Privacy Policy

Introduction This Privacy Notice applies to the website found at disrupt4her.org, including all information and materials contained on it (“the Website”). This Website is managed by Plan Limited, a wholly-owned subsidiary of Plan International Inc. (“Plan Ltd”). Our Privacy Notice Plan Ltd is committed to ensuring the privacy of all users of the Website and will comply with data protection law when processing personal data. Personal data is any information that can be used to identify a living individual. Data controller of this Website – Plan Limited, Dukes Court, Block A, Woking, Surrey GU21 5BH Our Data Protection Officer is the contact for all data protection queries and concerns – Data.Privacy@plan-international.org This Privacy Notice governs all pages on the domain disrupt4her.org and sets out how Plan Ltd collects and processes personal data via the Website. It does not apply to pages hosted by other organisations, including third-party sites. The Website may be linked to the websites of such other parties, but those other sites may have their own privacy policies which apply to them. It is important that you read and understand this Privacy Notice so that you are aware of how and why we might collect and process your personal information, and what your rights are under the data protection legislation. By using the Website, you consent to the terms of this Privacy Notice. Plan Ltd may change the terms of this Privacy Notice from time to time and, if such changes are made, we will notify you of those changes by contacting you if appropriate or by publishing the updated Privacy Notice on our website. Your continued use of the Website will be on the terms of this Privacy Notice as amended from time to time. What personal data we collect and store The type and amount of information about you that we collect and store depends on how you use the Website. You can access most of the pages on the Website without telling us who you are and without revealing any personal information. Plan Ltd collects anonymous logs during user visits to the Website. This information may be used to create aggregate statistics about how the Website is used (see our Cookies Notice below for more information about this). We only collect personal information about you via the Website if you choose to provide it when you:–

1. subscribe to our email updates
2. sign-up to become a member, or
3. email us via the ‘Contact us’ facility

In these instances, we will collect, store and process your name, email address and country of residence plus any additional information that you might provide when using the ‘Contact us’ facility. Why we process your personal data Plan Ltd will only process your personal data in connection with the purpose for which you provided it. In other words, in order to send you information you requested and / or email updates about the work we are doing. In this way, Plan Ltd’s processing of your personal data is based on your consent. Who your personal data is shared with Your personal data will be shared internally within Plan Ltd so that we can fulfil the purpose for which you provided it. Where necessary, we will share your information with our service providers in order to allow them to deliver services to Plan Ltd, for example, if we contract with a service provider to host the Website. Otherwise, we shall only share your personal information if we are required to disclose it by law. Plan Ltd will never sell the personal data that you provide. Sending personal data outside the UK Your personal data may be transferred outside the UK if, for example, Plan Ltd contracts with a third party service provider to perform functions on our behalf, (such as a company that hosts the Website). Where your personal information is transferred to a service provider or Plan International office based outside of the UK, we will ensure that your personal data is protected to the same extent as in the UK through one of the following safeguards: Transfer to a country (in the European Economic Area or otherwise) whose national privacy legislation ensures an adequate level of protection of personal data as determined by the UK government; or put in place a contract with the service provider or Plan International fundraising office that means they must protect personal data to the same standards required in the UK. Opting out of receiving messages from Plan Ltd If you have opted to subscribe to our email updates, we will hold your personal information for as long as you continue to subscribe to our mailing list. Any e-mail we send you will enable you to opt out of receiving further e-mails from us. If you choose to unsubscribe from receiving further emails, we will immediately stop sending you any communications and we will remove your personal information from our system within six months. You can also request that we remove you from our mailing lists by contacting our Data Protection Officer (see details below). How your personal data is protected Plan Ltd takes the security of your personal data seriously. There are internal policies, procedures and controls in place to try and ensure that your personal data is not lost, accidentally destroyed, misused or disclosed, and is only accessed by its employees in the performance of their duties. Where Plan Ltd engages third parties to process personal data on its behalf, they do so only the basis of written instructions, and under a duty of confidentiality. Third parties are also obliged to implement appropriate technical and organisational measures which are compliant with data protection legislation to ensure the security of personal data. What your rights are Under certain circumstances, by law, you have the right to:-

1. Request access to the personal information Plan Ltd holds about you. This is available through a Subject Access Request and must be made in writing to the Data Protection Officer (Data.Privacy@plan-international.org)
2. Require Plan Ltd to change or rectify incorrect or incomplete personal data about you
3. Request Plan Ltd to delete or stop processing your personal data, for example, where the personal data is no longer necessary for the purposes of processing

You are not required to pay any charge for exercising your rights (unless you are making a Subject Access Request and Plan Limited reasonably concludes that it is manifestly unfounded or excessive). If you make a request Plan Limited has one month to respond to you. If you would like to exercise any of these rights please contact the Data Protection Officer at Data.Privacy@plan-international.org or in writing to Data Protection Officer, Plan International Headquarters, Block A, Duke’s Court, Woking, Surrey, GU21 5BH Complaint resolution Plan Ltd will strive to resolve any complaints relating to its processing of personal data promptly and fairly. Plan Ltd will cooperate with data protection authorities and other regulators, agencies, and tribunals involved in resolving such complaints. In the first instance, please raise your concerns to data.privacy@plan-international.org. If you are unhappy with how we have dealt with your personal data or your request / complaint, please note that you can make a formal complaint to the supervisory authority in the country where you live or work. If you believe there has been an infringement of your rights under the General Data Protection Regulation (“GDPR”), please contact the supervisory authority in the UK or the relevant EU member state. In the UK the supervisory authority is the Information Commissioner’s Office, which you can contact via its website or via its address: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF ICO Helpline number: +44 (0)303 123 1113