Privacy Policy

Contents

Item

Chapter

1       ABOUT US

2       DEFINITIONS

3. WHERE WE OBTAIN YOUR PERSONAL DATA

4       PERSONAL DATA COLLECTION AND USE

5       DISCLOSURE OF YOUR PERSONAL DATA

6       DATA SUBJECT RIGHTS

7       DATA SECURITY

8. YOUR LEGAL RIGHTS

INTRODUCTION

Welcome to 4 Humanity hereinafter referred to as the “website”. This Privacy Policy applies to you (hereinafter referred to as the “user,” “you,” or “your”) when you visit the website, contact us, apply to become a hotel or charity partner, donate or purchase items where applicable, or subscribe to receive marketing communications from us. 

This Privacy Policy explains how 4 Humanity collects, uses, stores, shares, and safeguards your personal data. We process all personal data in compliance with applicable privacy and data protection laws, including the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR) (together, the “applicable laws”). 

Please read this Privacy Policy carefully before using our website. By accessing or using the website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not access or use the website. 

1               ABOUT US

The website is operated by 4 Humanity, a charitable incorporated organisation registered in England and Wales (Charity No. 1201571) (“4 Humanity”, “we”, “us”, or “our”). 

Commercial transactions made through the website may be processed by 4 International Ltd, a wholly owned trading subsidiary of 4 Humanity. 

4 Humanity acts as the data controller for personal data collected through the website. 

Contact details 

4 Humanity is a UK-based charity and acts as the controller of personal data processed via this website. 

If you have any questions about this Privacy Policy, how we handle your personal data, or wish to exercise your data protection rights, you may contact us at: 

4 Humanity 
Email: 4@4humanity.one  

Registered office: 22 Berwick Close, Macclesfield, SK10 3EF, United Kingdom. 

It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Children’s Privacy

The website is not intended for children under 13 years of age, and we do not knowingly collect their personal data. 

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

We may update this Privacy Policy from time to time. Any material changes will be communicated via the website or email. Continued use of the website constitutes acceptance of the updated policy. 

2. DEFINITIONS

The terms “Controller,” “Data Subject,” “Personal Data,” and “Processing” have the meanings given to them under the UK Data Protection Act 2018. 

• Data Subject Request: A request made by a data subject to exercise their data protection rights. 

• Customer: A user who makes a donation or purchase through the website (where applicable). 

• Partner: A hotel, resort, charity, or organisation engaging with 4 Humanity via the platform. 

3               WHERE WE OBTAIN YOUR PERSONAL DATA

We collect personal data about you from the following sources: 

3.1 When you provide it directly to us by completing forms on our website, contacting us by email, applying to become a hotel or charity partner, making a donation, or subscribing to communications 

3.2 When you interact with the website, including through cookies and similar technologies 

3.3 From third parties acting on our behalf, such as payment processors or email service providers, where you have chosen to engage with those services via our platform 

4               HOW WE USE YOUR PERSONAL DATA

Processing personal data enables us to operate the 4 Humanity platform, manage partnerships, run fundraising campaigns, communicate with our community, and meet legal and regulatory obligations.

We only process personal data where we have a lawful basis to do so. 

4.1 What personal data do we collect? 

Depending on how you interact with the website, we may collect: 

• First and last name 

• Email address 

• Phone number 

• Organisation or hotel name 

• Billing and/or postal address 

• Payment-related information (processed securely by third parties) 

• Details of charitable or sustainability initiatives (for partners) 

• Content of communications you send to us 

• Information submitted through applications, forms, or surveys 

• Technical data such as IP address and cookie data 

We do not intentionally collect special category (sensitive) personal data unless it is voluntarily provided and strictly necessary. 

