Privacy Policy

Our lawful bases for collecting or using personal information is to help us effectively carry out our charitable activities, through your involvement in our work with international students and in our events.

Under UK GDPR, we must have a lawful basis to process your data. We typically rely on:

• Consent – we have permission from you after we gave you the relevant information. You have given us clear consent to process your data for a specific purpose (e.g., news, events and activities, fundraising and appeals etc).
• Contract – we have to collect or use the information to enter into a contract with you. Processing is necessary for a contract we have with you (e.g., employment).
• Legal Obligation – we have to collect or use your information so we can comply with the law. Processing is necessary to comply with the law (e.g., Financial regulation, Gift Aid records, social security, fraud etc).
• Legitimate Interests – we are collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. Processing is necessary for our legitimate interests (e.g., managing our records to run events and maintain contact effectively), provided these are not overridden by your rights.

Our legitimate interests: We use Legitimate interest when collecting

• International Student data (both personal and sensitive personal data) because of the nature of the relationship between the Student and Friends International (Staff, Volunteers and Supporters) in our Centre;
• Volunteer and Supporter data (both personal and sensitive personal data) because of the nature of the relationship between Friends International and the Volunteers and Supporters in our Centre;
• Friends International Staff Worker’s Personal Supporter’s data (both personal and sensitive personal data) because of the nature of the relationship between the Friends International Staff Worker and their Personal Supporters;

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

• Recognised legitimate interests – our pre-approved purpose for collecting or using personal information to provide services and goods, including delivery and third party referrals:
• We need to respond to, or deal with, an emergency event or situation (the ‘emergencies condition’).
• We need to prevent, detect, or investigate a crime, including the apprehension and prosecution of offenders (the ‘crime condition’).
• We need to protect the physical, mental or emotional well-being of people who need extra support, or to protect them from harm or neglect (the ‘safeguarding condition’).
• Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
• Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claimsare:

• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

• Recognised legitimate interests – our pre-approved purpose for collecting or using personal information for dealing with queries, complaints or claims:

We need to share personal information with a public authority or another organisation because they need it for their public tasks or official functions (the ‘public task disclosure response condition’)., We need to safeguard national security, protect public security, or for defence reasons (the ‘national security, public security and defence condition’)., We need to respond to, or deal with, an emergency event or situation (the ‘emergencies condition’)., We need to prevent, detect, or investigate a crime, including the apprehension and prosecution of offenders (the ‘crime condition’)., We need to protect the physical, mental or emotional well-being of people who need extra support, or to protect them from harm or neglect (the ‘safeguarding condition’).

• Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.