Privacy Policy

We collect personal data to help us to process your requests, keep in touch with you, to help us to interact with you in the most effective way, and to run our services and charitable activities.

Examples of why we process your personal data include:

• To deliver and administer music therapy in our centres and through our partners.
• To monitor and support the quality of music therapy delivered by our therapists.
• To provide services or information you have requested.
• To keep notes of conversations that you have with our team, as a reference if you want to revisit the conversation later.
• To notify you of changes to our policies when these affect you.
• If we need to do so to comply with a law, process or regulatory requirement.
• To check with you on how you want us to contact you, and record these preferences.
• To ensure that content from our website is presented in the most effective way for you and your computer.
• To help us publicise the work that we do.
• To keep you updated on our work and the impact of your support.

Further examples of why we process your personal data include:

• To make sure you know about events that you can participate in as a Nordoff and Robbins supporter.
• To invite you to participate in campaigns.
• To send you fundraising appeals.
• To process donations or other payments, and verify financial transactions to protect you from fraud.
• To process Gift Aid claims and Gift Aid declarations.
• To process a legacy or gift that you leave in your will.
• To support you as a volunteer.
• To process your application for and manage your studies as an MMT, PhD or short course student.
• To process a job application, you may make with us.
• To keep a record of you as a service provider or supplier to us and process related payments.

The personal data that we collect about you will be based on how you interact with us, but we collect the following information from many of our supporters:

• Your name
• Your postal and email addresses
• Your telephone number or numbers
• Your occupation and place of work (e.g. if you work for one of our corporate supporters)
• Your date of birth (e.g. if you receive therapy from us or study on one of our degree courses)
• Video and audio recordings made during music therapy sessions
• Details of any correspondence that we have had with you. For example, if you call our fundraising team they may make a note of the conversation to help with your enquiry, or our reception team may record your details to pass on to the relevant department.

Further information that we collect from many of our supporters:

• How you would like to hear from us, and when you told us this.
• Details of any donations that you have made to us or any fundraising appeals that you may have responded to.
• Whether or not you have made a Gift Aid declaration, and when you did so.
• Events that you have taken part in or enquired about.

There is also other information that we may collect and hold in specific circumstances. For example:

• Your bank account details if you set up a direct debit with us or credit card details if used for donations, or if you are a self-employed supplier.
• Health information that you or your health specialist may give us as part of a referral for music therapy.
• Health information that you give us if you are participating in an event to help us ensure your safety e.g. food allergies.

We use Cookies on our website. You can find more information in our Cookie Policy.

We will always identify an appropriate lawful basis before processing your personal data. Depending on the circumstances, this may include consent, legitimate interests, legal obligation, contract, vital interests or public task where applicable.

For some activities, we also process special category data, such as health information. Where we do this, we will identify both a lawful basis under UK GDPR Article 6 and a special category condition under Article 9, and where relevant a Data Protection Act 2018 condition.

You have the right to object to us processing your data on the grounds of our legitimate interests. If you would like us to stop using your data on this basis, email [email protected]. You will also see an option to opt-out of our communications where we are using the legitimate interest basis, and you can also tick this to ask us to stop sending these.

In some cases, we have a legal or statutory duty to process information, and we will always comply with any legal requirement. We may also process your personal data where it is necessary to carry out the terms of a contract which we have with you (or when we are in the process of forming that contract with you).

It is important that you understand your legal rights around your personal data and how we may use it.

This privacy policy ensures that you are informed about how we will process your personal data. You might also see messages on some of our forms (or otherwise when we collect personal data from you) that explain why we ask for specific pieces of information from you.

If you feel that any of the information that we hold about you is incorrect, do let us know so that we can look into it.

You can request that we restrict processing of your data, as an alternative to deleting it – this means that we will keep the data but stop processing for most purposes. You may want to exercise this right if you feel that the data is inaccurate, that our processing of it is unlawful, whilst we progress a request from you to object to processing, or if we have no further need of the data, but you require us to keep it in relation to the establishment, exercise or defence of a legal claim.

