Privacy notice

Who we are

NBCC is a volunteer run Scottish Charitable Incorporated Organisation (SCIO), charity number SC047995, regulated by OSCR. We are the data controller for the personal data described here.

What we collect

When you give or get in touch, we may collect:

• your name and contact details, such as email and postal address;
• the details of your donation, including amount and whether it is a single or monthly donation;
• your Gift Aid declaration, where you choose to add Gift Aid;
• the message you send us through the contact form.

Card payments are handled by our payment provider. We never see or store your full card number.

Why we use it, and our legal basis

We use your data to process your donation, send you a receipt and thank you where you have asked us to, claim Gift Aid from HMRC where you are eligible, and answer your enquiry. Our legal basis is your consent for optional emails, and our legitimate interest and legal obligations for processing donations and Gift Aid.

Sharing your data

We do not sell your data, ever. We share it only where we must: with HMRC for a Gift Aid claim, and with the payment and email providers that help us run the campaign, who act on our instructions.

Stories you share with us

If you share a story with us through our My Story form, we collect your story and any optional details you choose to give us, such as your first name, contact details, town, age band or how the Red Bag reached you. This is held in a separate database from our other supporter records, kept apart from your donor or Gift Aid details.

We rely on your explicit consent, given at the point you submit your story. You give separate consent for us to hold your details and for how we may use and share your story, such as publishing it publicly or keeping it for internal use only. If your story is about someone else, such as a child or vulnerable adult you support, we ask you to confirm you have their permission, or that of their parent or guardian, before you share it.

We keep stories as part of our permanent archive, to show the difference NBCC makes over time, unless you ask us to withdraw or delete yours. Withdrawing means we stop using your story; deleting means we erase your details for good. You can ask us to do either at any time by emailing privacy@nbcc.scot or using our contact form.

How long we keep it

We keep Gift Aid records for six years after your most recent claimed donation, as HMRC requires. Other data we keep only for as long as we need it, then delete it.

Your rights

You can ask us to show you the data we hold, correct it, or delete it, and you can withdraw your consent to emails at any time. To do any of these, or if you have a question about how we handle your data, email us at privacy@nbcc.scot, or get in touch.

Fundraising standards

We follow the Code of Fundraising Practice. Fundraising in Scotland is overseen by the Scottish Fundraising Adjudication Panel. If you would rather we did not contact you, you can also use the Fundraising Preference Service to manage or stop fundraising communications.