4.2 How we use your personal data and our lawful basis 

We use your personal data for the purposes set out below. Under data protection law, we must have a lawful basis for processing your personal data. Depending on the circumstances, our lawful bases include: 

• Consent – where you have given clear permission (e.g. marketing communications) 

• Performance of a contract – where processing is necessary to fulfil a donation, partnership, or transaction 

• Legal obligation – where processing is required to comply with legal or regulatory duties 

• Legitimate interests – where processing is necessary for operating and improving the 4 Humanity platform, provided those interests do not override your rights 

Personal data is collected either: 

• Directly from you when you submit forms, contact us, or engage with the platform; or 

• Automatically through cookies and similar technologies. 

We process personal data on the basis of: 

• Your consent 

• Performance of a contract 

• Compliance with legal obligations 

• Legitimate interests that do not override your rights 

You may choose not to provide certain data, although this may limit our ability to provide services. 

4.3 Donations, Purchases & Transactions 

Where donations or purchases are available via the website, we may collect: 

• Name 

• Email address 

• Billing details 

All payments are processed by secure third-party payment providers. 4 Humanity does not store full payment card details. 

Purpose: 

• Processing transactions 

• Issuing confirmations 

• Accounting and compliance 

Legal basis: Performance of a contract 

Retention: Up to seven (7) years for accounting and legal purposes. 

4.4 Partner & Application Data 

If you apply to become a hotel or charity partner, we collect information relevant to assessing and managing the partnership. 

Purpose: Partnership administration and platform participation 
Legal basis: Legitimate interest 
Retention: Up to two (2) years following last engagement 

4.5 Marketing Communications 

When you subscribe to receive updates from 4 Humanity, we collect your name and email address. 

Purpose: Sharing news, campaigns, and platform updates 
Legal basis: Consent 
Retention: Until you unsubscribe 

You can unsubscribe at any time via the link in our emails. 

4.6 Contact Data 

If you contact us, we collect your name, email address, and message content. 

Purpose: Responding to enquiries 
Legal basis: Legitimate interest 
Retention: Up to six (6) months after last communication, then anonymised where possible 

4.7 Cookies 

When you access our website, we use cookies and similar technologies to: 

• Ensure the website functions correctly 

• Understand how users engage with our content 

• Improve performance, functionality, and user experience 

Non-essential cookies are used only with your consent. You can manage or disable cookies through your browser settings at any time. Please note that blocking cookies may impact website functionality. 

You can manage cookies through your browser settings. Blocking cookies may affect site functionality. 

5               DISCLOSURES OF YOUR PERSONAL DATA

We never sell or rent your personal data. 

We may share data with: 

• Trusted service providers (e.g. payment processors, email platforms, website hosting) 

• Legal or regulatory authorities where required by law 

• Third parties where you have given explicit consent 

All third parties are required to process data securely and in accordance with applicable laws. 

Where a user redeems or purchases a hotel stay, experience, or donated offering, relevant personal data (such as name and contact details) may be shared with the relevant partner hotel or provider solely for the purpose of arranging the booking or delivery of the service. 

6               TRANSFER OF PERSONAL DATA

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with UK data protection law. These safeguards may include the use of approved international data transfer agreements or reliance on adequacy regulations. 

Where services involve providers outside the UK, we ensure appropriate safeguards are in place in compliance with UK GDPR. 

7               DATA SUBJECT RIGHTS

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights in relation to your personal data: 

– The right to access your personal data 

– The right to request rectification of inaccurate or incomplete data 

– The right to withdraw consent at any time where processing is based on consent 

– The right to request erasure of your personal data in certain circumstances 

– The right to request restriction of processing 

– The right to data portability 

– The right to object to processing based on legitimate interests 

–  You can contact the UK Information Commissioner’s Office at www.ico.org.uk if you believe your data has been handled unlawfully. 

We may request proof of identity before responding to a data subject request.               

8               YOUR LEGAL RIGHTS

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

·       Request access to your personal data.

·       Request correction of your personal data.

·       Request erasure of your personal data.

·       Object to processing of your personal data.

·       Request restriction of processing your personal data.

·       Request transfer of your personal data.

·       Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.