Privacy notice

Who we are

We are a Florida registered organization with EIN: 92-3057239 and and Dun & Bradstreet D-U-N-S® Number is: 127628669. 
It's Possible Foundation is the controller of your personal information and is responsible for it. This privacy policy explains how we, It’s Possible Foundation may collect and use personal data.

Contact details

If you have any questions regarding this Privacy Notice, or wish to exercise your data protection rights, please write to our Data Protection Officer using the contact details below:

E-mail: info@itspfoundation.org

How and why we process personal data

Below is a list of the different ways in which we may process personal data. You can click each heading for more information about how and why we process data in this way.

When making a donation or a payment to itspfoundation.org

We will process your personal data when you make a donation or payment to It’s Possible. We collect the necessary data to process and verify this transaction, and set up a direct debit with your bank if you have chosen to give in this way.
Any payment detail (such as credit or debit card received throug) we receive through our website are passed securely to our payment processing providers who meet the required Payment Card Industry (PCI) Security Standards.
We will retain information regarding your transaction (such as your name, contact details, and donation amount) for six years for internal audit purposes and in accordance with the Limitation Act (1980).

When enquiring about our activities or services

We will process your personal data when you contact us about our activities or services. Typically this will involve processing your name and contact details in order to respond to you, or any other personal data you volunteer to us in your correspondence.
The amount of time we retain this information will vary depending on the nature of your query. It is likely we would retain this data for no more than two years in accordance with our email retention practice. It is possible we will retain this data for a longer period if you correspond with us on a regular basis or are contacting us in order to raise a complaint.

When we send administrative communications to you
We will process your personal data in order to communicate with you using the contact details you have provided for administrative purposes. This could be to administer a donation, provide you with information regarding a fundraising event you have asked to take part in, or in relation to GiftAid claims.

When we send marketing communications to you
We will process your personal data in order to send you marketing communications where we have a lawful basis to do this.
We will seek your consent for any direct marketing by electronic means (e.g. email, telephone or texts). We currently send the following marketing materials:
Updates about our work – including newsletters, magazines and other publications.
Campaigns – information about our campaigning activities and their progress.
Appeals and fundraising activities – including requests for donations, information about how you can leave us a gift in your will, and how you can take part in fundraising events or fundraise on our behalf, as well as the impact all of this has on our work.
Events – including details of our challenge events and other sponsored activities. If you sign up to take part in an event we will also send you administrative communications about how you can take part.
Shop products – including information about products offered by our online shop.
Volunteering – information about how you can get involved with volunteering for It’s Possible Foundation.

We will also rely on our legitimate interest in order to send you postal marketing content when we collect your postal address from you unless you opt-out of receiving communications in this way.
You are in control of how we use your personal information for marketing and fundraising purposes, and can update your preferences at any time. If you would like to contact us about your marketing preferences, please email supportercare@itspfoundation.org or call us on 012 345 678 901 – our Supporter Care Team will be happy to answer any queries you may have. If you do ask us to stop sending marketing communications, please note that we will continue to send you administrative communications as needed.
If you ask us to stop sending you marketing materials, we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us.
We will retain your personal data for marketing communications for as long as we have an active supporter relationship with you. If you have not donated, volunteered, or otherwise been an active supporter of It’s Possible then we will cease processing your personal data for marketing purposes three years from the date of your last activity with It’s Possible.
Please note that we may retain your marketing preferences for a lifetime if you have registered with the Fundraising Preference Service in order to prevent marketing from all UK charities. This is so that we can ensure we never send marketing material to you per your request.

When you visit our website
'Cookies' are small pieces of information stored on your computer or mobile device when you visit our website, to collect information and identify you

If you provide your consent for marketing and analytics cookies then we may use information about your use of the It´s Possible Foundation website to help us analyse trends and, where it is lawful to do so, display It´s possible Foundation advertising to you on third-party websites.

For more information please read our cookies policy.

When you campaign, fundraise, take part in an event, or meet with us
The personal data we will process may vary in each specific circumstance and you will be advised of this as you sign up to your respective activity. In all circumstances we will seek to process the minimum amount of personal data that we need in order to ensure the smooth running of an activity, and to ensure your safety and the safety of others. Occasionally we may need to ask for data regarding your health (such as food allergies) to ensure we maintain a safe environment.
We will typically process data only for as long as it is required for an event and for a short period thereafter (e.g. six months to a year). Depending on the activity, we may be legally required to retain information for up to six years.

When you volunteer with us
If you apply to be a volunteer with It´s Possible Foundation we will ask for your personal data as part of the application process. This will include your name, contact details, references, emergency contact details, information about unspent criminal convictions, and any relevant health and disability information we require in order to make sure we have a safe and welcoming environment.
While volunteering, It’s Possible Foundation staff will maintain incident logs throughout the day in order to keep track of any issues and ensure the safety of everyone on site. It is possible your personal data may be recorded in these incident logs in relation to your activity as a volunteer. These logs are reviewed at the end of a volunteering event and all trivial data is securely destroyed and any serious incidents are typed up more formally for volunteer managers to review. It is also possible that serious incidents will be reported to our Safeguarding Team (please see the safeguarding section in this privacy notice for more details of this).
We will securely destroy most of our volunteer personal data within a year of your last volunteering event, but we are required to retain certain data regarding references for six years. We will also retain a list of all volunteers and the events they volunteered at for six years from the date of the latest event in case any complaint or incident is brought to our attention during this period.
In the event that your behaviour as a  It’s Possible Foundation  volunteer was unsatisfactory we will retain a record of your name and contact details in order to ensure you are not selected as a volunteer during future application rounds. We may also share this information with our volunteer partners to assist them in ensuring safer recruitment practices.

When responding to a complaint
We will process your personal data in order to understand, investigate, and respond to a complaint you raise with us. It´s Possible Foundation will process the minimum amount of personal data that is necessary to respond fully to your complaint, and may ask you for further details where we require them.
It’s Possible Foundation retains all complaint data for at least six years from the date your complaint has received a final response from us in accordance with the Limitation Act (1980).

Internal audits and investigating fraud
We may process your personal data in the course of internal audits or investigating potential fraud. We will only process the minimum amount of personal data in order to complete an audit or investigation.

When responding to a safeguarding concern
It’s Possible Foundation may process your personal data in connection to a concern reported to our Safeguarding Team. The amount of personal data processed will vary depending on the nature of the incident, but we will process the minimum amount of personal data that we need in order to ensure your safety and the safety of others.
The amount of time we will retain safeguarding reports will vary depending on the concern raised with us and will be assessed on a case by case basis. Typically, we will retain a safeguarding report for six years in line with the Limitation Act (1980) but the level risk posed to individuals will be our decisive consideration in determining a retention period.
If a safeguarding concern carries a high level of risk then we may need to share this information with law enforcement agencies, or with another organisation if we are asked for a job reference from them.

When working with large donors and government agencies
It’s Possible Foundation regularly works with large donors and/or government agencies who are providing financial support to a particular aid project. Sometimes  It’s Possible Foundation may be asked to share small amounts of supporter personal data with respect to certain appeals (most commonly post codes, but on rare occasions this may include names and addresses). We may also be asked to share the personal data of the individuals in the communities we are working to help with donors involved in a project.
This is carried out in order to check that  It’s Possible Foundation is being truthful about the donations it is receiving, and that the money being raised is being spent in accordance with donor and government agency expectations. For example, the UK Government will only agree to aid match certain appeals after checking the validity of our donations.
It’s Possible Foundation will only share this data where we have both a valid lawful basis to do so, and where we have made arrangements for the data’s security and swift destruction. Your personal data will not be used for any other purpose by the organisations we may share it with.