You have rights to avoid being subject to decisions based solely on automated processing which has a significant effect on you. At Nordoff and Robbins we do not carry out any such processing.

You have the right to request a copy of certain personal data to have it transferred to another organisation in certain circumstances.

You should know that there are some circumstances where these rights may not apply, but where this is the case we will always explain this to you. Please contact us at [email protected] if you have any questions or concerns about your rights and how we collect and use your personal data. You also have the right to make a complaint direct to the UK’s data protection authority, the Information Commissioner’s Office (ICO).

Most often we will collect data directly from you, a next of kin, a legal carer or guardian, or an individual who has power of attorney for someone accessing our services. For example, when you or someone who you care for are referred for music therapy at one of our centres or in a partner organisation. Whenever we ask for information from you, we will explain why we are asking for it (including by reference to this policy), and you will always be given a choice about how we communicate with you.

The music therapist that you or the person you care for works with will need to know some information about you or the person you care for so that we can be sure they are delivering our service safely and appropriately. Our administrators and the service managers also need access to this data to make sure our music therapy service runs efficiently and effectively.

We use your personal data to:

• help you decide which services are suitable for you such as an individual session or group work
• help us to work with you to provide the services you receive
• make sure we have up to date contact details for you
• make sure the services you receive are safe and effective
• work effectively with others who also provide care and support in your life.

Other people within Nordoff and Robbins will also need to use some of your personal data to:

• check the quality of our services
• help with planning new services
• help investigate any worries or complaints you have about our services.

When we need to share information about you with external agencies providing care and support to you, we will agree this with you. We will not share your personal data, unless:

• you ask us to
• we ask and you give us permission, for example in fundraising and marketing campaigns
• we have good reason to believe that not sharing the information would put you or someone else at risk particularly in cases of safeguarding.

Personal data is kept confidential and is not disclosed inside or outside Nordoff and Robbins without your agreement or a lawful reason. One such reason might be to assist the emergency services if someone is severely unwell or in danger. Another reason might be to help police in preventing or detecting a crime.

You have the right to see or obtain copies of your personal data held by Nordoff and Robbins. You may wish to ask us to update or correct certain details. If you wish to make an enquiry about your personal data, please write to us at:

Head of Music Services

Nordoff and Robbins

2 Lissenden Gardens

London

NW5 1PQ

Or email: [email protected].

You can ask for us to delete all information we hold on you at any time by contacting Nordoff and Robbins. You should however be aware that we would no longer be able to provide a service for you if we are unable to hold your information.

We would only use information about you including photos and videos if you have given explicit, additional consent for this in writing to us. We will also check with you if there are any exceptions such as not wanting your image on social media or only certain images being used. You can withdraw your consent at any time. To do so, please contact the Communications Team.

We will keep written records, securely stored electronically, about your music therapy with us for seven years after you stop using our services so that the information can be used for any follow-up activity that may be needed.

Unless you have given us explicit consent for us to use any film or audio recordings of your sessions publicly, the recordings will be deleted within six months of your music therapy coming to an end.

If you have given your consent for specific public use of your audio/visual recordings and we consider the materials to be of specific value for our educational and music therapy promotion purposes, we will keep them for up to 30 years. However, you can withdraw your consent at any time. To do so, please contact the Communications Team and we will then delete this content from our files.

We will only allow your music therapist to take a copy of any recordings or written information about you if you have given us explicit consent in writing for this to happen.

We have a duty to those who use our music therapy services to promote ourselves and our work; to responsibly raise as much money as possible to further our charitable aims; to update you on our progress; and to operate in an effective way. So if you have opted-in to hear from us, we may send you marketing and fundraising materials and products via email. We always pursue these interests in a respectful manner but you have the right to object to us processing your data for this purpose and can always ask not to receive such information by emailing [email protected].

