Privacy Policy

WHO WE ARE

Girl Effect is a non-profit organisation committed to protecting and respecting the personal data that we hold. This privacy notice describes why and how we collect and use personal data and provides information about individuals’ rights. It applies to personal data provided to us, both by individuals themselves and by others. We may use personal data provided to us for the purposes described in this privacy notice or as made clear before collecting personal data.

WHAT IS PERSONAL DATA?

Personal data is any information relating to an identified or identifiable living person. When collecting and using personal data, we are transparent about why and how we process personal data. We process personal data for a number or purposes, and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each purpose are set out in the relevant sections below.

The personal data that is provided to us is provided either directly from the individual concerned or from a third party acting on behalf of an individual. Where we receive personal data that relates to an individual from a third party, the third party should be aware that the individual may be informed of the necessary information regarding the use of their data. Where necessary, reference may be made to this privacy notice.

TYPES OF PERSONAL DATA WE PROCESS

We collect and process the following types of personal data:

• names;
• addresses;
• phone numbers;
• user names;
• email addresses and other contact information;
• records of your correspondence with us;
• details of your visit to the website;
• information about your experiences with our work;
• personal information you provide when you apply to work for us;
• any other information provided to us.

HOW WE COLLECT PERSONAL DATA

We collect personal data:

• Through your engagement with our services and our interviews with you;
• Through your registration for events;
• Through your contacting us with enquiries and comments;
• Through your request for publications, information, and news about our work;
• Through your applications for jobs with us;
• Through your request for information about our events;
• Through our use of cookies and pixel tags (please see our COOKIES POLICY).

WHY DO WE PROCESS PERSONAL DATA AND THE LAWFUL BASIS?

There are several reasons why we will process the personal data that you may provide to us:

• To provide advice and ongoing support;
• To engage with you via the services we offer;
• To undertake research and analysis;
• To undertake recruitment exercises;
• To manage an ongoing relationship such as attendance at events;
• For marketing with your consent.

Under the UK GDPR, the lawful bases we rely on to process personal data are:

HOW LONG DO WE KEEP PERSONAL DATA FOR?

Any personal data will not be retained for any longer than is necessary for the lawful purposes for which it was collected and processed. We may, in some cases, keep personal data for longer to establish, exercise, or defend our legal rights. In addition, personal data may be securely archived with restricted access and other appropriate safeguards where there is a need to continue to retain it.

Once the retention period is reached, we will delete your personal data.

SHARING PERSONAL DATA

We will only share personal data with others when we are legally permitted to do so or where you have provided consent. These may include our technical and infrastructure partners. When we share personal data with others, we put arrangements and security mechanisms (a contract or a data sharing agreement) in place to protect the personal data and to comply with our data protection, confidentiality, and security standards. This also includes Non-Disclosure Agreements.

Occasionally, we may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, to establish, exercise or defend legal rights.

PROCESSORS

We may contract with external organisations who act as a data processor on our behalf. This may include our website and chatbot platforms. Any personal data shared with a data processor for this purpose will be governed by appropriate safeguards and contracts under data protection law.

LOCATIONS OF PROCESSING

We may contract with external organisations who act as a data processor on our behalf. This may include our website and chatbot platforms. Any personal data shared with a data processor for this purpose will be governed by appropriate safeguards and contracts under data protection law.

LOCATIONS OF PROCESSING

The personal data that we collect from you will be processed within the UK. However it may be necessary, in some cases, to transfer personal data outside of the UK/ EEA to other Girl Effect offices. Any such transfers will be fully compliant with the requirements of the legislation which includes having undertaken a Transfer Risk Assessment and having an International Data Transfer Agreement in place. We will take all reasonable steps to ensure that your personal data is treated securely, in accordance with this privacy notice.

INDIVIDUAL RIGHTS

Individuals have certain rights over their personal data and Girl Effect is responsible for fulfilling these rights as follows:

• Individuals may request access to their personal data held by us.
• Individuals may ask us to rectify personal data submitted to us.
• Individuals may request that we erase their personal data.
• Individuals may have other rights to restrict or object to our processing of personal data and the right to data portability.
• Individuals may request information about, or human intervention into, any automated data processing that we may undertake.

If you wish to exercise any of these rights, please send an email to: dataprotection@girleffect.org

OUR CONTACT INFORMATION

If you have any questions about this ‘Privacy Notice’ or how and why we process personal data, please contact us at dataprotection@girleffect.org or via mail at 151 Wardour Street, London W1F 8WE or 228 Park Ave S, PMB 33237 New York, New York 10003-1502.

CHANGES TO OUR PRIVACY NOTICE

Updates to this Privacy Notice will appear on this website.

This Privacy Notice was last updated in August 2024