Who we are

FONSA is the shorthand name for Friends of Nablus and Surrounding Areas which is a registered Scottish Charity number SC038512.

Our website is www.fonsa.org.uk

Our objectives are to further education and to relieve poverty in and around Nablus which is one of the largest cities in Palestine.

What personal data we collect and why we collect it

We collect only limited personal data but we do our best to manage it with care and according to the law.

We maintain a contact list of those who have asked to be on our email lists.

We maintain a record of those who have unsubscribed to ensure that we do not send them any further communications.

All donors are recorded and we maintain records as required by tax law, particularly for those who have agreed to us collecting Gift Aid on their behalf.

We also maintain records of donors who have asked for our Gift Cards (which represent donations).

We do not normally collect health data but some donors with particular conditions have asked us to seek recipients in Palestine for those with similar conditions. 
You should also note any collection and retention of sensitive personal data, such as data concerning health. In addition to listing what personal data you collect, you need to note why you collect it. These explanations must note either the legal basis for your data collection and retention or the active consent the user has given.

We would have the usual access to those who follow us on Twitter and Facebook although we do not currently make use of any such information for marketing purposes (unless explicit consent has been given by the recipient).

Comments

If we solicit or allow comments, we will retain this information to allow us to consider and possibly to respond.  This can include the collection of the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Your comments might elicit a response from us but they will not entitle us to add you to our newsletter distribution – if you do want us to send you our newsletter, please give explicit permission through our contact form (if we have one active).

Media

We do not normally allow donors to upload media files, but all uploaded files are usually publicly accessible.

If you, or anyone working with or for us, uploads any images you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

We usually provide a contact form to enable you to get in touch with us or for us to send you newsletters and other communications.

We would hold any information you provide.  You have the right to withdraw your consent to any such communications whenever you wish.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

For trustees and volunteers only: If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

This site is not currently part of an analytics package and we have not yet installed a WordPress plugin that provides analytics services but we might begin to use one.  In this case, we will respect your rights and collect only anonymised data and allow you to opt out of analytics tracking insofar as it is allowed/required by law. By default, WordPress does not collect any analytics data. However, many web hosting accounts collect some anonymous analytics data.

Who we share your data with

We have no explicit data-sharing arrangements with any other organisation. 

Under certain circumstances (e.g. where a donor is involved in one of our projects) we may work with them and partner organisations (in the UK, Palestine or elsewhere) to achieve their objectives.

We do have some data provided to us by our bank (Cooperative Bank).  We also have relationships with donation-processing organisations (mainly Charities Aid Foundation) but we do not normally pass any information to them – rather, donors provide information to them and they then pass it to us.  In this process, they respect any restrictions on personal data that a donor might have stipulated.  But they also respect any legal requirements to provide information to us which we might need to ensure that our processes are compliant with legal and regulatory requirements.

For the avoidance of doubt, any donor who provides information as part of a donation will not be automatically added to any communication from us (unless they have given consent as part of their donation; and we might write once to ask for such permission from you).

We do not know of any other third-party providers with whom we share any information from data collected through this site, including partners, cloud-based services, payment processors, and third-party service providers.

We take our responsibilities seriously and do our best to comply with best practice.

How long we retain your data

Financial records are kept for at least 6 years to enable us to respond to any requests from legal and regulatory authorities.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

Trustees and volunteers will have an account on this website which will store the personal information they provide in their user profile.  Website readers may see some or all of this. They may also see information about who authored, edited, approved or otherwise played a part in the page becoming published on the site.

What rights you have over your data

If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

We work with people and organisations in Palestine. We respect data protection laws and do not send your data abroad except in specific cases where that is either explicitly or reasonably essential to meet a donor or partner’s objectives (for example, if we co-operate with someone on a project in Palestine they may participate in communications with our partners and others in Palestine)

Apart from such rare exceptions, your personal data is never normally shared with anyone outside our organisation or outside the UK. 

Visitor comments may be checked through an automated spam detection service.

Our contact information

You can contact us at info@fonsa.org.uk

Where appropriate, please address any concerns or questions to our Data Protection Officer.

Additional information

Our site is not used for commercial purposes.  We are a charity and undertake all activities to collect donations, undertake fundraising or otherwise to support our charitable objectives.

How we protect your data

The Trustees of FONSA are all volunteers and seek to protect your personal data and respect your wishes.

What data breach procedures we have in place

We avoid collecting or holding any highly sensitive information.  For example, any credit card or debit card donations you make will be processed by third parties such as Charities Aid Foundation.

What third parties we receive data from

Third parties, including our bank (Cooperative Bank) and donation-processing partner (Charities Aid Foundation), supply us with information either explicitly consented to by the donor or as required by law.

For the avoidance of doubt, it is worth noting that anyone who fund-raises for us might be using a third-party provider of their own choosing.  We welcome all such support but we do not usually have any control over that third party.  Such a third party would also supply us with consensual and legally-required data.

What automated decision-making and/or profiling we do with user data

There is no automated decision-making on our site (or elsewhere within our charity).

Industry regulatory disclosure requirements

FONSA is regulated by the Office of the Scottish Charity Regulator (OSCR) and complies with their requirements and recommendations.