If you are looking to support our work, we will mainly process your data on the basis of your consent. Whenever we ask for information from you, we will explain why we are asking for it and you will always be given a choice about how we communicate with you. Examples of this include:

• To send you marketing by SMS (text message)
• To send you direct messages through social media or WhatsApp
• To process health information that you give us if you are participating in an event, for example any food allergies you have.

When you give your consent for us to contact you, we do not treat this as valid indefinitely. However, we understand that our supporters want to continue to hear from us whilst they have an active relationship with us, and for a period afterwards. Here are some examples of what we mean by an active relationship:

• If you make a donation or sponsorship payment to us, including regular gifts.
• If you sponsor someone fundraising on our behalf, for example sponsoring a marathon runner, and agree for your details to be passed to us for administration of your sponsorship gift.
• If you fundraise on our behalf (for example by taking part in a fundraising event or organising a gig).
• If you tell us that you have left us a gift in your will.
• If you take a campaign action for us, such as signing a petition.

Further examples of what we mean by an active relationship:

• If you have an ongoing conversation with one of our fundraisers about our work.
• If you are actively engaging with our email communications.

We will consider your consent to be valid whilst you take these actions, and then for seven years afterwards, to enable us to keep you up to date with our work and to offer you other ways you might choose to support us. At the end of this time period then we will get in touch with you to re-confirm that you are happy to continue to hear from us.

You can withdraw your consent at any time. If you wish to do so, or have any questions on this, please contact us:

• Email: [email protected]
• Telephone: 020 7267 4496
• Post: Data Protection, Nordoff and Robbins, 2 Lissenden Gardens, London NW5 1PQ

We will make it easy for you to tell us if you would like to receive marketing communications from us and hear more about our work, and the ways in which you would like to receive this information (post, email, SMS and phone). We want to make sure that we keep in touch with you when, and how you want. Every marketing communication that we send will outline how you can update us on your preferences, and all of our marketing emails have an unsubscribe link.

If you tell us that you do not want to receive marketing communications, we will remove you from our list and will not contact you further with marketing communications. We will ensure that our records are updated as soon as possible once we receive your instructions. For our postal communications, it can take up to 28 days for any change to take full effect because of the production times for our campaigns.

You can opt into marketing communications, update your preferences or unsubscribe by contacting us at [email protected].

There are some administrative messages that we legally must share with you, which are not affected by how you have told us you would like us to contact you for marketing materials. Examples of these are:

• Confirming the details of any direct debit that you set up with us, including your bank account and payment details
• Confirming where you have made a Gift Aid declaration orally, so that we can give you the information on the tax implications of this.

If we send you one of these messages, we will only use it to share the detail that we have to legally provide you with and will not use it for marketing.

When you have provided support for our charitable purposes after 5th February 2026, for example by making a donation or participating in one of our fundraising events, we may rely on what is known as “soft opt-in” to contact you by email about similar charitable purposes.

This means we may send you emails about our charitable activities, events, and campaigns, and other ways to support our work. We will only do this where your contact details were provided us in the context of your engagement with us, the messages are relevant to our charitable purposes, and you were given the opportunity to opt out when your details were collected and in every subsequent message.

You have the right to opt out of receiving fundraising or marketing emails at any time and can do that by clicking the unsubscribe link in any email or emailing us at [email protected].

When we rely on the soft opt-in, our lawful basis is our legitimate interest to promote our charitable purposes in accordance with the Privacy and Electronic Communications Regulations (PECR).

We aim to ensure that our communications are relevant and not excessive, limited to what you might reasonably expect when engaging with us, and respectful of your preferences and privacy.

Understanding our supporters helps us to provide them with a really personalised experience and makes sure that we use our marketing budgets in the most efficient way. We may collect the following additional information about our supporters:

• Information on the size and composition of your household
• Information about your interests and hobbies
• The age band that you fall into.

