OIA, OGF, OCT, OCP and Oasis Hubs
Welcome to the privacy notice for Oasis International Association, Oasis Charitable Trust, Oasis International Foundation, Oasis Community Partnerships and Oasis Community Hubs (referred to in the rest of the document collectively as ‘Oasis Charities’).
This sets out how the Oasis charities deal with people’s data. It’s quite long we’re afraid – but we’ve broken it down into bite size sections so that you can home in on the most relevant areas for you.
1. Introduction and Structure of Oasis
At Oasis, we believe in open, honest and healthy relationships. It is this belief, along with compliance to the law, which shapes the way we communicate with people and manage personal data.
We are committed to protecting the privacy of the individuals whose data we process and to processing all data in a lawful, open and transparent way. We aim to ensure that any information you give us is held securely and safely.
Oasis in the UK is a family of charities:
Each of these charities share the same aim – to transform communities. But often we operate quite distinctly, and relate differently to different groups of people. As such, we think it makes sense to have separate privacy notices for some of the different Oasis charities. Please click on the hyper link of each charity to read their privacy notice.
This notice covers the work of Oasis International Association, The Oasis International Foundation, Oasis Charitable Trust and Oasis Community Partnerships. Primarily, you will come across these parts of Oasis if you give money to us, buy products from us or use our community services in the UK.
This privacy notice also covers the four websites which The Oasis International Foundation is responsible for managing –oasisInternational.org, oasisuk.org, oasis.foundation and openchurch.network.
If you have given your data to Oasis in a country outside the UK, we can’t access it. Similarly if you’ve given it to us, we can’t pass it on to them. We are separate legal organisations. If you’ve given data to us and to another Oasis country, you have a separate relationship with Oasis in the UK and Oasis in the respective country.
Therefore, if you have given data to Oasis in more than one country and would like the information to be deleted or have a question about it, you would need to contact each country individually.
Oasis Community Partnerships is part of the Oasis family of charities in the UK and operates a number of sub-charities - or ‘wholly owned subsidiaries’ - located around the country; we call them Oasis Community Hubs. They are our local community transformation charities and are listed below.
The community Hubs support the efficient local delivery of our community work and their activities are also covered by this privacy notice.
Oasis Community Hubs
2. The data we collect and why we collect it
We will always endeavor to be clear, honest and transparent with you whenever we collect and use your personal data. It’s a commitment that reflects who we are and we hold ourselves to high standards.
Below, we’ve sketched out the different reasons why we may collect and use your data. We’re not saying that we’ll use ALL your personal information for all of these purposes – it will totally depend on the nature of your relationship with us, and how you interact with the Oasis charities and Oasis Community Hubs.
The categories of service user information that we collect, process, hold and share include:
We use this data to:
The categories of volunteer information that we collect, process, hold and share include:
We use volunteer data to:
The categories of employee information that we collect, process, hold and share include:
We use employee data to:
3. The lawful basis for sharing data
Okay, here comes the legal bit. Don’t worry – it’s pretty straightforward.
We collect and use personal data under General Data Protection Regulation (GDPR). We must have a lawful basis to collect and use your personal data. The law allows six legal purposes which organisations can rely on to process people’s personal data. Four of them are particularly relevant to our organisation:
4. Sharing your data
Oasis charities will never sell your data or swap it with other charities or organisations for the purposes of their own marketing.
We do however, routinely share user information with:
See the supplementary section at the end of this document for specific detail around data sharing in this particular Oasis Community Hub. It will detail the third parties that we share data with in this Hub.
In all instances, we have agreements with third-party agencies and suppliers to ensure that your personal data is protected and is only used for the specific purposes that we direct. Our Community Hubs and Oasis charities only make use of selected third-party services to process data on our behalf in accordance with our policies.
We may share user information with other third parties if we are legally obligated to, if we have specific consent to do so or where we need to in order to fulfil the service we are providing to you (we’ll make it really clear when we are sharing information in this way).
Like all major charities, we have a range of fundraising and marketing activities that help us raise income or promote the aims and objectives of the charity. We use a range of marketing activities and channels such as direct marketing and face-to-face activity, advertising (print, broadcast and digital) and public relations for marketing, fundraising, and income generation. This may include talking to you about specific appeals, promoting ongoing campaigns in which you can play an active role, competitions, commercial trading activities, sponsorships, events or volunteering opportunities. We may also ask if you are able and prepared to Gift Aid any of your donations.
There are three main ways in which you might give us your personal data and at the same time may also wish to hear from us about our fundraising, campaigning and other marketing activities:
Let’s unpack these three in more detail.
Signing up to one of our mailing lists
This is pretty straightforward. If you opt to sign up to one of our mailing lists, we’ll ask for your contact detail and then ask you to take a ‘positive action’ to show that you consent to us contacting you. Usually this will be through ticking a box, although we can take verbal consent so long as we’re really sure you want to hear from us. We’ll assume that you’re happy for us to contact you using the details you give us.
