Different Strokes is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us, make a donation, purchase goods, attend events, use our services, or otherwise interact with us.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Who We Are

Different Strokes is a UK charity supporting younger stroke survivors and their families.

Contact Details

Different Strokes
9 Canon Harnett Court
Milton Keynes
Buckinghamshire
MK12 5NF
United Kingdom

Email: info@differentstrokes.co.uk
Telephone: 01908 317 618

What Personal Data We Collect

Depending on how you interact with us, we may collect:

• Name
• Postal address
• Email address
• Telephone number
• Date of birth or age range
• Donation and payment information
• Information you provide when completing forms, surveys or enquiries
• Event registration information
• Communication preferences
• Website usage information collected through cookies and analytics technologies

We only collect personal data that is relevant and necessary for the purposes described in this policy.

How We Collect Personal Data

We collect personal data when you:

• Contact us by email, telephone or post
• Complete forms on our website
• Sign up for newsletters or updates
• Register for events or services
• Make a donation
• Purchase products from our online shop
• Participate in surveys, feedback requests or campaigns
• Visit and use our website

How We Use Your Personal Data

We use your personal data to:

• Respond to enquiries and provide support
• Process donations and purchases
• Administer events, services and programmes
• Send information you have requested
• Manage volunteer and supporter relationships
• Improve our website, services and communications
• Monitor website performance and usage
• Meet legal, regulatory and safeguarding obligations
• Maintain appropriate financial and administrative records

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

Where processing is necessary to fulfil a purchase, donation, event registration or other service you have requested.

Legitimate Interests

To administer our charity, improve services, communicate with supporters and ensure the effective operation of our website and activities.

Consent

Where you have agreed to receive marketing communications.

Legal Obligation

Where we must process personal data to comply with legal, regulatory, accounting or safeguarding requirements.

Marketing Communications

If you choose to receive updates from us, we may contact you by email, post or telephone regarding our services, campaigns, fundraising activities and events.

You can withdraw your consent or update your communication preferences at any time by:

• Clicking the unsubscribe link in our emails
• Contacting us using the details provided above

We will comply with applicable UK privacy and electronic communications laws when sending marketing communications.

Donations and Payments

Online donations and payments may be processed by trusted third-party providers acting on our behalf.

Payment card details are processed securely by authorised payment service providers and are not stored on our servers.

We recommend reviewing the privacy policies of any third-party payment or donation provider used during your transaction.

Sharing Your Personal Data

We do not sell your personal data.

We may share personal data with carefully selected third parties who provide services on our behalf, including:

• Website hosting providers
• Payment processors
• Donation platform providers
• Email communication providers
• Analytics providers
• Professional advisers and auditors
• Regulators, law enforcement agencies or authorities where required by law

All third parties are required to keep your information secure and only process it in accordance with our instructions and applicable data protection laws.

International Transfers

Some service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including adequacy regulations or approved contractual safeguards.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

Retention periods vary depending on the nature of the information and the purpose for which it is processed.

When personal data is no longer required, it will be securely deleted or anonymised.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

• Ensure the website functions correctly
• Remember user preferences
• Understand how visitors use our website
• Improve website performance and user experience

We may use analytics services, such as Google Analytics, to help us understand website traffic and usage patterns.

We also use Google Ads to advertise our services. When you arrive on our website from one of our adverts, Google may use cookies to tell us whether you went on to take an action. This helps us understand which adverts are useful, and we only use these cookies with your consent.

You can find out how Google uses this information at https://policies.google.com/technologies/partner-sites.

You can control cookies through your browser settings or through any cookie preference tools provided on our website.

Please note that disabling certain cookies may affect website functionality.

Website Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

These measures include:

• Secure hosting environments
• Encryption of data in transit using TLS (Transport Layer Security)
• Access controls and authentication measures
• Regular monitoring and security updates

While we strive to protect your personal data, no method of transmission over the internet can be guaranteed as completely secure.

Your Rights

Under UK GDPR, you may have the right to:

• Access your personal data
• Request correction of inaccurate personal data
• Request erasure of your personal data
• Restrict processing of your personal data
• Object to processing in certain circumstances
• Request transfer of your personal data to another organisation (data portability)
• Withdraw consent where processing relies on consent

To exercise any of these rights, please contact us using the details provided above.

Complaints

If you are unhappy with how we process your personal data, please contact us first so we can try to resolve the issue.

You can read our complaints policy by clicking here.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk
Telephone: 0303 123 1113

Third-Party Websites

Our website may contain links to third-party websites. These websites have their own privacy policies and we are not responsible for their content, privacy practices or security arrangements.

We encourage you to review their privacy policies before providing any personal information.

Children’s Privacy

Our services are generally intended for adults and young stroke survivors. We do not knowingly collect personal data from children without appropriate consent where required.

If we become aware that personal data has been collected inappropriately, we will take reasonable steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page and will take effect immediately upon publication unless otherwise stated.

Contact Us

If you have any questions about this Privacy Policy or our handling of personal data, please contact:

Email: info@differentstrokes.co.uk
Telephone: 0345 130 7172