Data Protection

At the CFHF we want you to feel safe and secure in the knowledge that we protect your personal information in compliance with the General Data Protection Regulation (GDPR). We want to provide you with total transparency in regards to how and why your personal data will be stored and used by the charity. We take protecting your personal information very seriously and will take every reasonable precaution to ensure that the data you disclose to us remains confidential. Below we have endeavoured to answer any questions you may have regarding our Data Protection Policy.

If you have applied for a grant or a holiday we collect your data to verify and assess your application. As it is only possible to apply once every two years we then keep a record in our database of when you last applied through the charity for a grant or a holiday. We must also retain each application as they are part of our legally required financial records.

As a friend of the CFHF we ask for your personal data so that we can send you any updates about news, events and fundraising.

Names, address, email address, phone numbers
Date of birth
Records of your correspondence with us
Video recordings and images where you have given consent
Details of your CF Team/Practitioner

This information may be collected via:

Any paper forms you fill out
Any digital forms you fill out
Any email and telephone correspondence that you engage in with us
Any correspondence you engage in with us over social media
Any publicly available source(s)

Depending on the purpose for which you have provided your personal details to the CFHF, they may be used in a variety of ways though we will never use your details without your consent.

We may use your personal data for the following:

To respond to your enquiries
To update you about any news, fundraising and events taking place at the CFHF
To verify an application made to the CFHF
To book flights and transfers (Family Revitalise Programme only)
To further our charitable aims
As and when required by law

If you no longer wish to receive communications from the CFHF please let us know by contacting us on 020 7616 1300 or at info@cfholidayfund.org.uk

We do not now, we have not in the past, nor will we ever sell your personal data to a third party organisation for its marketing or fundraising purposes. We have and will always ask explicit permission before sharing any personal information with a third party organisation or on our social media sites.

Examples of sharing your personal details with a third party include:

In unusual circumstances the CFHF may collaborate with other organisations to achieve the best possible outcomes for children under the age of 18 and their families. With your explicit permission we share your personal data with these organisations.

We are legally bound to share limited data with the police or social services in certain situations. This includes to prevent or detect crime and the prevention of benefit fraud.

We take every precaution to ensure that your personal information remains secure both on our database and any hard copies that we may have obtained. We are unable to guarantee that any information sent through other channels such as social media will remain confidential as communication over the internet is not 100% secure.

As applications made to us are considered financial records we are legally bound by the Charities Act (2011) to retain them for seven years. After this time all records will be deleted/destroyed.

The right to be informed about the collection and use of your personal data.
The right of access allows you to ask for a copy of the personal information we have collected and retained as well as any supplementary information.
The right of rectification: while it is your responsibility to ensure that the information you provide to us is accurate and complete, in the event of any inaccuracy or incompletion we would be more than happy to rectify the data. You can request a correction to you details either verbally or in writing and expect a response within 30 days.
The right of erasure allows you to request the deletion of your data however as successful applications are classified as financial data we have a legal obligation to retain them for seven years.
The right to restrict processing: in certain circumstances you have the right to ask that the charity stores your personal information without using it however we do have to note that this may result in an incomplete application.
The right of portability: you are able to request a copy of the information you provided to the charity to be used for your own purposes across different services.
The right to object: There are circumstances in which you can object to the processing of your personal data.