- Who are we and what do we do?
- Where does Tommy’s collect your personal data from?
- What personal data does Tommy’s collect?
- How do we use your personal data?
- Who do we share your personal data with?
- Prospect research
- Automated decision-making
- Storing your personal data outside the EEA
- EU representative
- Your rights
At Tommy’s we are committed to protecting your personal data and helping you understand what we are doing with it. We will use your personal data in compliance with all data protection laws, keeping it safe and using it in ways that you would reasonably expect.
Tommy's is the leading charity in the UK working to improve maternity care and save babies' lives. We fund research into the causes and prevention of pregnancy complications that lead to miscarriage, stillbirth and premature birth. We also provide health information to support parents throughout their pregnancy journey.
Tommy’s is registered as a charity in England and Wales (registered charity number 1060508), and in Scotland (registered charity number SC039280). We are also registered as a company limited by guarantee (company number 3266897).
There are 2 wholly owned subsidiary companies of Tommy’s:
- The Baby Fund Trading Limited (registered company in England and Wales number 2557706), to record our activity classed as trading, including the selling of sponsorship rights, and
- LLHM Limited (registered company in England and Wales number 10584979), to manage our event-driven activity, specifically the London Landmarks Half-Marathon.
We are located at:
3 Laurence Pountney Hill,
London EC4R 0BB
Telephone: 0207 398 3461
Email: [email protected]
Tommy’s collects your personal data from the following places:
- When you give it to us. This is the main way that we collect personal data about you. You give us information when:
- You fundraise for Tommy’s by organising or taking part in an event
- You donate money directly to Tommy’s
- You contact Tommy’s to provide you with support or information
- You contact Tommy’s to share your personal experiences
- You order goods or services from Tommy’s
- You complain to us about something that we have done
- You apply to work for us
- You sign up to support us
- You sign up to receive emails from us
When you give permission to other organisations to provide Tommy’s with your personal data
We receive personal data about you from an event organiser e.g. London Landmarks Half Marathon when you have asked them to share your personal data with Tommy’s, perhaps because you are running and raising money for Tommy’s.
We also receive personal data about you from an online fundraising site such as Virgin Money Giving or Just Giving. These organisations will only provide us with your personal data if you have given your consent to do so.
We also receive personal data about you if you make a donation to us using a Tommy’s social media account e.g. Facebook.
When your personal data is available publicly
In order to grow our income and meet the charitable objectives of Tommy’s we undertake prospect research to supplement the information we hold about potential donors. This is explained fully in 6. Prospect research and helps us build a better picture of our potential supporters.
We receive information about you from social media accounts, for instance if you tag Tommy’s in one of your posts.
Personal data is information that can be used to identify you.
Tommy’s collects and stores the following personal data:
- Your name
- Your date of birth
- Your contact details (including postal address, telephone number, email address and/or social media identity)
- Bank account or credit card details where you provide these to make a payment
- Marital status
- Your marketing preferences such as whether you wish to receive our e-newsletters
- Details of any gifts you have given to Tommy’s
- Whether or not you are a UK taxpayer
- Details of any Tommy’s events you have participated in
- Notes relating to our relationship with you
- Your job title and your employer
- The reason you give us for supporting Tommy’s
- Data gathered through prospect research
- Photographs and, in the case of certain events, film
- Medical information (physical or mental health conditions) about employees and race participants
- Personal experiences of Tommy’s support, from people who share this information with us
- Information about your activities on our website and about the device you use to access these, for instance your IP address and geographical location.
How we use your personal information will depend on how you interact with us.
The details below set out how you could interact with Tommy’s, what we are doing with your personal data, our lawful basis for processing your data, and our legitimate interest (if we are relying on this).
We will only keep your information for as long as we need it. The maximum period will be 7 years since our last interaction with you.
The lawful bases we use to process your personal data are: -
This is where we have asked you if we can use your personal data in a certain way and you have clearly agreed to this. If we are relying on consent as our lawful basis to process your personal data, you have the right to withdraw your consent at any time.
⦁ Legal obligations
If we are relying on this as our legal basis to process your personal data we are complying with a common law or statutory obligation.
⦁ Fulfilling contracts
This is where we need to process your personal data in order to fulfil a contractual service to you.
⦁ Our legitimate interest
This is where we are processing your personal data in ways that you would reasonably expect. If we are using this basis, we have conducted a legitimate interest assessment to make sure that we have a legitimate interest, that the processing is necessary to achieve that interest and that we have balanced our interests against your interests, rights and freedoms.
Where we are relying on this basis we have outlined a summary of our legitimate interest.