We are deeply grateful for the generosity and commitment of our donors and supporters. Your trust matters to us, and we promise to protect your personal information and data and use it responsibly to support our charity work: empowering people with lived experience of substance use, domestic abuse, criminal justice and housing challenges to build safer, healthier lives.

Our Promises to You

• We will handle your data with care, respect, and transparency.
• We will only use your data for legitimate communications and to further our charity work supporting people and communities.
• We will never sell your data to third parties.
• We will only share your data with third parties for essential donation processing and, with your consent, to help Cranstoun communicate with you and other like-minded people.
• We will make it as easy as possible to update your preferences or opt out of our communications.

How We Use Your Data

We only use your data in ways that are transparent, ethical and aligned with your preferences and consent. This includes:

Processing Donations

We share your data with trusted platforms that help us process donations securely and manage our finances, including:

• Fundraise Up (donation platform)
• Enthuse (fundraising platform)
• Stripe (payment processor)
• Xledger (financial auditing)

All systems that hold your information, even temporarily, are thoroughly checked and bound by contracts with strict data protection requirements to ensure they meet our privacy and security standards. This includes completion of a Data Protection Impact Assessment (DPIA) to identify and mitigate risks, and using two-factor authentication to protect your data from unauthorised users. We may adopt other donation processing systems in the future, in which case we will ensure they meet the same high standards for data safety and security.

In accordance with data protection laws, we must have a lawful basis when processing your personal data.

• Consent – where we ask your permission to use your personal data, such as for sending marketing communications.
• Contract – where we process your personal data as part of an agreement, such as when you donate to us.
• Legal obligation – where we process your personal data to comply with law, for example fraud detection as well as meeting our regulatory obligations.

Communicating With You

We want to keep you informed and inspired, but only in ways that you want. When you donate to or interact with Cranstoun, you will have the options to hear from us via:

• Email: We may share your data with our email marketing partner Brevo to send you updates about our work and ways you can support us. You can manage your email preferences at any time via the personalised link in the footer of emails you receive from Cranstoun.
• Social media: We may share your data with Meta Ads and other social advertising networks to promote information about our work and ways to support Cranstoun.
• Post: We may also send you updates by post, unless you ask us not to.

We do not currently communicate via SMS, instant messaging or other channels. If we do so in the future, we will ensure only to use trusted platforms which meet our high standards for data safety and security. We will also advise you of any changes.

Advertising

To reach more potential supporters, we may use your data to build advertising audiences. This will help us reach people who share your values on social media, search engines (including Google Ads), and display advertising platforms. If we do this, we will take the utmost care to:

• Complete a dedicated DPIA before sharing any data
• Only proceed when we have enough data to make it worthwhile
• Encrypt data before sharing it with advertising platforms
• Ensure your data is securely deleted after processing

Your Rights

You have the right to access the data we hold about you, correct inaccuracies, withdraw consent to use your data, or request deletion of your data from our systems.

For more details, please see our privacy policy for website users or contact our fundraising team at: connect@cranstoun.org.uk