Privacy

PRIVACY NOTICE

PACED (“we”, “us” or “our”) takes your privacy seriously. This privacy notice provides you with important information about how we collect and use your personal data and what rights you have in relation to your personal data.

This privacy notice describes how we collect and use personal data about you when you subscribe to our newsletter or request that other materials be sent to you, make a donation, work or volunteer for us, participate in our educational initiatives, register for or attend our events, contact us, visit our websites or otherwise interact with us in the course of conducting our charity work.

Controller
PACED is a “controller”. This means that we are responsible for deciding how we hold and use personal data about you.

Changes to this privacy notice and your duty to inform us of changes
We reserve the right to update this privacy notice at any time. This version was last updated on 01.08.2026.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

TYPES OF PERSONAL DATA WE COLLECT ABOUT YOU

Personal data means any information about an individual from which that person can be identified.
The categories of personal data we collect will vary, depending on our specific relationship with you, and the context. We collect the following categories of personal data about you (as applicable):

Identity Data, such as your name, marital status, title, date of birth, gender and identification documents.
Contact Data, such as your email address, postal address and telephone number.
Financial Data, such as your bank account and payment card details, details about payments to and from you and information about your sources of wealth.
Technical Data, such as your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
Profile Data, such as your interests, preferences, feedback and survey responses.
Professional Data, such as your job title, details of your education and career and any other biographical details relevant to your relationship with us (such as information provided in your application and background check or due diligence information).
Usage Data, such as information about how you interact with and use our website and services.
Marketing and Communications Data, such as your preferences in receiving marketing from us and any information contained in your communications with us.

In certain contexts, we may also collect, store and use more sensitive types of personal data, including information about health (such as details of when you are unable to work due to illness or injury and about your dietary or access requirements), information about your political opinions (such as your status as a politically exposed person) and information about criminal convictions and offences. We will only process such sensitive personal data to the extent permitted or required by applicable law.

HOW YOUR PERSONAL DATA IS COLLECTED

We use different methods to collect data from and about you including through:

Your interactions with us. You may give us your personal data by filling in online forms or by corresponding with us by email or otherwise. This includes personal data you provide when you:

subscribe to our newsletter or request that other materials be sent to you.
make a donation.
apply to work or volunteer for us.
participate in one of our educational initiatives.
register for or attend one of our events.
give us feedback or contact us.

Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. Please see our cookie policy [●] for further details.
Third parties. We may receive personal data about you from various third parties, such as our partners, referees, credit reference agencies or other background check agencies and data analytics providers.
Publicly available sources. We may collect personal data about you from publicly available sources, including from public registers of individuals, companies and charities, news articles, charity research sources and social networks.

HOW WE USE YOUR PERSONAL DATA

We may use your personal data to perform our contract with you, to enable us to comply with our legal obligations and to pursue our legitimate interests (provided your interests and fundamental rights do not override those interests). In limited cases we may also use your personal data on the basis of consent, to protect your or another person’s vital interests or as needed in the public interest. The situations in which we will process your personal data, and the lawful bases we rely on to do so, will vary, depending on our specific relationship with you. We process personal data for the purposes set out in the table below.

Lawful bais	Purpose
Where it is necessary to perform our contract with you or to take steps at your request to enter into the contract	To consider and make decisions about your application to work or volunteer for us, including to undertake any background checks. To administer and manage your engagement, including to pay your fees and to perform any other obligations in or relating to your contract. To consider and make decisions about your donation, including to undertake any donor due diligence. To administer and manage your donation, including to provide requested financial and operational reports concerning the use of your donation and to perform any other obligations in or relating to your contract. To enter into or perform any other contract we have with you.
Where it is necessary for compliance with a legal obligation to which we are subject	To perform appropriate background checks and due diligence in accordance with our legal obligations. To ensure the protection of personal data and other information, property and assets in our possession. To cooperate with competent regulators and other public authorities (including by responding to their requests for information, undertaking internal investigations, and complying with our reporting and other regulatory obligations). For the prevention and detection of fraud and other unlawful acts. To comply with any other obligations to which we are subject under applicable rules and laws.
Where is it necessary for the purposes of our or another party’s legitimate business interests, except where these are overridden by your interests, rights or freedoms	To provide and improve our charitable services and offerings. To verify information you have provided and carry out appropriate background checks and due diligence. To provide support and communicate with you. To manage our relationship with you and other third parties. To organise events. To carry out surveys. To conduct advertising, marketing and other public relations activities which involve you, including newsletters, events, reports and other materials. We may use your information for administrative purposes, including letting you know about changes to our services and for us to understand more about how our website is used. To improve our internal processes and working practices. To ensure compliance with our internal policies. For the prevention and detection of fraud and other unlawful acts. To manage operational, commercial, financial and legal risks. For IT system problem diagnosis, security and business continuity purposes. To prepare and maintain books, reports and records and ensure appropriate governance. To manage insurances, complaints and potential and actual claims. For any other legitimate purpose communicated to you.

