Skip to main content

Privacy statement

GDPR privacy notice

Document titlePrivacy Statement – online
VersionVersion 3.0
Last update / reviewNovember 2024
Nextupdate / reviewNovember 2025
Document ownerDigital Data & Technology Lead
ClassificationExternal
Approved byLee Angell
Document control: last updated November 2024

Download as a pdf

Introduction & general terms

The aim of this privacy policy is to explain to you how we process your data. This includes the collection, usage, disclosure, transfer, storage and disposal of your data.

The Devon Air Ambulance Trust and its wholly owned subsidiary The Devon Air Ambulance Trading Company Limited (collectively as Devon Air Ambulance) is committed to protecting your personal information when you are using our services. This Privacy Statement relates to our use of any personal information that we collect from you when using our website and online services. It also relates to our use of any personal information you provide to us by phone, SMS, email, in letters and other correspondence and in person.

Our Committment

DAA is committed to safeguarding your personal information. Whenever you provide such information, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal information, including the Data Protection Act 2018 (DPA2018), the UK General Data Protection Regulation (UK GDPR), the Privacy & Electronic Communication Regulation (PECR) and other associated legislations. 

DAA website may contain hyperlinks to websites owned and operated by third parties. Data Protection obligations for these websites are managed by the website’s owner, who will have their own privacy policies.  Please refer to the website’s own privacy statement and cookies policy to learn how they process your data.  Review our cookies policy.

This Privacy Statement explains the following:

Devon Air Ambulance is a registered charity (Registered Charity Number:  1077998). We aim to relieve sickness and injury in and around the county of Devon through provision of an emergency Air Ambulance service.

We are registered as a Data Controller with the ICO (Devon Air Ambulance Trust Z7532220 / Devon Air Ambulance Training Company ZA205150).

Our contact details are as follow:

Devon Air Ambulance
5 Sandpiper Court
Harrington Lane
Exeter
Devon
EX4 8NS

Email: [email protected]

Phone: +44 (0)1392 466 666

When using our website, the personal information that we collect may include your browser details, IP address, and information regarding what pages you accessed. 

DAA website uses cookies. ‘Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. This helps us to improve our website and deliver a better more personalised service.  

When interacting with the DAA office, either by phone, email or a face-to-face visit, we may collect information including your name, address, email address and phone number. 

When entering into a business agreement with DAA we may collect commercial information including your name, address, email address and phone number.  

Please note that sometimes we may require you to provide additional personal information, and sometimes sensitive personal information. When we do this, we will provide further information about why we are collecting your information and how we will use it. 

Devon Air Ambulance will use your personal information for a number of purposes including the following:

  • to provide our services, activities, or online content, to provide you with information about them and to deal with your requests and enquiries.
  • to provide you with the most user-friendly online navigation experience.
  • to show you relevant advertising on third party sites where you have agreed to this.
  • to contact you about a submission you have made.
  • to use IP addresses and device identifiers to identify the location of users, to block disruptive use, to establish the number of visits from different countries, and to determine whether you are accessing our services from the UK or not; and
  • for analysis and research purposes so that we may improve the services offered by Devon Air Ambulance. This can include using geo-demographic information from external sources, where this helps us ensure we are providing the best service possible.

Where Devon Air Ambulance proposes using your personal information for any other uses, we will ensure that we notify you first. Please see the section on Changes to Devon Air Ambulance’s Privacy Policy for details.

General contact
We may contact you in relation to any contact or enquiry that you submit to us when using our website and online services. This also relates to any personal information you provide to us by phone, SMS, email, in letters and other correspondence and in person.

Contact for marketing purposes?
Devon Air Ambulance will only send you marketing emails where you have agreed to this.

We offer regular emails and bulletins to let you know about Devon Air Ambulance’s news and services.

We may personalise the message content based upon any information you have provided to us previously and your business type.

We will keep your information within DAA except where disclosure is required or permitted by law (for example to government bodies and law enforcement agencies) or as described in this section and the section concerning Offensive or Inappropriate Content. 

