ClientEarth Privacy Notice – September 2023
ClientEarth and your personal data
ClientEarth (hereafter ‘we’ or ‘us’) take your privacy very seriously and would advise you to read this Privacy Notice closely. This Privacy Notice may change from time to time, so please check it frequently.
This Privacy Notice sets out how your personal data will be processed by us, the data controller, ClientEarth, 34 Drayton Park. London, N5 1PB. It explains your statutory rights and how we collect and use your personal data. It describes the processing activities that are carried out by us, the purposes for which these activities are performed and the legal bases that we rely upon to justify these processing activities.
ClientEarth has a number of offices around the world, some of which are separate legal entities (for example, ClientEarth US). Their use of personal data is also subject to this policy.
We collect basic personal information from visitors to this website through the use of online forms and when you email us. We may also process your personal data you provide directly to us or which we receive from our trusted partners in the charity sector.
- What we use your personal data for and why
- Data categories which we use
- The sources we collect your personal data from
- Who we share your personal data with
- How long we keep personal data for
- Where we transfer and store personal data
- Your rights
If you have any queries regarding this policy or the use of your personal information, please contact our Data Protection Officer at: firstname.lastname@example.org
What we use your personal data for and why
Processing your personal data is crucial for us to be able to run our campaigns, keep you informed about our activities and effectively fundraise. We appreciate the trust you place in us when giving us your personal data. The table below describes what we use different types of data for, and our legal basis for this.
Where a data category appears in italics, a glossary in the next section of this policy explains in more detail what this data category includes.
Marketing and Communications
Personal Data Used
Reason or Purpose
Personal Data Used
Reason or Purpose
Communicating with you regarding Grants and Fundraising
Prospect Research, Wealth Screening and Network Mapping
Processing Online Donations
Personal Data Used
Reason or Purpose
In addition to the specific purposes for which we may process your personal data set out in this table, we may also process your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Please do not give us any other person’s personal data, unless you are prompted to do so.
- Your contact details: information that allows us to contact you directly in relation to our newsletter and updates, such as your full name, email address, telephone number, country and address.
- Donation History: information on the transactions and donations made to ClientEarth.
- Usage Data: information that allows us to see how you use the ClientEarth website or mobile applications. This includes your IP address, geographical location, browser type and version, operating system, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your use.
- Lifestyle and other demographic insight information: information which allows us to improve the user experience of our website, provide a better service and target our campaigns. This includes information such as marital status, gender, date of birth, dietary requirements, education and career information, areas of interest and an estimate of your assets / earnings.
Sources we collect your personal data from
We will collect personal data from a number of sources. These include:
- Directly from you: when you sign up to our newsletters and updates, when you submit information through various forms on our website, when you sign up to our events or any other direct contact from you.
- Our website and apps: we collect usage data about how you use our website through ClientEarth’s analytics tracking system. We also process information from any forms you full out on our website.
- Third Parties:
- Trusted partners: we may receive your personal data through our trusted partners where they have your consent to share your data, including the British Lung Foundation.
- Publicly available third party sources: we may use data from publicly available and respected third-party sources to assess your charitable interests and as part of our fundraising activities. This includes social networks, subscription services, news archives and public databases (e.g., Companies House, property registers and the Charity Commission).
Communications, Fundraising and Online Donations
- We will keep your personal data received when you sign up to our updates and information on your donations and interactions with us for the duration of your relationship with us or as long as you are in contact with us, and up to two years after. We will consider you to be in contact with us when you open our emails or take further actions through our web resources.
- Financial information may be held for up to six years for legal purposes.
- We will keep data you send in relation to our Pensions campaign for the duration of the campaign and up to one year after.
Recruitment and HR
- We will keep data you send us in relation to vacancies for the duration of your application and up to one year after in order to offer you new opportunities, unless you opt out of this, or extend this period with your consent. We may also hold it for longer if your application is successful.
Where we transfer and store it
Some of the service providers described or identified in section 4 above, including some of our IT service providers, are based outside the UK and European Economic Area in countries which have different data protection laws to the UK. Your information may also be accessed by campaign partners, ClientEarth offices or sister entities in other countries. Where we store or share data outside the UK and EEA, we put in place appropriate safeguards to ensure that your information and rights in respect of your information are protected. If you would like more detail about these safeguards, please contact us at email@example.com.
You have several individual rights in relation to your personal data that we collect, which we are committed to respecting. In particular, you have the right to:
- Request a copy of your personal information
- Request any inaccuracies in your personal information be corrected
- You may also object or ask us to restrict the processing of your personal data and have your personal information erased, where appropriate.
Additionally, where we process your personal data based on your consent, you have the right to withdraw consent at any time.
If you wish to raise a complaint on how we have handled your personal data, you can contact our office at firstname.lastname@example.org and we will investigate the matter. You also have the right to make a complaint directly to the ICO if you wish.
Modifications and changes to this Privacy Notice
This Privacy Notice was last updated on 17 January 2022. Any changes made to this Privacy Notice will be updated on our website and you will be notified by email if necessary and appropriate.
15 September 2023
- Enhanced User-Friendly Experience: We've revamped our policy to make it more user-friendly with clearer language, headings, and easy-to-follow links. We've also included examples to better illustrate our activities.
- Transparency on Data Integration: We provide more details on how we integrate our systems and share information. This includes improvements to our internal processes, making them more personalised, intelligent, and integrated with other systems that may use your data. The revised policy also explains when and why ClientEarth shares data with third parties.
- Empowering Users: We empower you to manage the information you share with us. Our updated cookies statement and cookie control centre reflect this commitment. The policy outlines how you can exercise your choices regarding your information and highlights the security measures we've implemented to protect your data.
- Inclusivity and Personalisation: We've removed the previous threshold for wealth screening, aiming for greater inclusivity. This helps us better understand your philanthropic potential and your willingness to provide further support. This strategic refinement enables us to tailor our communications to your unique situation, offering meaningful ways for you to impact our initiatives. This, in turn, allows us to take on more vital work worldwide and increase our overall impact.
17 January 2022:
- Added additional section on events
10 December 2021:
- Added additional information prospect research, wealth screening and network mapping
5 Aug 2021:
- Added additional information on use of Facebook Pixels, hashed lists and Facebook advertising
7 June 2021:
- Changed ClientEarth address from Fieldworks, 274 Richmond Road, London E8 3QW to: 34 Drayton Park, London, N5 1PB
6 June 2020:
- Added information on use of Typeform and SurveyMonkey
- Added information on how and why we process data as part of the Pensions Campaign
12 November 2019:
- Added information on use of Facebook pixel
- Updated subscriber reconsent conditions
- Added information about payment processors (Stripe, Rapidata)