If you’ve made a donation on our website, attended an event or enquired about our music therapy services, you’ll have been sent an automated email to thank you for your generosity, support, or to let you know next steps.

These are some of the types of emails you may receive from us:

• Donation successful – you’ll receive a thank you from us for your generosity via the donation platform, such as Fundraise Up or Enthuse. This also acts as confirmation for your records.
• Donation unsuccessful – you’ll receive an email from us via the donation platform letting you know that your donation has not gone through.
• Event thank you – we’re so grateful for your support at our events. You’ll receive a thank you email from us.

Another type of email you may receive from us is:

• Applying for music therapy. If you refer yourself, or someone you know, for music therapy you’ll receive an automated thank you from us to acknowledge your form submission and letting you know next steps.

If you receive one of these types of emails, it doesn’t mean that you’re now subscribed to receive our marketing emails. If you’d like to hear more about our work and ways you can get involved, sign up to hear from us here.

However if you have signed up to hear from us at any point then you will receive marketing emails such as our newsletter. You can unsubscribe from those emails at any time.

To further our legitimate interests as a charity we undertake a number of different activities that can be known as “profiling”. We use these to help us manage our resources effectively, so that we can understand your interests or your capacity to give and give you a truly tailored experience.

The most common form of profiling that we undertake is to segment and analyse our supporter data. In practice this means sorting our data in a way that helps us understand the characteristics of our supporters, and how they choose to interact with us. We also use segmentation to identify particular audiences for some of our communications: for example, to send information on running events to supporters who have previously enquired about or participated in these in the past.

One part of segmentation is propensity modelling, where we look at different aspects of the data that we hold to determine how likely a supporter is to respond to communications that we send. Based on what you’ve done before, we will tailor any ask we make to you.

We may provide targeted social media advertising, which we believe will be of relevance to you given your specific interests. Please note, advertisement targeting is driven by the specific social media platform and your ability to opt-out of adverts that you feel are not relevant to you comes down to personal management and choices on your social media platforms.

You have the right to object to us processing your data in this way. You can object to profiling, wealth screening or targeted advertising at any time by contacting us at [email protected].

We value the opportunity to work with people, trusts, foundations, and companies that are able to support our work through partnerships, networks and higher levels of giving (typically over £1,000 a year). This is a crucial area of fundraising for us so we use research and profiling to help us to identify other individuals who may also be able to give at this level and form mutually beneficial partnerships.

We analyse our database and use publicly available sources of information to build a better understanding of supporter philanthropic interests and capacity to give. We may also identify other potential new supporters this way and may engage specialist agencies to help us with this research. When research is conducted by a third party, personal information is always processed strictly in accordance with relevant data protection law.

For very high value donations we also have a responsibility (and often a legal duty) to understand the source of that money. We therefore also carry out some research on that basis, to assess and manage potential risks with regards to money laundering and other offences and ensure that there is no conflict with Nordoff and Robbins’ aims and ideals.

We want to make sure we have up to date records for as long as you are actively supporting Nordoff and Robbins, such as participating in our campaigns, donating to us or corresponding with us. Once you are no longer an active supporter, we will keep your data for a set period of time, which we calculate depending on the information that you originally provided, and why you gave it to us. At the end of this time period, we will remove any personal details from our records of you to ensure that any information is entirely anonymous.

In general, we will keep records of financial donations for seven years after the donor last actively engaged with us, to meet our requirements for any Gift Aid audit from HMRC. If we have asked for sensitive personal data specific to an event, we will dispose of this data within a month after the event.

All personal data is stored in accordance with data retention periods defined in our Data Protection Policy. This policy is regularly reviewed and updated. Some of the data we hold may be subject to certain legal and regulatory obligations which will inform the retention period. At the end of this time period, we will remove your personal details from our records, to ensure that they are entirely anonymous. We keep records on how our supporters have interacted with us, but not of who those supporters are. For example, we want to be able to see how many supporters donated to a particular appeal, told us that they took a campaign action or requested information from us. This helps us to understand how to use our resources in the future so that we can raise funds in the most effective way.