Generally, we will use your information within DAA and will only share it outside DAA where you have requested it or given your consent.  

Sometimes Devon Air Ambulance uses third parties to process your information on our behalf, for example to provide analysis. DAA requires these third parties to comply strictly with its instructions and DAA requires that they do not use your personal information for their own business purposes, unless you have explicitly consented to the use of your personal information in this way. 

As a fundraising organisation, we undertake in-house research and from time to time engage specialist reputable agencies to gather information about you from publicly available sources, for example, Companies House, the Electoral Register, company websites, social networks such as LinkedIn, political and property registers and news archives. 

We may also screen our database records to fast track the research using our trusted third-party partners. You will always have the right to opt out of this processing.  

We may also carry out research using publicly available information to identify individuals who may have an affinity to our cause but with whom we are not already in touch. This may include people connected to our current major supporters, trustees or other lead volunteers.  

We also use publicly available sources to carry out due diligence on donors in line with the charity’s Gift Acceptance Policy and to meet money laundering regulations. 

This research helps us to understand more about you as an individual so we can focus conversations we have with you about fundraising and volunteering in the most effective way and ensure that we provide you with an experience as a donor or potential donor which is appropriate for you. 

We conduct this on the basis of Legitimate Interest. 

If you would prefer us not to use your data in this way, please email 

us at [email protected] or call us on +44 (0)1392 466 666. 

We may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

If you post or send content which may reasonably be deemed to be offensive, inappropriate or objectionable anywhere on or to DAA websites, social media or communications channels, DAA Group may remove such content. 

Where DAA reasonably believes that you are or may be in breach of any applicable laws, for example on hate speech, DAA may disclose your personal information to relevant third parties, including to law enforcement agencies or your internet provider. DAA would only do so in circumstances where such disclosure is permitted under applicable laws, including data protection law. 

If you are aged 18 or under, please get your parent or guardian’s permission before you submit any personal information to DAA when using our website and online services. This also relates to any personal information you provide to us by phone, SMS, email, in letters and other correspondence and in person. 

We use technical and organisational measures to protect your personal information from unauthorised processing, loss, destruction, or damage. Access is restricted to authorised personnel only. 

We will retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The retention period may vary depending on the type of information and the specific legal or contractual obligations. For example, there is an HMRC requirement to retain Gift Aid declarations for a period of 6 years.  

Once the information is no longer needed, we will dispose of it securely.  

  • Right to be informed: organisations must tell individuals what data is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties.
  • Right of access: individuals have the right to request a copy of the information that an organisation holds on them.
  • Right of rectification: individuals can correct inaccurate or incomplete data.
  • Right to be forgotten: in certain circumstances, individuals can ask organisations to erase any personal data stored on them.
  • Right of portability: in some circumstances, individuals can request that an organisation transfer any data that it holds on them to another company.
  • Right to restrict processing: in some circumstances, individuals can request that an organisation limits its use of personal data.
  • Right to object: individuals have the right to challenge certain types of processing, such as direct marketing.
  • Rights related to automated decision making, including profiling: under most circumstances, individuals have the right to object to having decisions made about them by automated processes or profiling

To exercise any of the above rights please contact us via one of the following:

Devon Air Ambulance
5 Sandpiper Court
Harrington Lane
Exeter
Devon
EX4 8NS

Email: [email protected]

Phone: +44 (0)1392 466 666

This Privacy Notice may be updated from time to time so you may wish to check it each time you submit personal information to DAA. The date of the most recent revisions will appear on the top of this page. If you do not agree to these changes, please do not continue to use DAA websites to submit personal information to us. If material changes are made to the Privacy and Cookies Notice, for instance affecting how we would like to use your personal information, we will provide a more prominent notice (including, for certain services, email notification of Privacy Notice changes). 

VersionDateRevised byReason for change
1.031/10/23
2.001/11/23S. NairnReview and update
3.024/10/24L. AngellReview and update with profiling / segmentation
Version control