Privacy Policy

---

Privacy Policy 

The purpose of this Privacy Policy is to inform you about how Against Breast Cancer Trading Ltd (ABC) collects and uses personal data. 

Our aim is not to be intrusive, we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous security measures and procedures to reduce the risk of, and protect it from unauthorised access or disclosure. 

All personal data is collected and processed in line with the requirements of the latest legislation. Personal data collected will be used to ensure we communicate with you relevant information about ABC. 

By purchasing goods or downloadable content from ABC you are giving us permission to control and process your personal data specifically for the purposes identified, normally for a minimum period of 36 months from the date provided. You may withdraw consent at any time by contacting the Data Protection Officer (dpo@againstbreastcancer.org.uk). The facility to unsubscribe from email messages is embedded in each email we send. 

Why does ABC need to collect and store my personal data? 
We need to collect personal data for accurate, relevant and timely correspondence purposes. We are committed to ensuring that the information we collect and use is appropriate for this purpose, and does not constitute an invasion of your privacy. 

Will ABC Share my personal data with anyone else? 
We may pass your personal data on to third-party service providers contracted to ABC in the course of dealing with your request.  

• The categories of personal data and the purpose of the processing as well as the legal basis for doing so which will be either consent, contractual or legitimate interest. If the processing is based on the legitimate interests of ABC or a third party, information about those interests. 
• How long the data will be stored. Details of your rights to correct, erase, restrict or object to such processing. Information about your right to withdraw consent at any time and how to lodge a complaint with the supervisory authority. 

• Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data. 

• The source of personal data if it wasn’t collected directly from you. The identity and the contact details of the person or organisation that has determined how and why to process your data. In some cases, this will be a representative in the EU. 

• Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing. 

• Recipient(s) or categories of recipients that the data may be disclosed to. 

• If we intend to transfer the personal data to a third country or international organisation, information about how we ensure this is done securely. The EU has approved sending personal data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure there are specific measures in place to secure your information. 

 To access your information you will be required to provide two of the following three forms of identification; passport, driving licence or birth certificate. Once ID has been provided and approved individual record will be released.