At that point you’ll be added to the relevant mailing list and will receive updates, newsletters, appeals and information on campaigns around the relevant topic. In all these communications they’ll be opt out and unsubscribe options. However, if we haven’t engaged with us in any way after five years we’ll ask you if you still want to hear from us and if we don’t hear anything, we’ll take you off the mailing lists.
Giving us money
As a charity dependent on generous donations we can’t express how grateful we are to the people that give us money. We endeavour to be hugely respectful and careful with any data you give us in this process.
If you donate money to us, we figure you may want to hear news from us. So when you donate online, we’ll give you the chance to sign up to one of our mailing lists – but you don’t have to take it.
If you don’t sign up to a mailing list we will only contact you around matters relating to your donation. We will keep your details recorded for six years. We have to do this in order to satisfy legal requirements. After this time has expired we’ll delete your details unless we have your consent to keep them.
Buying a product, signing up to a course or using one of our community services
When you buy a product, sign up to a course or use one of our community services, we may give you the chance to sign up to one of our mailing lists (or of course, you may already have signed up to one). But you don’t have to do so.
If you are not signed up to one of our mailing lists, we will only use your information to contact you for something transactional about that product (i.e. delivery status), course (i.e. instructions on how to get to the venue) or community services (i.e. details on how to get involved).
There will be people that we at Oasis feel we have legitimate interest to store the personal information of and make direct contact with. These people will usually fall into one or more of the following people:
Before we contact anyone under the basis of legitimate interest we will conduct an internal assessment to be sure we are within our rights to do so.
If you get in touch with us to say you want to withdraw your consent for us to hold and process your data for marketing purposes, we’ll immediately remove you from all the mailing lists you’re currently subscribed to.
We’ll then do an internal trawl to find out exactly what data we hold on you across the organsiations listed in the introduction of this privacy notice.
As a general rule, we’ll delete all that information. The only exceptions are if we have another legal basis to retain your or some of your data. For example, if you have made a donation in the past 6 years we will need to retain your information to satisfy the requirements of HMRC and our auditors.
There are a few people that we may HAVE to share your data with. For example, if you’ve given money to us and claimed gift aid (again, thank you) than we have to share that info with HMRC. Similarly your donation may have been processed through PayPal and we use various other financial management systems where we would enter some of your data.
There’s also some third party suppliers we may need to give your personal data to if we’re going to be communicating with you. For example, if we’re going to post you our Christmas newsletter we’ll need to give your name and address to our printers. We have really good agreements in place with third party suppliers to ensure your data is protected. Just let us know if you want details.
What we never do however is sell your data or swap it with other charities or organisations.
In some limited circumstances we may combine personal information you have given us with information that is available in the public domain. This is to create a profile of your interests and preferences that help us to get to know you better and engage better with you. Anything like this would be in the public domain – published biographies, employment interests, media coverage, social media. If you’re not happy about this, please do get in touch with us at firstname.lastname@example.org.
We securely hold your data as outlined within the Oasis Data Retention Policy, Oasis Information Security Policy and Oasis Data Protection Policy.
The length of time each category of data will be retained will vary on how long we need to process it, the reason it is collected, and in line with any statutory requirements. After this point the data will either be deleted or rendered anonymous.
Please find below a list of some of our key data retention periods:
For further information on Oasis Community Partnerships data retention (including the table for all our retention periods), please see the Oasis Data Retention Policy. Please use the contact information provided earlier in this document to obtain copies of this and other related policies.
In terms of IP addresses, all of our websites do track and store these. We need to for security reasons. However, we make sure that our web hosting company regularly delete these.
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Most browsers allow you to refuse to accept cookies. For example:
Blocking all cookies will, however, have a negative impact upon the usability of many websites. If you block cookies, you will not be able to use all the features on this website, including but not limited to making donations.
You can also delete cookies already stored on your computer. For example:
Again, doing this may have a negative impact on the usability of our website.
From time to time, we will make changes to this privacy notice to keep it up to data and relevant. Please make sure you check regularly to see what’s changed. If you are signed up to one of our mailing lists and we ever we make significant changes to this policy we’ll update you on this proactively.
Where Oasis charities and Oasis Hubs are using your personal information on the basis of your consent, you have the right to withdraw that consent at any time. You also have the right to ask us to stop using your personal information for direct marketing purposes.
Under data protection legislation, anyone we hold information about has the right to request access to, and see information about, their data. To make a request for access to your personal information, contact your Oasis Community Hub or you can contact:
National Data Protection Lead
Oasis Community Partnerships
1 Kennington Road
020 7921 4200
You also have the right to: