Privacy Policy

Introduction

Relay For Life Rossendale is committed to protecting your privacy and ensuring your personal data is handled securely and transparently. This policy explains how we collect, use, and protect your information.

We are registered with Cancer Research UK and comply with UK GDPR and Data Protection Act 2018.

Information We Collect

Personal Information

• Name and contact details (email, phone, address)
• Date of birth (for age verification)
• Team and fundraising information
• Payment and donation details
• Emergency contact information (for event participants)

Technical Information

• IP address and browser type
• Cookies and usage data
• Device information
• Pages visited and time spent

How We Use Your Information

• To process your registration and manage your participation
• To process donations and issue Gift Aid claims
• To communicate event updates and important information
• To ensure safety and security during events
• To improve our services and website
• To comply with legal obligations

Legal Basis for Processing

We process your data under the following legal bases:

• Consent: When you sign up or opt-in to communications
• Contract: To fulfill our obligations when you register
• Legitimate Interest: To improve our services and ensure safety
• Legal Obligation: To comply with charity and tax regulations

Data Sharing

We may share your information with:

• Cancer Research UK: As our parent charity organization
• Payment Processors: To process donations securely
• HMRC: For Gift Aid claims
• Emergency Services: If required for safety reasons
• Service Providers: Who help us run events (under strict contracts)

We never sell your data to third parties.

Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Opt-out of communications at any time

Data Security

We protect your data using:

• SSL/TLS encryption for data transmission
• Secure password hashing (Argon2id)
• Regular security audits and updates
• Access controls and staff training
• Secure backup procedures

Cookies

We use cookies to improve your experience. You can manage cookie preferences using our cookie banner or browser settings.

See our Cookie Policy for more details.

Data Retention

We retain your data for:

• Active participants: Duration of participation + 2 years
• Donors: 7 years (for Gift Aid and tax purposes)
• Marketing: Until you unsubscribe
• Legal requirements: As required by law