Ar a Glance

The citizenAID mobile application works offline and does not collect, track, process or transmit personal data or usage analytics from your device. It does not require registration or an account. If you follow a link from the app to an external website, the privacy and cookie practices of that website apply.

 

1. Who we are

This privacy policy explains how the following organisations and activities use personal information:

• citizenAID Charity, a registered charity in England and Wales (registered charity number 1176033).

• citizenAID Limited, the charity’s wholly owned trading subsidiary (company number 10315303).

• Stop the Bleed and Stop the Bleed Day, campaigns operated by citizenAID Charity.

In this policy, these organisations and activities are referred to collectively as “citizenAID”, “we”, “us” or “our”.

Depending on the activity concerned, citizenAID Charity and citizenAID Limited may act as separate data controllers or as joint controllers. Where they act jointly, they determine together why and how personal information is used and cooperate in responding to data protection enquiries and requests.

Privacy contact: Mike Robinson, Operations Manager
Email: info@citizenaid.org

​

2. Scope of this policy

This policy applies to personal information used in connection with our charity, trading, training, volunteering, campaigning, events, communications, fundraising, sales, website and mobile application activities. It also applies when you contact us or otherwise interact with citizenAID.

​

3. The personal information we collect

We collect only the personal information that is reasonably necessary for the relevant activity. Depending on your relationship with us, this may include:

• Identity and contact information, such as your name, organisation, postal address, email address and telephone number.

• Role-related information, such as your job title, school, organisation, volunteer role, training role or campaign involvement.

• Order and transaction information, such as products ordered, delivery details, payment status and accounting records. Payment card details are generally handled by our payment service provider rather than stored by us.

• Communications and enquiry information, including correspondence, requests, feedback and complaints.

• Training, event and volunteer administration information needed to organise activities safely and effectively.

• Marketing preferences, including whether you wish to receive updates from us.

• Website and cookie information, as described in section 10.

We normally obtain information directly from you. We may also receive it from your employer, school, another participating organisation, a volunteer coordinator, an event organiser, a service provider or a publicly available source where this is lawful and appropriate.

​

4. citizenAID mobile application

• Offline operation: the citizenAID mobile application operates entirely offline.

• No app data collection: the app does not collect, track, process or transmit personal data or usage analytics from your device.

• No account: the app does not require user registration or account creation.

• External links: the app may contain links to external destinations, such as our website, shop, fundraising pages, Terms of Use or Privacy Policy. Selecting a link leaves the app and opens an external browser or service. Any information then collected is governed by the privacy and cookie practices applying to that external destination.

 

5. How and why we use personal information

We use personal information for the following purposes, where relevant:

• To respond to enquiries, provide support and communicate with people who contact us.

• To organise training, events, campaigns, volunteering and partnerships, including scheduling, administration and safety arrangements.

• To process and deliver orders, manage payments, deal with returns or enquiries, and maintain financial and accounting records.

• To manage our relationships with schools, partner organisations, volunteers, customers, suppliers and supporters.

• To send charity, campaign, product or event updates where permitted, and to record and respect communication preferences.

• To operate, secure and improve our website and online services.

• To comply with legal, regulatory, safeguarding, insurance, governance and reporting obligations, and to establish, exercise or defend legal claims.

• ​

6. Our lawful bases

We only use personal information where we have a lawful basis. Depending on the circumstances, we may rely on:

• Contract, where processing is necessary to enter into or perform a contract, such as fulfilling an order or agreed service.

• Legitimate interests, where processing is necessary for our charitable, operational, commercial or administrative interests and those interests are not overridden by your rights and freedoms.

• Consent, where we ask you to make a clear choice, including for certain marketing or non-essential cookies. You may withdraw consent at any time.

• Legal obligation, where processing is necessary to comply with a legal or regulatory requirement.

• Vital interests, in exceptional circumstances where processing is necessary to protect someone’s life.

Where we rely on legitimate interests, those interests may include running and protecting our organisations, administering volunteers and activities, communicating with stakeholders, improving services, preventing fraud, and supporting our charitable purposes.

​

7. Marketing communications

We may contact you about our charity, campaigns, events, training or products where we have an appropriate lawful basis. Where consent is required, we will ask for it. You can unsubscribe or change your preferences at any time by using the unsubscribe option in a message or contacting us at info@citizenaid.org.

​

8. Who we share personal information with

We may share personal information where necessary and lawful with:

• citizenAID Charity and citizenAID Limited, where necessary for their connected activities.

• Schools, partner organisations, event organisers and volunteers involved in delivering an activity.

• Trusted suppliers and processors, including providers of IT, website hosting, email, payment, e-commerce, delivery, accounting and professional services.

• Delivery partners and payment providers in connection with purchases.

• Insurers, auditors, professional advisers, regulators, law enforcement bodies or courts where required or appropriate.

We do not sell personal information. Service providers may use personal information only for the agreed purpose and under appropriate contractual and security arrangements.

​

9. Retention and security

We use appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or access. These measures are reviewed according to the nature and sensitivity of the information and the risks involved.

We keep different categories of personal information for different periods. Retention is based on the purpose for which the information was collected, legal and regulatory requirements, accounting and tax obligations, safeguarding and insurance needs, limitation periods, and our operational requirements. When information is no longer required, we securely delete or anonymise it.

​

10. Cookies and similar technologies

Our website and other online services may use cookies and similar technologies. Some are strictly necessary for the service to function. Others may support preferences, analytics, embedded content or marketing.

Where consent is legally required, non-essential cookies and similar technologies will not be used unless you have made an appropriate choice. You can manage your choices through the cookie controls provided on our website and, where applicable, through your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Third-party content or services, such as payment, video, mapping, social media or embedded tools, may set their own cookies when you choose to interact with them. Their use of information is governed by their own privacy information.

 

11. International transfers

Some trusted service providers may process personal information outside the United Kingdom. Where personal information is transferred internationally, we use an appropriate safeguard or another lawful transfer mechanism required by UK data protection law. You may contact us for further information about the safeguards relevant to your information.

 

12. Children’s information

We do not collect personal information directly from pupils as part of Stop the Bleed activities. Coordination is handled through school staff or other responsible adults. If an activity requires information relating to a child, we will collect only what is necessary, use appropriate safeguards and provide suitable privacy information to the child and/or the person with parental responsibility as required.

​

13. Your data protection rights

Depending on the circumstances, you may have the right to:

• Ask for access to your personal information.

• Ask us to correct inaccurate or incomplete information.

• Ask us to delete personal information in certain circumstances.

• Ask us to restrict how we use personal information.

• Object to processing based on legitimate interests or to direct marketing.

• Withdraw consent at any time where we rely on consent.

• Receive certain information in a portable format, where applicable.

• Complain to the Information Commissioner’s Office.

These rights are not absolute, and an exemption may apply. We may need to confirm your identity before acting on a request. We will respond without undue delay and normally within one month, although the law permits an extension in some circumstances.

To exercise a right, email info@citizenaid.org.

​

14. Automated decision-making

We do not use personal information to make decisions about individuals solely by automated means where those decisions produce legal or similarly significant effects.

​

15. Complaints

Please contact us first if you have a concern, so that we have the opportunity to investigate and respond.

You also have the right to complain to the UK Information Commissioner’s Office. Visit the ICO website for current contact information and guidance.

​

16. Changes to this policy

We review this policy periodically and update it when our activities, services or legal obligations change. The latest version will be published on our website with its revision date. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected individuals before the new use begins, where required.

​

17. Contact us

For questions about this policy, our use of personal information, or your data protection rights, please contact:

citizenAID Privacy Contact
Mike Robinson, Operations Manager
Email: info@citizenaid.org