You have a right to be forgotten, which means that you can ask us to delete your personal details before the end of the time limits we’ve listed above. You should know that there are some circumstances where we may need to keep your details, for example, in order to comply with a legal obligation. If this situation occurs then we will explain and discuss these circumstances with you.

If you would like to discuss or exercise this right, please do get in touch with us:

• Email: [email protected]
• Telephone: 020 7267 4496
• Post: Fundraising, Nordoff and Robbins, 2 Lissenden Gardens, London NW5 1PQ

In order to run our educational programmes and courses effectively, we need to process some of your information. We want to be completely transparent about why we collect and hold your personal details and how we will use them. We only collect information when you give it to us directly: you may give us your details when you email us, book a place on one of our short courses, apply for the MMT course or PhD programme, or sign up to receive our email newsletter. With your consent, we will contact you to let you know about different education activities you might be interested in.

There are minimum levels of information we need to obtain from you for different purposes. Click on the subheadings below to find out more.

We always ask for your name and title, so we know how to talk to you. We also need to know how to contact you which is why we will ask for your email address and contact preferences. We may also ask for your house number and postcode so that we hold a valid postal address for you. Sometimes we will ask you for your date of birth and how you learned about us or your relationship to us – this is all for statistical purposes and to help us understand where our services are needed most and by whom.

We will mainly use your data to:

• Provide you with the information you asked for
• Book a place for you on one of our short courses and/or help you decide which programmes are suitable for you such as an individual or representative of an organisation

Continued – we will mainly use your data to:

• Keep a record of your relationship with us
• Ensure we know how you prefer to be contacted
• Understand how we can improve our educational provision across the country.

The application process to become a student on a validated programme at Nordoff and Robbins involves the collection of a range of information that will allow us to shortlist applicants and offer places to new students in a fair and transparent way. We will mainly use your data to:

• Shortlist applicants for auditions
• Offer places on our Masters or PhD programmes to new students
• Keep a record of your personal details and your next of kin details in order for us, and Goldsmiths, our validating university, to contact you regarding administrative issues throughout your studies
• Keep a record of your academic information (marks, submitted coursework and relevant assessment information) for your tutors to access and use throughout in order to support your academic journey with us.

Students on our validated programmes (the Masters programme and the MPhil/PhD programme) need to register with Goldsmiths, University of London. To facilitate this, we pass to Goldsmiths the contact details of accepted students. Goldsmiths then collect data directly from the students and this is subject to their own data collection and retention policies. We share our aggregated and anonymised diversity monitoring data with Goldsmiths – this is not personally identifiable information.

When you give us your personal details – for example, when you sign up for a short course, book a place to attend one of our open evenings or sign up to receive our education e-newsletter – you may receive follow up information from us, including news and updates on Nordoff and Robbins education activities and events. Alumni from our validated programmes are also invited to join our alumni mailing list: we send regular newsletters to members of this mailing list.

Where you consent to us sending you marketing information regarding education courses and programmes, you have a right to tell us to stop contacting you at any time.

If at any time you wish to stop or change how we communicate with you, ask us to remove you from our records or to update the information we hold, please do get in touch, using one of the following options:

• Write to: Education department, Nordoff and Robbins, 2 Lissenden Gardens, London NW5 1PQ
• Call: 020 7267 4496 and ask to be put through the education department
• Email: [email protected]

You can opt out of our emails by clicking on the unsubscribe link at the bottom of our e-newsletters.

Nordoff and Robbins has secure record keeping systems which ensure that only people who really need access to your data will have access to it.