Supporter and Wealth Analysis
We rely on our Legitimate Interest to conduct analysis of the personal data supporters share with us. We may analyse the personal data supporters share with us in conjunction with other information that we obtain from publicly available sources and business sources. This may include information about your parliamentary constituency, census records, and business records. 
We do this in order to gain insights into the people who support  It’s Possible Foundation, such as the approximate age, gender, and approximate household composition of  It’s Possible Foundation supporters. We also wish to understand the giving patterns of supporters and the propensity of our supporters to take action in supporting our appeals and causes. This analysis helps us to understand our audience more fully, tailor our communications appropriately, and improve the quality of our supporters’ experience with us.
We also carry out wealth screening where we have identified an individual who may possess a high net-worth. Wealth screening is the practice of using personal data to identify high profile and wealthy individuals who may be able to support our work in a greater capacity.  
We identify high net-worth supporters in two ways. One way is through analysis of our supporter database to find supporters who have made large donations to  It’s Possible Foundation (usually supporters who have made single donations of approximately £1000 or more). We may then conduct background research on these individuals from publicly available sources in order to learn more about them and ensure we contact them in an appropriate manner. Please see the section on carrying out background research of publicly available information for further details of this. 
The other way we carry out wealth screening is by performing prospect research. We analyse from publicly available sources as well as databases which source from publicly available information, such as Factary Phi and Wealth X, in order to identify high-profile and wealthy individuals who may be interested in supporting  It’s Possible Foundation. We process this data in order to assess a prospect’s potential giving capacity to support  It’s Possible Foundation, and whether we think they will have an affinity with  It’s Possible Foundation’s mission. We retain records of these individuals for only as long as it takes to assess their suitability to support  It’s Possible Foundation. Data regarding prospects who we decide not to contact is securely destroyed at the end of this assessment. Data regarding prospects we decide to contact is kept for the duration of that individual’s relationship with  It’s Possible Foundation in accordance with our usual retention schedule. 
We may use third party suppliers to undertake these activities on our behalf and share your data with them to the extent required to perform this analysis (usually full name, post code, donation values, and  It’s Possible Foundation event participation). Please rest assured that our suppliers will not share this information with any other organisation and it will only be used for the purposes set out above. Additionally, we may use and disclose information in aggregate (so that no individuals are identified) for marketing and strategic development purposes.  
You can opt out of your data being used in any of the ways described in this section at any time. Please email at info@itspfoundation.org and they will be happy to assist you. 

When carrying out background research of publicly available information
We rely on our legitimate interest to conduct background research of publicly available sources into individuals connected to trusts, foundations, companies, or holding significant personal wealth that may be able to support  It’s Possible Foundation’s work. We may collect personal information from open social networks (e.g. LinkedIn and Twitter), company websites, political and property registers, news archives, the Charity Commission, Companies House, Bloomberg, and databases sourced from publicly available information such as Factary Phi and Wealth X, in order to evaluate a person’s wealth and giving capacity, and whether it is appropriate for  It’s Possible Foundation to contact these individuals. 
We may also conduct research into public figures and individuals where we may be about to enter into a business relationship or partnership with. 
It’s Possible Foundation will also often conduct network mapping of our donors and prospective supporters. Network mapping is a visual representation of connections among individual and organisations. Most often relationship maps are used to show how people and organizations are connected, and relationship mapping is invaluable for generating new business leads as it allows  It’s Possible Foundation to not only find new connections, but to utilise existing connections as well. 

When you provide personal data indirectly
We may obtain your data when it is shared with us by third parties such as professional fundraisers, partners, or subcontractors acting on our behalf, or through fundraising sites such. These organisations will have their own privacy policies, and/or statements so please do ensure you check when providing your personal information to them.
We always carry out due diligence on organisations who provide personal data to us to ensure it is lawful and secure. Please note that It´s Possible Foundation never buys or sells personal data.

When you have given other organisations permission to share it
ou may have provided your details to another organisation that works with  It’s Possible Foundation. For example, in order to sign up to a third-party event, or if you purchased a produc. When working with other organisations, we work to ensure it’s completely clear to you that your information will be shared with  It’s Possible Foundation. The information we get from these third parties depends on your settings and the permissions and choices you have provided, so you should regularly check what you have agreed that these third-party organisations may share with us or with others. Please note that  It’s Possible Foundation never buys or sells personal data.