Contact us using our chat function. 
• Make a donation or register for Gift Aid.

We only collect information that we need or that you agree we can collect. The personal information we collect may include your contact details, your preferences and interests relevant to Amana Trust offers, communications with you, and confirmation that you are 18 years and over. For events, we may collect additional information to accommodate your needs, including dietary requirements, means of transport, and how you were introduced to Amana Trust.

On our Website we also collect non-identifying demographic and interest data through Google Analytics Demographic and Interest Reporting. You may opt out of Google Analytics for Display Advertising through Google’s Ads Settings or via the Google Analytics opt-out browser add-on. To opt out of being tracked by Google Analytics across all websites, please visit http://tools.google.com/dlpage/gaoptout.

Our Website may contain links to our partners’ websites or other places of interest who may collect your information. By selecting these links, you will effectively leave Amana Trust’s site and no longer fall under our privacy policy. Please refer to the privacy statement applicable to the website in question.

CHILDREN’S PERSONAL INFORMATION

You must be at least 18 years of age in order to request materials or participate in any activity that requires the submission of personal information. We do not knowingly market to or solicit information from children under the age of 18 years.

We cannot distinguish the age of visitors to our Website. If a child has provided us with personal information without parental or guardian consent, the parent or guardian should contact us ([email protected]), and we will remove the minor’s personal information.

SPECIAL CATEGORIES OF DATA

Data Protection law considers certain categories of personal data to be more sensitive, such as health information, and religious or philosophical beliefs. We do not collect special categories of information about you unless there is a good reason for doing so, such as when we need it to adequately care for participants at an event.

We only process your special category data with your explicit consent or if it is necessary:

• for carrying out obligations under employment, social security or social protection law, or a collective agreement.
• for the establishment, exercise, or defence of legal claims.
• to protect your or another person’s vital interests, and you are not capable of giving your consent (for example, in an emergency).
• in the substantial public interest.
  
  

HOW WE USE YOUR INFORMATION

We use your personal information to respond to your requests for information, products, or services, such as book orders and registrations for events. We also use your information to meet our legal obligations, such as accounting requirements.

With your prior consent, we use your information to administrate events that you register for, to send you our newsletter, to let you know how to use the Recovery Version Bible, and to inform you of Bible studies, seminars, training courses, and conferences in your area. You have the right to withdraw your consent at any time.

Relying on our legitimate interests, we use your information:

• to keep in touch with you about events, Bible studies, and publications by post.
• to keep in touch with you about events, Bible studies, and publications by phone, where
  -you gave us your consent before the new GDPR laws came into effect,
  -you purchased a product or attended an event and you did not opt out of phone calls, or
  -you are not on the TPS (Do Not Call list).
• to improve our products and services through your feedback.

We balance our legitimate interests against any potential impact on you and your rights under data protection laws. We do not use your information where our interests are overridden by the impact on you (unless we have your consent or we are permitted to do so by law). If you have any concerns, you have the right to object to this processing.

WHO CAN ACCESS YOUR INFORMATION FOR PROCESSING DATA

We do not sell or share your information to third-party marketers or any persons or organisations that are not associated with Amana Trust.

We use third-party service providers who may process information, fulfill and deliver orders, process donations and credit card payments, and provide support services on our behalf. Where your personal information is shared, agreements are in place that restrict the use of your information to the purpose for which it is provided and ensure it is stored securely and in accordance with applicable data protection and privacy laws.

More information on our third-party service providers:

Demographic and interest data gathered through Google Analytics Demographic and Interest Reporting is for analysing trends in aggregate and is never combined with personally identifiable information.

We use MailChimp to send emails to users who subscribe to receive them. MailChimp will collect your email address and information about your activity in relation to emails that we send you. Mailchimp has entered into a data processing agreement with us and adheres to the EU-U.S. Privacy Shield Framework. You can review MailChimp’s privacy policy for information on how they manage user data: mailchimp.com/legal/privacy (Section 3 on Privacy for Contacts explains how to opt out of having your information used in their data analytics projects). You can unsubscribe from any email sent from MailChimp by clicking an embedded ‘unsubscribe’ link.

We use G Suite by Google Cloud in operating some of the forms on our website. By providing your personal data to us, you agree to the transfer, storing, or processing of data that we collect from you to secure locations outside of the EU, operated by Google for processing and storing. Google adheres to the EU-U.S. Privacy Shield Framework and has entered into a data processing agreement and model contract clause with us to ensure that your data is treated and stored securely. You can review Google’s privacy policy for information on how they manage your personal data: policies.google.com/privacy. For information on how Google safeguards data that is processed in the use of their G Suite services, please see: gsuite.google.com/security.