• Participants on short courses: The information you give us is held by the Education Administrator and is accessible to the person who oversees our short courses. Your contact details are available to the person running your course.
• Applicants to validated programmes (MMT and MPhil/PhD): The information you give us is held by the Education Administrator and is accessible to members of the selection panel for the relevant programme.
• Students on validated programmes (MMT and MPhil/PhD): The information you give us is held by the Education Administrator and is accessible to tutors on the relevant programme.

You can contact the Education Officer at any time to request this.

• Call 020 7267 4496 during our office hours
• Email [email protected].
• Write to us at Education department, Nordoff and Robbins, 2 Lissenden Gardens, London NW5 1PQ

We collect information from anyone who applies to work or volunteer at Nordoff and Robbins. We only use this information for our recruitment or employment purposes and it is entirely separate to our supporter data. As an applicant or employee, you are entitled to the same rights as our supporters, as outlined in the ‘Understanding Your Rights’ section of this policy.

When you apply to work or volunteer at Nordoff and Robbins we will ask for information about you and your work history to understand how your skills and past experience matches the requirements of a role.

There are two circumstances where we might disclose details outside of Nordoff and Robbins as we process your application. These are listed on the next dropdown.

1. We will ask for details of referees, and we will contact them to verify the information that you have given us – when we contact them, we will share your name and the role that you have applied for. We contact referees on the basis of our legitimate interests as an organisation to understand applicants and their suitability for the roles they apply for.
2. All roles require us to obtain a disclosure from the Disclosure & Barring Service (DBS), depending on the role, candidates would either require a basic or enhanced DBS check. This will be clearly marked in the advertisement and so we will not give you further notice before we apply for this disclosure.

If you would like for us to remove your personal details from our system at any time before that, please write to: [email protected].

You should know that we always keep anonymous statistical information about applicants to develop our recruitment processes and for equality and diversity monitoring, but this does not contain any information that could be used to identify individual job applicants.

If you begin employment with us, we will put together a colleague file, which will contain your information. We keep the information in this file secure and will only use it for matters that apply directly to your employment with Nordoff and Robbins.

We provide all of our employees with an internal privacy notice, which explains exactly how we process their data as an employee, including how we use their personal data in case of emergency, and how long we retain this information for.

Nordoff and Robbins takes the care of your data very seriously and we use a combination of organisational and technological security measures to protect your personal information to a high standard. This includes the use of secure cloud-based services, firewalls, virus and malware protection, encryption of data in transit, including secure file transfer protocol for our work with third parties. Our credit card payments are processed with external payment card industry (PCI) compliant processors, such as Square and Stripe.

We make sure that only staff who need to access your personal data can do so. Any member of our staff who has access to your personal data is given training to make sure they understand the importance of keeping your information safe and secure at all times.

Whilst we take all of the measures that we’ve outlined above, unfortunately, the transmission of information using the internet is not completely secure. Although we will do our best to protect your personal data sent to us this way, we cannot guarantee the security of data transmitted to our site.

In the unlikely event that we experience a personal data breach, we will assess the risk and take appropriate steps to contain and investigate it. Where required, we will notify the Information Commissioner’s Office within the applicable statutory timeframe and inform affected individuals where the breach is likely to result in a high risk to their rights and freedoms.

At Nordoff and Robbins, we sometimes work with third parties. It’s important that you understand the circumstances where this might happen, and who we work with.

We never sell or swap your details with any other organisation for their marketing purposes. These are some examples of how we work with third parties:

• Where we work with other Nordoff and Robbins centres, subsidiaries or affiliates.
• Where we sign a contract with a third-party supplier to carry out services for us. These contracts will always hold a supplier to our own high standards of data protection, to ensure that they treat your information with the same care as we do.
• Where you register to take part in an event (such as a marathon), and we have to provide your details to the event organiser to secure your place.

