Our Privacy Policy

Pesticide Action Network UK (PAN UK) is a registered charity (number 327215) and a company limited by guarantee (number 02036915) in England and Wales. We are committed to safeguarding your privacy. We aim to respect any personal data you share with us and to keep it safe.

In accordance with the General Data Protection Regulation (GDPR), we have implemented this privacy notice to inform you of the types of data we process about you. We also include within this notice the reasons for processing your data, the lawful basis that permits us to process it, how long we keep your data for and your rights regarding your data.

This notice applies to members of the general public who interact with PAN UK as donors, supporters, campaigners and users of our website.

Data protection principles

We will comply with data protection law. This says that the personal information we hold about you must be:

  1. Used lawfully, fairly and in a transparent way.
  2. Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
  3. Relevant to the purposes we have told you about and limited only to those purposes.
  4. Accurate and kept up to date.
  5. Kept only as long as necessary for the purposes we have told you about.
  6. Kept securely.

The type of personal information we collect

We collect, store, and use the following categories of personal information about you. The exact types of personal information will depend on the capacity in which you interact with us:

  • Personal contact details such as name, title, addresses, telephone numbers and email addresses where you have chosen to share them with us.
  • Details of donations you have made to PAN UK
  • If you use your credit or debit card to donate to us or set up a direct debit then you will enter your details directly into our payment partners (Stripe or GoCardless). We don’t store your card or bank account details in any of our systems.
  • Details of why you have contacted us and what we have discussed
  • Responses to our surveys you have chosen to complete
  • Campaign actions you have chosen to take
  • Information about your browsing habits on our website including geographical location, browser type, referral source, length of visit and number of page views. This data does not identify you in any way.

We will never solicit, collect, store and use sensitive personal data identified in law as being “special category”, for example information regarding your ethnicity, health, political views.

We do not knowingly process data on any person under the age of 16. If we come to discover, or have reason to believe, that you are 15 and under and we are holding your personal information, we will delete that information within a reasonable period and withhold our services accordingly.

How we collect your personal data

Most of the personal data that we process will have been provided to us directly by you. For instance, you may choose to provide us with your personal data when you take action via our site to sign a petition or send an email to a decision-maker; when you sign up to receive our newsletters and pesticide-related updates; when you sign up to attend one of our events; when you contact us by phone, email or post; when you interact with us on social media; when you buy anything from our online shop and/or when you donate money to us. In some cases we may process personal data that has been provided to us by a partner organisation where they have a lawful basis for sharing this information with us for this purpose (for instance JustGiving, where you have given them permission to share this information with us).

In addition, when you visit our website we use cookies to track your use of our site. You are able to choose to switch off this tracking ability whenever you choose. Please refer to our Cookies Policy for details.

How we use your personal data and the lawful basis for doing so

The law on data protection allows us to process your data for certain reasons only.

The information below categorises the types of data processing we undertake and the lawful basis we rely on.

Lawful basis – your consent

  • Sending you information about our work, campaigns, important updates and progress we have made
  • Providing you with any products or information that you have requested
  • Contacting you to ask for donations or other support
  • Implementing a campaign action
  • Capturing information on website usage to enable us to improve your browsing experience

Lawful basis – our legitimate interests

  • Activities enabling you to use any services that we offer
  • Handling the administration of any donation or other payment your make to PAN UK
  • Preparation and audit of our financial statements

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so.

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

Please note that we will if necessary process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Who we share your data with

Employees within our company who have responsibility for the activities described above will have access to your data which is relevant to their function.

Data is shared with third parties for processing for the following reasons:

  • For the collection of donations (Stripe and GoCardless)
  • For the maintenance of records of donations (Donorfy – customer relationship management database)
  • For the purchase of goods from the PAN UK online store (TeeMill)
  • In order to send you communications (MailChimp)
  • For sending emails to campaign targets (Organic Campaigns)
  • For ticket sales (Eventbrite)

In most cases you will provide the data directly to the third party that is acting as a processor on our behalf but in some cases we may share data that we hold with them. We may also share your data with third parties in order to comply with a legal obligation upon us.

Where we do share data with third parties we only provide the information that they need to perform their services. We have a data processing agreement in place with such third parties to ensure data is not compromised and that it is only used for the purposes we require. Third parties must implement appropriate technical and organisational measures to ensure the security of your data.

How we store your data

Your data is securely stored on servers owned by the organisations that we contract to process your data. These include those listed above in the section regarding “who we share your data with” and also Microsoft 365. Some of your data is also stored in secure physical files at our office.

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions.

Although data is usually stored and held on servers within the UK (or in secure physical files within the UK), some of your personal data may be processed outside of the UK in certain circumstances. Your personal data receives the same level of protection when processed offshore as it does onshore. This protection is delivered by limiting the transfer to countries with data protection regimes assessed as adequate or through the use of the standard data protection clauses.

We only keep your data for as long as it still required in connection with the purpose(s) for which it was collected and / or is processed. In some cases retention periods are set by the law, such as those relating to tax and accounting records. In other cases these have been established internally.

What are your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Where we consider that the information with which you have provided us does not enable us to identify the personal information in question, we reserve the right to ask for (i) personal identification and/or (ii) further information.

If you wish to make a request then please contact us at the email or postal address listed in the “how to make a complaint” section.

How to make a complaint

If you have any concerns about our use of your personal information, you can make a complaint to us using the email address [email protected] or by writing to us at Pesticide Action Network UK, Brighthelm Centre, North Road, Brighton, BN1 1YD.

You can also complain to the Information Commissioner’s Office if you are unhappy with how we have used your data. Their address is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Their helpline number is: 0303 123 1113.