Privacy Policy 1. EOS Network and your personal data EOS Network (hereafter “we” or “us”) is committed to protecting your privacy. This policy explains how we collect and use your personal data (this is information that could identify you) and whom to contact if you have any questions. 2. How we use your personal data and why We use your personal information that you give us to provide you with the services, products or information you have requested and to further our charitable aims below. The table below gives more detail of these uses. We may also process your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or those of another person. How we process the information of healthcare professionals Personal Data Purpose Legal Basis Name and contact details Profession and specialism(s) Location Estimate of the number of patients in this disease area To stay in touch with you and to invite you to engage with our work. To provide you with information you have asked for, including our newsletters. To further our charitable objectives. Your consent. To check the information we hold on you is up to date. To administer and audit our accounts. To generate reports on our work, services and events. Our legitimate interest in maintaining our records. To administer and communicate with you about an event (in-person or online) for which you have registered and for which we are responsible for processing participant data. Our legitimate interest in administering the event. Name and contact details Profession and specialism(s) Location To display on our Find a Doctor Map and/or our Professionals Global Directory Map. To connect you with another healthcare professional or a potential patient. Your consent. Name and contact details Information on transactions and donations made by you to us and information as to whether you are a taxpayer We may process certain personal data in relation to donations that you make through our website or via websites such as JustGiving. We may process personal data in relation to fundraising or where we think you may be interested in donating to us. Our legitimate interest in administering donations that we receive and processing Gift Aid. Our legitimate interest in fundraising. Name and contact details Records of your communications with us To keep records when you share comments and opinions with us, ask us a question or make a complaint. Our legitimate interest in keeping records of communications. Website usage data (IP address, browser type, length of visit etc.) To analyse the use and performance of our website e.g. how many visitors to the site we receive? Has a campaign resulted in an increase in visitors? What is our reach? To measure the usage of the resources and tools we have developed. To target advertising, communications and marketing effectively. Our legitimate interest in operating our website. Consent (where information is collected by non-essential cookies) How we process the information of other people Personal Data Purpose Legal Basis Name and contact details To stay in touch with you and to invite you to engage with our work. To provide you with information you have asked for, including our newsletters, or to put you in touch with someone else who may be able to help you. To further our charitable objectives. Your consent. To check the information we hold on you is up to date. To administer and audit our accounts. To generate reports on our work, services and events. Our legitimate interest in maintaining our records. To administer and communicate with you about an event (in-person or online) for which you have registered and for which we are responsible for processing participant data. Our legitimate interest in administering the event. Health, lifestyle and demographic information Where you do not have an eosinophilic gastrointestinal disease, your relationship if any with someone who does (e.g. parental, carer). To help us understand your situation and needs and provide you with relevant services and information accordingly. Our legitimate interest in supporting individuals with or affected by, eosinophilic gastrointestinal diseases. Sensitive personal data (that is, information about your health or ethnic origin) is only processed with your consent. Health, lifestyle and demographic information To further our understanding of the disease and its symptoms, needs and treatments. To produce reports and resources for professionals ,patients and to improve public awareness. These will only include aggregated (de-identified) data. Our legitimate interest in contributing to the knowledge base of, and supporting and advocating for individuals with or affected by, eosinophilic gastrointestinal diseases. Sensitive personal data (that is, information about your health or ethnic origin) is only processed with your consent. Name and contact details Information on transactions and donations made by you to us and information as to whether you are a taxpayer We may process personal data in relation to fundraising, or where we think you may be interested in donating to us. Our legitimate interest in administering donations that we receive and processing Gift Aid. Our legitimate interest in fundraising. Website usage data (including your IP address, browser type, length of visit etc.) To analyse the use and performance of our website e.g. How many visitors to the site we receive? Has a campaign resulted in an increase in visitors? What is our reach? To measure the usage of the resources and tools we have developed. To target advertising, communications and marketing effectively. Our legitimate interest in operating our website. Consent (where information is collected by non-essential cookies) Name and contact details Records of your communications with us To keep records when you share comments and opinions with us, ask us a question or make a complaint. Our legitimate interest in keeping records of communications. Name and contact details Employment and work experience history and any other information in your CV Sensitive personal data, including health, racial, ethnic and/or disability information Any unspent criminal convictions or pending court cases To process applications and assess your suitability if you apply to volunteer or work for us. Our legitimate interest in identifying suitable candidates for volunteering or job vacancies. Sensitive personal data and data relating to criminal convictions or offences is only processed with your consent. 3. How we collect your personal data We collect personal data: directly from you: when you register with us, when you submit information through our website, when you sign up to our events or any other direct contact from you; automatically from our website: when you use our website, we collect your personal data using automated methods such as cookies. We will receive data about how you use our website, including the length of your stay, page visits, your IP address, and information about the device you are using to access the website; and from trusted partners: we may receive your personal data through organisations who we work with where they have your consent to share your data, including: independent event organisers and fundraising sites like JustGiving; external volunteering websites if you sign up to volunteer for us through them; and subcontractors acting on our behalf who provide us with technical, payment or delivery services. previous employment references and independent agencies providing DBS checks (for EOSN employees and volunteers only). 