• Where a company sends us data because you have given permission for them to share it, for example, where you set up an online giving fundraising page, sign up for an event via a third party or register with the Telephone or Fundraising Preference Services.
• Where you have made a donation via a third party service such as CAF or Benevity.
• Where we use companies who can help us to enhance the information that we hold about you, for example, to help us to understand which parliamentary constituency you fall into, the size and composition of your household, or the demographic of people living in your postcode area.
• Where we might use your phone number or email address to communicate with you on social media. This won’t be through direct, personal messages, but updates about our work and stories that we think you might be interested in, which might appear in the form of content on your newsfeed.

• Where we legally have to share information. For example, if you make a Gift Aid declaration to enable us to claim Gift Aid on donations that you make, we have to share your name and address with HMRC so that they can audit our claim.

We may use companies to provide services and process your personal data on our behalf, where they have a specific expertise or can offer the most cost-effective solution for us. Some of the activities that third-party companies carry out for us are:

• Packing and delivering postal mail
• Making telephone calls to our supporters
• Signing up new supporters for us in door to door, street or private site campaigns
• Sending emails
• Processing credit card payments
• Accounting and payment system providers
• Fundraising platforms such as Enthuse and JustGiving

Whenever we work with a company in this way, we will always have a contract with them, to be certain that they treat your data with the same level of care and respect as we do. We will only send them the data that they need to carry out their specific service, and they are required to delete it or return it to us once they have completed this. Your data will only ever be passed to them for the services that they carry out on our behalf, it is never shared for their marketing purposes.

Some events require us to pass your personal information to the event organisers to secure your place. We will always make this clear to you at the point of your registration, so you understand the information that we will transfer, and who will receive it.

Examples of companies we currently work with in this way are:

• TCS London Marathon: Marathon Events Limited
• Music Mudder: THE·TEAM: SME Music Limited
• Manchester Half Marathon operated by A.S.O. U.K. Limited

For some of our events, we need to pass your details to the venue for security purposes. If you attend our Golf Day, we will need to pass your details on to the scoring service provider for purposes of scoring the competition. The information is only retained for the duration of the event.

If you have special dietary requirements or need to submit food and beverage orders for one of our fundraising events, we will need to pass your details onto the venue that is hosting the event.

Some third-party organisations collect data on our behalf, and share it with us, in accordance with their policies and procedures for data protection compliance. Some of these organisations are data management companies, which we use to ensure that data you have provided us with is up to date. We do not use this to add new contact data; so if we already have your address, we may update this, but if we do not have your telephone number we will not use one of these companies to find and record it. Whenever you give your data to any organisation, you should always make yourself aware of their data protection and privacy policies.

Here are some examples of organisations we currently receive this information from:

• Online giving providers including: Enthuse, JustGiving, CAF, Benevity
• Events companies including: TCS London Marathon, Manchester Half Marathon, Charity Challenge; Tough Mudder
• Digital auction companies – Superstars, Givergy, Eventech, Crowdfunder
• Payroll giving agencies: Hands on Payroll Giving, Payroll Giving in Action
• Online petition sites: Care2
• Data management services: Telephone Preference Service, Fundraising Preference Service, National Change of Address Register (managed by Royal Mail), Mortascreen
• Ticketing agencies – Universe, Eventbrite, Global events, Ticketmaster

We may use limited personal data, such as email address or phone number, to create custom audiences on social media platforms so that we can show relevant content to existing supporters. We may also use social media tools to create lookalike audiences, where the platform identifies users with similar characteristics to our existing supporters.

Where we use these tools, we will assess the privacy impact and provide a way for you to object.

If you don’t want us to use your data in this way, email [email protected] and we will make sure your details are not included.

We will always share data where we have a legal requirement to do so. Examples of this include providing audit information to HMRC for our Gift Aid claims or if we are required to do so by law enforcement officials.

Nordoff and Robbins is aware that countries outside of the UK may have differing standards of data privacy. Much of our data is kept within Nordoff and Robbins systems here in the UK, but some of our suppliers may process personal data outside the UK. Where personal data is transferred internationally, we will ensure that appropriate safeguards are in place, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, and transfer risk assessments where required.