Information we may collect from you

We may collect and process the following data about you:

• Information that you provide by filling in forms on our site www.nspccwishes.org.uk or www.nspcc.org.uk/wishes (our site). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information when you report a problem with our site.
• If you contact us, we may keep a record of that correspondence.
• We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them. The data collected by the questionnaire or survey will only be used for the purpose stated on the form.
• In order to process Direct Debit, Credit Card or other financial transactions we may ask for your bank or card details. In order to do this you will be directed to a secure area of our site. To ensure the maximum level of security is applied to your data, all transmissions over the internet to and from this area are encrypted using SSL (Secure Sockets Layer). Credit card and bank detail information is not retained on our web servers, but is transferred to our secure internal databases (for the purpose of collecting and recording payments).
• You may also be given the opportunity to add your address details to our databases so we can contact you in the future. We will only use this information to contact you if you expressly give us permission to do so.
• Details of transactions you carry out through our site and of the fulfilment of your orders.
• Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.
• Details of names and emails of those guests who will be sent the wishlist request, names and emails of office workers signed up for the Secret Sant-a-matic. We will use such information to disseminate the wishlists and Secret Sant-a-matics, Wish Wall posts and personal eCards, but such data will not be stored.

Back to top

IP addresses and cookies

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.

For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our site and to deliver a better and more personalised service. They enable us:

• To estimate our audience size and usage pattern.
• To store information about your preferences, and so allow us to customise our site according to your individual interests.
• To speed up your searches.
• To recognise you when you return to our site.

You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site.

In Internet Explorer, click on Tools, click on Internet Options, click on the Privacy tab and then use the slider bar to choose the level of privacy you want.

In Firefox, click on Tools, click on Options, click on Privacy, click on the Cookies tab and choose your level of privacy.

Back to top

Where we store your personal data

The NSPCC may from time to time need to use the services of an Internet Provider. For financial or technical reasons these may be sited outside of the European Economic Area. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. Use of data by such Internet Service Provider on behalf of NSPCC is regulated and safeguarded by both international procedures and legal agreements to comply with the requirements of the Data Protection Act 1998.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Back to top

Uses made of the information

We use information held about you in the following ways:

• To ensure that content from our site is presented in the most effective manner for you and for your computer.
• To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
• To carry out our obligations arising from any contracts entered into between you and us.
• To allow you to participate in interactive features of our service, when you choose to do so.
• To notify you about changes to our service.

The NSPCC does not rent or sell mailing details to any third party. However, occasionally the NSPCC works with partner organisations or companies to send you information on other ways in which you can support the NSPCC. However, we will not simply add your name to another organisation's database.

If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, please tick the relevant box situated on the form on which we collect your data (the registration form).

Back to top

Disclosure of your information

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 736 of the UK Companies Act 1985.

We may disclose your personal information to third parties:

• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of the National Society for the Prevention of Cruelty to Children, our supporters, or others.[This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Back to top

Your rights

You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at

Our site may include links to other sites, not owned or managed by the NSPCC. If you follow a link to any of these websites, please note that these websites have their own privacy policies. We cannot be held responsible for the privacy of data collected by websites not managed by NSPCC and we do not accept any responsibility or liability for their privacy policies. Please check these policies before you submit any personal data to these websites.

Back to top

Child Protection concerns

All enquiries which contain concerns about a child's safety are passed immediately to the NSPCC Child Protection Helpline. Data is not retained on the web servers. Personal information provided to the Helpline will be held in accordance with the Data Protection Act 1998 for the purpose of providing the necessary services to you and to meet our statutory obligations.

Back to top

Access to Information

The Data Protection Act 1998 gives you the right to access information held about you. You may request a copy of any personal information that the NSPCC has about you. Please email legalofficer@nspcc.org.uk or write to the Legal Officer, NSPCC, Weston House, 42 Curtain Rd, London EC2A 3NH. The NSPCC does not make a charge for supplying this information and will reply within 40 days of receipt of your request. It will help us to locate your records more easily if you can tell us something about the nature of your contact with the NSPCC.

Back to top

Changes to our privacy policy

Any changes to this policy will be notified by an icon being placed next to the 'Terms and Conditions' link on the Wishes Home Page for one month after the change occurs.

Back to top

Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to efundraising@nspcc.org.uk.

Back to top