4. How we share your personal data We share your personal data with the following categories of third parties: Payment processors in order to process your donations. When you make a donation to us, enter into the EOS Network Lottery, or purchase one of our clothing items, we use third party payment services to process the transaction. We do not collect any payment information (such as payment card details) ourselves and such information submitted by you when making a donation is not made available to us. Our payment service providers handle the information in accordance with their own privacy policies. The payment service providers we use are Stripe, Donr, Enthuse, Zettle, Paypal Giving Fund, GoCardless, JustGiving. Supporters, patients and healthcare professionals. Part of our mission is to connect people so they can find appropriate support or share information. We may share your personal details with someone else in our network in order to do this, but we’ll always ask you first. Marketing and event administration when you attend one of our events in-person or online. The service providers we use are e.g. Beacon CRM, Zoom, Miscrosoft Teams/Outlook, Eventbrite, Mailchimp, Hubspot. Survey providers where we use surveys to communicate with you or collect information or feedback from you. These include providers such as Mailchimp, Typeform, SurveyMonkey. Social media platforms, such as Facebook and Instagram. This partnership involves the creation of 'lookalike' audiences, where we match the interests, behaviours, and demographics of EOS Network's supporters with others who could benefit from our information, support, and engagement with our charity. Additionally, we may use audience preference services offered by such platforms to target supporters who have previously responded to EOS Network's fundraising and marketing efforts. Using platforms in this way is an important way in which we can reach more people who are likely to be interested in our work. You can change your settings via the social media platforms. Other service providers, such as for IT hosting and maintenance purposes. These service providers are contractually required to keep your personal data secure and to use it only as is necessary to provide the services to us. We use Beacon CRM and Google ads and analytics to understand our reach, Access for website hosting and Agile for IT support. 5. Where we transfer and how we store your personal data Some of our service providers run their operations outside of the UK, including in countries with different data protection laws to the UK. In these circumstances we put in place appropriate safeguards to ensure that your information and rights in respect of your information are protected adequately in accordance with UK data protection law. Your personal data is securely stored. We keep your personal data only for as long as is required to carry out the purposes for which it was collected, taking into account any applicable legal, accounting, reporting or regulatory requirements which specify how long certain records must be kept. 6. How we keep your information and preferences up to date You can contact us at [email protected] to withdraw consent to the processing of your personal data for specific purposes, and request that certain personal data we hold about you are updated or deleted, at any time. We may also contact you with an option to update your details. 7. Cookies We use various cookies to operate our website, to help us understand how it is used and to help us target our advertising effectively. We’ve given more details of these cookies below. Some of these cookies are essential for our website to work. You can accept or reject the non-essential cookies via the banner that appears when you first access our website or by clicking the “Manage Cookie Preferences” button at the bottom of the webpage. You may also delete and block all cookies from any website within your web browser settings if necessary (note that doing so will impact the functionality of our website). Our website runs on Content Management Systems (CMS), which uses cookies to function. Cookies are small parcels of information routinely used by websites, such as an option you have selected or a page you have visited. Most cookies expire as soon as your session expires unless a user has self-selected options and bookmarked pages within our website. Cookies help us understand how the website is used and to target our advertising effectively. We have given more details about these cookies below. We use essential website cookies, including session and persistent cookies, to ensure our website's basic functionality and enhance user experience. These cookies may store preferences and login information and facilitate secure access. We also employ analytical cookies to gather data on site usage for improvement purposes. Please note that these cookies are necessary for our website to run smoothly, and your consent is not required for their use. We also utilise non-essential cookies, such as third-party and advertising cookies, to enhance your experience further. These cookies may track your online behaviour and preferences to provide personalised content and targeted advertisements. Your consent is required to use these cookies, and you can accept or reject the non-essential cookies via the banner that appears when you first access our website or by clicking the “Manage Cookie Preferences” button at the bottom of the webpage. You may also delete and block all cookies from any website within your web browser settings if necessary (note that doing so will impact the functionality of our website). Most modern browsers allow you to manage cookies saved on your computer, for further information and a list of which cookies we use please see our Cookies Policy. 8. Your rights You have various rights in relation to your personal data. In particular, you have the right to: request copies of your personal data that we hold; request any inaccuracies or omissions in your personal data be corrected; and, in certain circumstances, object to the processing of your personal data, or ask us to limit the processing of your personal data, or request your personal data is erased. Additionally, where we process your personal data based on your consent, you have the right to withdraw this consent at any time. To make a request, please contact us at [email protected] or EOS Network, PO BOX 12844, Colchester, Essex, England, CO7 5AQ, 9. Complaints If you have any concerns about our handling of your personal data, please get in touch with us at [email protected] or EOS Network, PO BOX 12844, Colchester, Essex, England, CO7 5AQ. You can also make a complaint to the UK data protection regulator, the Information Commissioner’s Office (ICO) at: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF ICO helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk 10. Contact us By our website: https://www.eosnetwork.org/forms/contact-us By post: EOS Network, PO BOX 12844, Colchester, Essex, England, CO7 5AQ. By email: [email protected] By telephone: +44 (0)333 772 1309 Last updated: 30.01.24 Manage Cookie Preferences