We use PayPal to process card payments. PayPal is a data controller for the information it accesses when you make a payment. Please review PayPal’s privacy policy for more information on how they manage user data: paypal.com/uk/webapps/mpp/ua/privacy-prev.

We use Configio to process event registrations through our Website. Configio adheres to the EU-U.S. Privacy Shield Framework and has entered into a data processing agreement with us which also incorporates the European Commission’s Standard Contractual Clauses (processors) of 2010 to facilitate the lawful transfer of personal information from the EU to outside of the EU, where necessary and as required. You can review Configio’s privacy policy here: https://configio.com/privacy-policy/.

We use Amazon Web Services (AWS) for hosting the Website. AWS adheres to the EU-U.S. Privacy Shield Framework and has entered into a data processing agreement with us. AWS is compliant with the CISPE Code of Conduct. You can review AWS’s privacy policy here: http://aws.amazon.com/privacy/.

We use Microsoft Azure online services (Azure). Azure service is governed by terms and conditions, which provide a common set of customer commitments, detailed Data Protection Terms, and EU Standard Contractual Clauses across their enterprise online services, including Azure, Office 365, and Intune. You can review Microsoft’s privacy policy here: https://privacy.microsoft.com/en-gb/privacystatement (Microsoft Azure is one of the Enterprise and Developer Products).

HOW WE STORE YOUR INFORMATION

We do our utmost to protect your privacy. The European Union General Data Protection Regulation and corresponding data protection legislation oblige us to follow security procedures regarding the storage and disclosure of information which you have given us in order to avoid unauthorised loss or access. As such, we and our data processors have implemented industry-standard security systems and procedures to protect information from unauthorised disclosure, misuse, or destruction. We store your information on secure servers at our offices, off-site, and in the Cloud. We may also store certain information on paper at our office.

How long we retain your information

Your information will be kept for no longer than is necessary for the purposes of its use and for as long as it is required in accordance with the law. Where your information is kept in backups, we will take measure to ensure that those backups are encrypted and secure, and eventually destroyed.

If you have indicated that you no longer wish to hear from us, we will keep the minimum amount of information necessary to ensure that we continue to respect your wishes.

COOKIES

A cookie is a small text file that websites create and store on your computer containing data about websites that you visit. They are widely used to make websites work or work more efficiently, as well as to provide information to the owners of the site. The below table describes the cookies we use and why. Amana Trust does not disclose to third parties any cookie information created by our Website, except as needed to satisfy any law, regulation, or legal request.

We use social plugins of third parties, Facebook and Twitter, to enable users to share the content of the website on social networks. These social plugins use third party cookies. The cookie policies for these third parties can be found at:

• Facebook – facebook.com/help/cookies
• Twitter – https://help.twitter.com/en/rules-and-policies/twitter-cookies
  
  

USER SUBMISSIONS

Questions, comments, and remarks you transmit to Amana Trust through the Website or by any other means including, without limitation, email, mail, voicemail, telephone, or facsimile, will be treated as non-confidential and non-proprietary, unless explicitly stated otherwise.

YOUR AVAILABLE RIGHTS

Access your information

You have the right to request a copy of the information that we hold about you. If you would like a copy of particular personal information we hold about you, then please let us know the details of your request.

Amend your information

You have the right to request that we amend or complete inaccurate or incomplete information that we hold about you.

Erase your information

You have the right to request the erasure of your information in certain circumstances. If we process your information on the basis of our legal obligation, this right will not be available.

Object to our using your information

You have an absolute right to stop your information being used for direct marketing. You may also be able to object when we use your information based on our legitimate interests in certain circumstances.

Automated decision-making including profiling

We do not have any automated decision-making or carry out profiling activities using your information.

To exercise any of these rights, please contact [email protected]. We may require some proof of identification. A request to access, amend, or delete your information may be refused in certain circumstances, where permitted by law.

Right to lodge a complaint with a supervisory authority

If you have a complaint about the way we handle your information, please contact us at [email protected] or you can lodge a complaint with the ICO. Please see ico.org.uk/make-a-complaint/ or call 0303 123 1113 for more information.

This Privacy Policy might change from time to time without notice to you. If we change the way we are using your information, we will inform you or seek your consent in accordance with data protection laws.

Last updated: 2 October 2020