What is our legal basis for processing data?

We rely on a variety of legal bases for processing data depending on the purpose of the activity being undertaken.

We use a consent basis for processing data relating to subscriptions and signing up to receive other resources you have requested or and events you have booked. This includes sending you OM’s Global Magazine & Heartbeat Prayer diary and the OM Headlines email updates.

We rely on legitimate interests for a variety of purposes. Legitimate interest is about balancing the interests of OM UK against your rights and freedoms and having due regard to your reasonable expectations about the use of your data. These purposes include:

  • mailing you information about related resources and events that you might be interested in, given your previous purchases
  • thanking (either by mail or telephone) those of you who have made a financial gift
  • research and screening activity to better tailor any financial requests we make of you so that they reflect your specific interests in OM’s mission and are at an appropriate financial level
  • recording of some online and in-person training, events and meetings

We also rely on the legitimate interest legal basis to share with you the fundraising needs of the charity and to ask for your support, given your engagement with OM’s resources, events and programmes. You can let us know at any time if you would prefer not to receive these communications.

We use your consent for all the email newsletters delivered by any of the activities and programmes run by OM. Every email newsletter you receive provides a clear opportunity for you to opt out of/unsubscribe from future email newsletters.

We use compliance with a legal obligation as the basis for processing any legally required activities such as Gift Aid declarations for HMRC.

Who has access to your personal information for processing data and how do we keep it safe?

We maintain a high level of security in relation to the collection, storage and disclosure of your information. This is very important to us and we take all necessary steps to ensure that any information we hold about you is safe.

Storing your information

We place great importance on the security of all personal data associated with our subscribers, supporters and customers.

Information is stored by OM UK on secure servers at our offices, off-site and in the Cloud. We also store some information in paper files.

We have security measures in place to attempt to protect against the loss, misuse and alteration of personal data under our control. For example, only authorised personnel are able to access personal information, we ensure access to information is password protected or secured via locked filing cabinets and we encrypt financial information you input before it is sent to us.

While we cannot ensure or guarantee that loss, misuse or alteration of data will not occur while it is under our control, we use our best efforts to try to prevent this.

Any sensitive or special categories of data you may provide to us are only shared on an absolute need to know basis, and are deleted after each relevant event unless we need to keep that information for a longer period e.g. for safeguarding reasons.

We enforce strict procedures and security features to protect your information and prevent unauthorised access, although we cannot completely guarantee the security of any information you transmit to us.

Where you or we have provided a password enabling you to access parts of our websites or use our services, it is your responsibility to keep this password confidential. Please don’t share your password with anyone. If you think anyone else has gained access to your password, please let us know as soon as possible. 

Transferring your information outside of the UK

Most of the information we store and process stays within the UK.

Some information may be transferred to countries outside the UK. This may occur if, for example, one of our supplier’s servers on which personal information is stored is located in a country outside the UK or if we use a cloud IT platform where data is dispersed between a number of different servers. These countries may not have similar data protection laws to the UK. However, we will ensure that your privacy continues to be protected as outlined in this privacy policy and in accordance with our legal obligations under applicable data protection legislation.

For countries in the EU we consider data to be free flowing and with no restrictions since the EU commission have adopted adequacy decisions for the UK.

By submitting your personal information to us you agree to this transfer, storing or processing at a location outside the UK.

If you have engaged with us from outside the UK, your information may also be processed by volunteers operating outside the UK, for example if you engage with one of our programmes from a country outside the UK and we pass your details to a national coordinator to provide you with advice and support.