If you have any queries about this policy please contact:
Who are we?
Timothy Syndrome Alliance (TSA) is registered as a charity with the Charity Commission for England and Wales under the number: 1185523 whose registered office is at 8 Butt Street, Minchinhampton, Gloucestershire, GL6 9JP.
How we collect information from you
Timothy Syndrome Alliance is the sole owner of the information submitted by you, to us, in any way. We may use the information gathered during our organisation’s stated role, to further our charitable aims and to further understand our supporters and how best we can support you. However, we will not ever sell or rent personally identifiable information that you have submitted to third parties.
The collected information may include:
- Information from your registration to an event via our website (we will only contact you about this event unless you have specified otherwise)
- Information collected during your phone call to the charity
- Information collected through a written consent form you have sent to the charity
- Information that you have given us.
Information collected by a third party
Special category or sensitive information
Some health information that you may tell us falls under what is deemed as sensitive information, such as your genetic data or cardiac reports. As with all the personal information you provide us, you can be assured that any sensitive information will be kept confidential and only shared with your consent.
By completing our medical questionnaires you are agreeing to sharing sensitive data with Timothy Syndrome Alliance.
What are we collecting?
The questionnaire will collect the following data:
- Your name/affected child name
- Ethnic background
- 1st language
- Hospital/consultant names and addresses
- Syndrome diagnosis if known
- Biochemical diagnosis if known
- Genetic Diagnosis if known
Why do we collect this sensitive information?
If approached by research groups for suitable patients for studies and trials. The information we collect in these questionnaires makes finding suitable patients a much quicker and more reliable process.
As a charity we like to ensure that we are providing the best possible service for our patients. Understanding demographics and the disease spread will help to ensure that our services are targeted in the right areas.
Who do we share your data with?
None of this data will be shared with third parties without your knowledge and consent.
None of this data will be used for marketing purposes unless you have opted in.
Retention of data
We will retain your information for as long as we feel necessary. If at any stage you would like us to delete your information you can do this by contacting email@example.com.
We use your data to:
- Provide you with the information you have asked for
- For specific sporting events we will share your email with third parties to process registration (i.e. London Marathon event)
- Administer your donation or support your fundraising, including processing Gift Aid.
- Add you to our database
- Keep a record of your relationship with us
- Comply with financial regulations and the law
If you request to receive no further contact from us, we will keep some basic information in order to avoid unwanted contact in the future, and to ensure that we do not accidentally store details for the same person multiple times.
How long do we keep your personal data?
We keep personal data only for as long as it’s necessary. When it comes to financial donations and Gift Aid, we’re required to keep information such as the supporter’s name, address, Gift Aid declaration form(s) and financial information for 7 years for HMRC auditing purposes.
We’ll retain basic information (such as a supporter’s postcode and transactional history). We believe it’s important to keep basic information of this kind in case someone leaves a gift in their Will to us and we’re required to evidence the nature of their support if it’s contested.
How do we protect personal information?
We use a secure server when you make a donation or payment via our website. We take appropriate measures to ensure that the personal information disclosed to us is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used. All personal information is stored in a central database which has stringent measures in place for restricting access and preventing external data breaches.
We use external companies to collect or process personal data on our behalf. We make sure we only work with companies that comply with the Payment Card Industry Data Security Standard (PCI DSS) and we do annual reviews of their data processes to be certain that they meet our GDPR expectations and requirements. The data we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA) i.e. USA. It may also be processed by persons operating outside the EEA.
We use the following systems for processing and storing your data (click to view their privacy policies):
Unfortunately, no data transmission over the internet can be completely secure. Whilst we do our best to protect your personal data, we cannot guarantee the security of any information which you transmit to us online and you must understand that you do so at your own risk.
By providing us with your personal data, including sensitive personal data such as your state of health, you consent to the collection and use of this information in accordance with the purposes described above and this privacy statement.
You also consent to our transferring your information to countries or jurisdictions outside the UK if necessary for the above purposes. These countries may not provide the same level of data protection as the UK.
Your rights under the GDPR
The General Data Protection Regulation (GDPR) gives you more control over what happens to your personal information. Under this legislation you have the right to:
- be given clear, transparent and free information about how your data will be used;
- access your personal data so that you can see how your personal information is being used by us;
- have your personal information updated and corrected;
- obtain and reuse the personal data you have given to us for your own purposes;
- request that we permanently delete or remove your information where there is no “compelling” reason for us to keep it; and
- request that we don’t use your personal data for specific purposes and, unless we are under a legal or contractual obligation, we must respect your wishes;
The GDPR also prohibits us from using solely automated technologies to build profiles and make decisions about people who support us which will have “legal or similarly significant effects”, unless:
- it’s necessary to fulfil a contract;
- it’s been authorised by a Union or Member state law; or
- you’ve given your explicit consent for your information to be used in this way
How to access and update your personal information
We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate by contacting us using the contact details below. You may also withdraw your consent for us to keep your personal data for some of the above purposes by writing to the address below.
You have a right to access the personal information we hold about you and in certain circumstances to be provided with a copy of that information. You can request this free of charge by email to firstname.lastname@example.org or by writing to: Timothy Syndrome Alliance, 8 Butt Street, Minchinhampton, Gloucestershire, GL6 9JP.
If you are unhappy with the way in which your personal data has been handled you are entitled to make a complaint to the Information Commissioner’s Office.
- Analyse our web traffic using an analytics package. This aggregated data on usage helps us improve the website design, structure, content and function
- Test content on the website. For example, 50% of our users might see one piece of content, the other 50% a different piece of content.
Cookies do not provide us with access to your computer or any information about you, other than that which you choose to share with us.
For further assistance visit your browser or www.aboutcookies.org.
Make a donation
Children with Timothy Syndrome desperately need early diagnosis, treatment and care.
Your contribution will help:
- raise awareness to drive research and clinical development
- enhance scientific understanding
- reduce the isolation faced by families
With your help, treatment and a cure for future generations is closer to being found.
See other ways that you can support us.