Privacy Policy
 

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Marketing and Communications
We will only send you marketing communications, newsletters, or updates about our work if you have explicitly consented to receive them by ticking the subscription checkbox on our Website.
 
You can withdraw your consent and unsubscribe at any time by:

• Clicking the "unsubscribe" link in any email we send you.

• Emailing us at admin@wendo.org.uk with a request to be removed from our mailing list.

 
We will action unsubscribe requests promptly. Please note you may still receive a small number of communications while your request is being processed.
 
5. Who We Share Data With
WENDO does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only where necessary and lawful:
 
5.1 Service Providers and Platform Partners

• Wix (website hosting and platform infrastructure): our website is built on the Wix platform, which processes certain technical and usage data. Please see Wix's Privacy Policy at https://www.wix.com/about/privacy.

• Email marketing platforms: if we use a third-party tool to manage our mailing list and send newsletters, that provider will process your email address on our behalf.

• Payment processors: if you make a donation via our Website, your payment data will be processed by JustGiving, PayPal or Stripe in accordance with their own privacy policy.

 
5.2 Social Media Platforms
If you interact with WENDO via LinkedIn, Substack, YouTube, X, Facebook or Instagram using links on our website, those providers may collect and process your data independently. We encourage you to review the privacy policies of each platform.

5.3 Legal and Regulatory Bodies
We may disclose your personal data to the Charity Commission, HM Revenue & Customs, law enforcement agencies, or other regulatory bodies if we are legally required to do so, or if we believe it is necessary to protect the rights, property, or safety of WENDO, our beneficiaries, staff, or the public.

5.4 International Transfers
WENDO operates programmes in Kenya. Where personal data is shared with in-country staff or partners based outside the UK, we ensure that appropriate safeguards are in place in accordance with the UK GDPR before any such transfer takes place. These safeguards include the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or reliance on a valid adequacy decision recognised by the UK government. We will not transfer your personal data internationally unless one of these safeguards, or another lawful transfer mechanism recognised under UK GDPR, applies.
 
6. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory, or accounting obligations. Our general retention periods are as follows:

• Mailing list subscribers: until you unsubscribe, after which we will retain a suppression record to ensure we do not contact you again.

• Donation records: we retain financial and donation records for a minimum of 7 years in accordance with HMRC requirements.

• Volunteer and job applications: unsuccessful applications are deleted or securely destroyed within 6 months of the recruitment process concluding, unless you have given consent for us to retain your details for future opportunities.

• Correspondence and enquiries: we retain records of correspondence for up to 3 years, unless a longer retention period is required.

• Website technical and usage data: this is typically retained for up to 24 months in line with analytics platform defaults.

 

When your personal data is no longer required, we will securely delete or anonymise it.
 
7. How We Protect Your Data
WENDO takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• Secure hosting of our Website via the Wix platform, which employs encryption and security protocols.

• Limiting access to personal data to only those staff, advisors, and volunteers who need it to carry out their responsibilities.

• Using secure, password-protected systems for storing and processing personal data.

 
However, please be aware that no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. If you believe your data has been compromised, please contact us immediately at admin@wendo.org.uk.
 
8. Your Rights Under UK GDPR
You have the following rights in relation to your personal data. To exercise any of these rights, please contact us at admin@wendo.org.uk. We will respond to your request within one month, in line with our obligations under UK GDPR.

• Right of Access - You have the right to request a copy of the personal data we hold about you (a Subject Access Request).

• Right to Rectification - You have the right to ask us to correct any personal data we hold about you that is inaccurate or incomplete.

• Right to Erasure - You have the right to request that we delete your personal data where there is no compelling reason for us to continue processing it. This right is not absolute and may be limited by legal obligations.

• Right to Restriction of Processing - You have the right to ask us to limit how we process your personal data in certain circumstances, for example while we verify its accuracy or consider an objection.

• Right to Data Portability - Where we process your data on the basis of your consent or a contract, and processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.

• Right to Object - You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

• Right to Withdraw Consent - Where we rely on your consent to process your data (for example, to send you our newsletter), you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

• Right to Lodge a Complaint - If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

  • Website: https://ico.org.uk

  • Telephone: 0303 123 1113

  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

 
We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please contact us first at admin@wendo.org.uk
 
9. Data Breaches
WENDO has procedures in place to detect, investigate, and respond to personal data breaches. Where a breach poses a risk to your rights and freedoms, we will report it to the Information Commissioner's Office (ICO) without undue delay and, where feasible, within 72 hours of becoming aware of it.
 
Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals directly, without undue delay, in accordance with our obligations under UK GDPR.
 
10. Children’s Privacy
Our Website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe that a child under 13 has provided us with personal data without consent, please contact us at admin@wendo.org.uk and we will take steps to delete it promptly.
 
While WENDO's charitable work benefits girls and young women in Kenya, our Website and its data collection mechanisms are intended for adult supporters, donors, and partners only.
 
11. Accessibility
We want this Privacy Policy to be accessible to everyone. If you would like to receive this policy in an alternative format, such as large print, audio, or plain English, please contact us at admin@wendo.org.uk and we will do our best to accommodate your request.
 
12. Links To Third-Party Websites
Our Website may contain links to third-party websites, including those of partner organisations and social media platforms. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
 
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. The "Last Updated" date at the top of this document will be updated whenever changes are made. Where changes are significant, we will take reasonable steps to bring them to your attention.

We encourage you to review this policy periodically to stay informed about how we protect your data.

This policy should be read together with our Terms and Conditions and Cookies Policy, both of which are available on our Website.

WENDO is a registered charity in England and Wales, Charity Number 1205737. 
Registered office: 11 Charlock Close, Crawley RH11 9ED.