Privacy policy

1. This Privacy Policy sets out the terms on which we collect, process and handle personal data which you provide to us while using the website located at www.nras.org.uk (“Site”) and/or an app (“App”) and/or the services provided from the Site and the App (“Service”). The Site and the App, together with all content on the Site and the App, is owned or controlled by the National Rheumatoid Arthritis Society, a company registered in England under Company Number 1134859 with offices at 4 Switchback Office Park, Gardner Road, Maidenhead, SL6 7RJ UK (“NRAS, “we” or “us”). We are registered as a Data Controller with the UK Information Commissioner’s Office. Personal data provided to us via your interactions at events, by post, email or phone are also covered by this policy.

2. To provide the Service, it is necessary for us to collect and process certain personal information (“Data”), including some or all of the following: name, address, date of birth, gender, email addresses and/or mobile phone numbers, financial transaction data, IP addresses, web-browser details, operating system details, activities and personal preferences relating to the provision of NRAS services, billing details and/or other information relevant to the Service. Data may also include certain so-called “Sensitive Data” such as information about your health (including without limitation data regarding those living with or affected by Rheumatoid Arthritis and/or Juvenile Idiopathic Arthritis). NRAS takes special precautions in relation to such Sensitive Data in accordance with applicable law. You are responsible for ensuring that all personal information you provide to us is updated and correct at all times.

3. The Data will be stored together with any additional information you provide to us, and will be used to provide you with, and to improve, the Service. We collect, store and process certain personal information to provide you with information and tools to allow you to use the Service, to perform research, marketing and related activities, to supply other administrative services , to respond to enquiries and/or for other record-keeping purposes and to improve the Site, the App and the Service. From time to time, we and/or our trusted partners may contact you with offers that may interest you or to inform you of other products and services. Additionally, our third party service providers may have access to Data to carry out contracted services and (if you indicate that you are interested in receiving information about a particular third party’s products or services or if you opt in to receive certain products or services through us) we may provide your personal information to such third parties for the purposes of fulfilling your requests. All Data is processed by us in accordance with applicable data protection legislation and we will keep your personal information only for as long as is necessary.

4. By subscribing to the Service, you agree that your details (including your email address/street address) may be used to keep you informed about future events and news. You can unsubscribe at any time by either using the link within the relevant email or newsletter, or by contacting us via data@nras.org.uk.

5. We may, from time to time, expand or reduce our business which may involve the transfer of certain divisions or assets of our charity to other parties, and Data, where relevant, may be transferred to such third parties. Additionally, from time to time we may transfer Data to locations outside the European Economic Area, some of which may have different data protection laws to the UK or the EU, or no data protection laws. In all such cases, we transmit such information only to entities that comply with this policy and applicable law.

6. The Site, e-news bulletins, NRAS magazine and/or the App may display links to certain third party websites. We encourage you to read the individual privacy policies of those sites before providing any of your personal information to them.

7. We may use ‘cookies’ while you access the Site. A cookie is a small file which can be downloaded on a device when you access the Site and is then sent back to the Site each time you access it. Cookies are useful because they allow us to recognise your device and your user preferences. We use cookies to set users’ preferences, gather basic tracking information (such as login and password), date, time of visit and preferences and monitor the presentation of the Site. This information allows us to personalise the user experience and to improve the quality of the Site navigation. We also use analytical cookies, which allow us to recognise and count the number of users on the Site and to see how users move around the Site when they are using it. This helps us

improve the way the Site works, for example by making sure users find easily what they need. If you do not want cookies on your computer, you can remove them by changing your browser settings.

8. Please note you have the right to request access to and rectification or erasure of Data or to object to or request the restriction of processing of your Data. If you do not want us to retain or use your Data in any way or at any time, you may withdraw your consent (i.e. “opt out”), by contacting us at data@nras.org.uk. Information about concerns or complaints may be made to the Information Commissioners Office in the UK via https://ico.org.uk/concerns.

9. We may change this Privacy Policy from time to time and such changes shall be effective from the date and time the revised Privacy Policy is posted on the Site and/or the App. We encourage you to review our Privacy Policy on a regular basis so that you will be aware of any changes to it.

10. If you have further questions about our privacy practices, please contact us by e-mailing data@nras.org.uk.

[Updated June 2019]