If you fail to provide personal data
When we collect personal data directly from you, to the extent not obvious from the circumstances, we will notify you which categories of personal data the provision of which are obligatory, and which categories are voluntary. If you fail to provide certain personal data which is obligatory when requested, we may not be able to enter into or maintain our relationship with you or perform the contract we have entered into with you, or we may be prevented from complying with our legal obligations.

Automated decision-making
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

Direct marketing
We may also send you newsletters, reports and other marketing materials where permitted by applicable law. If you would like to control the way we communicate with you, or if you wish to unsubscribe from all communications, please complete our Communication Control Form available at: https://paced.org.uk/control_form or by following the opt-out links within any marketing communication sent to you.

WHO WE SHARE YOUR PERSONAL DATA WITH

We may share your personal data for any of the purposes described in this privacy notice or otherwise communicated to you. The categories of recipients with whom we may share your personal data include:

Our agents, contractors, consultants and other personnel.
Our suppliers who assist us with legal, administrative, financial, operational and other services.
Our partners with whom we collaborate.
Government and regulatory authorities, law enforcement, judicial bodies, and other third parties where required or permitted by applicable law, regulation, legal process or government authority, and otherwise as necessary or advisable to exercise, establish or defend legal rights, property and safety, including to enforce our agreements and policies and to respond to suspected illegal activity and threats to our systems and services.

INTERNATIONAL TRANSFERS

We may transfer the personal data we collect about you to countries other than the one in which you reside for the purposes described in this privacy notice, some of which may have different standards of protection for personal data compared to the country in which you reside. Where your personal data is transferred to other countries, we will put appropriate safeguards in place, for example contractual protections, to ensure the lawfulness and security of the transfer. Please contact us using the contact details set out below if you would like further information about this.

DATA SECURITY

[Any personal data that you provide us with is stored securely and handled according to our data protection policy.]

We have put in place appropriate security measures to prevent your personal data from being accidentally or unlawfully lost, altered or destroyed or accessed or disclosed in an unauthorised way. In addition, we limit access to your personal data to those personnel and other third parties who have a business need to know.Where practical, we ask third parties to respect the security of your personal data and to handle it lawfully and correctly.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

DATA RETENTION

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider:

The amount, nature and sensitivity of the personal data.
The potential risk of harm from unauthorised use or disclosure of your personal data.
The purposes for which we process your personal data and whether we can achieve those purposes through other means.
The applicable legal requirements.

In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use that information without further notice to you. Once you terminate your relationship with us, we will retain and securely destroy your personal data in accordance with applicable laws and regulations.

YOUR RIGHTS

Under certain circumstances you may have the right to:

Request access to your personal data (commonly known as a data subject access request). This enables you to receive a copy of the personal data we hold about you and information about how we handle it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate personal data we hold about you corrected.
Request erasure of your personal data. This enables you, in limited scenarios, to ask us to delete or remove personal data, for example where there is no good reason for us to continue processing it.
Object to processing of your personal data where we are relying on a legitimate interest to process your personal data and there is something about your particular situation which makes you want to object to processing on this ground.
Request the restriction of our processing of your personal data. This enables you to ask us to limit how we use particular personal data about you in certain circumstances, for example whilst we are investigating its accuracy.
Request the transfer of your personal data to another party.

These rights are subject to various limitations and exceptions. If you would like to discuss exercising any of these rights, please contact us using the contact details set out below.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who does not have the right to receive it.
If your request for access is clearly unfounded or excessive we may refuse to comply with it.

Right to withdraw consent

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you may have a right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us using the contact details set out below. Once we have received notification that you have withdrawn your consent, we will within a reasonable timescale stop processing your personal data for the purpose or purposes you originally agreed to, unless we have another lawful basis for doing so.

Complaints

If you are unhappy with how we process your personal data, you have the right to make a complaint to us. If you wish to make a complaint about how we have handled your personal data, please email us at: info@paced.org.uk. You may also have the right to make a complaint to the UK’s Information Commissioner’s Office (www.ico.org.uk) or your local data protection authority, but we ask that you please contact us in the first instance so that we have the chance to put it right.

HOW TO CONTACT US

If you have any queries regarding anything mentioned in this privacy notice or want to exercise any of the rights mentioned, please email us at: info@paced.org.uk.