Privacy notice

Who we are

Killing Cancer Kindly (KCK) is a Charitable Incorporated Organisation registered in England and Wales, charity number 1200040. Our registered address is 9 Jesmond Road, Cottingham, England HU16 4NG.

KCK is the “controller” of the personal data described here. That means we decide how it is used and we are responsible for looking after it. This notice explains what we collect through killingcancerkindly.org, why, and what you can do about it.

The short version

• You can read this website without giving us any personal details.
• We use cookies only if you agree. With your OK, Google Analytics counts visits so we can see which pages help people. We do not use advertising trackers.
• The Kind Guide, the BMI check and the site search work inside your own browser. What you type into them is not sent to us.
• We only get your details if you choose to email us, ask for updates or make a donation.
• We never sell your data or share it for other people’s marketing.

What we collect and why

When you visit the website

Our website is hosted by Cloudflare. Like any web host, Cloudflare’s servers handle technical details when your device asks for a page, such as your IP address, browser type and the page requested. This is needed to deliver the page and to protect the site from attacks. We do not use this information to identify you.

Legal reason: our legitimate interest in running a website that works and is secure.

When you contact us

Our contact form does not send or store anything itself. When you press the button, it opens your own email app with your message ready to send to us. If you send it, or email us directly, we receive your name, email address and whatever you write. We use this only to reply to you and to deal with what you asked.

Please do not send us detailed medical information. We cannot give personal medical advice. If you do mention your health or someone else’s, we use it only to reply to you and we delete it when it is no longer needed.

Legal reason: our legitimate interest in answering the people who write to us.

When you ask for email updates

If you ask to receive updates from us, we keep your email address to send them. We only send updates to people who have asked for them. Every update tells you how to stop them, and you can also just email us to say stop.

Legal reason: your consent. You can withdraw it at any time.

When you donate

Online donations are handled by Stripe, a regulated payment company. You enter your card details on Stripe’s secure payment page, not on our website, and we never see or store your full card number.

From Stripe we receive the name and email address you enter on its page, the amount and date of your donation, whether it is one-off or monthly, and your billing country and postcode if Stripe asks for them. We use this to take your donation, send or confirm your receipt, answer questions about your gift, manage a monthly donation and keep the financial records a charity must keep.

Stripe also uses some of this information for its own legal duties, such as preventing fraud. For that, Stripe follows its own privacy policy.

Legal reason: to carry out the donation you asked us to process, and to meet our legal duty to keep accurate financial records.

Visitor analytics (only if you agree)

When you first visit, we ask whether you agree to analytics cookies. If you press Accept, we use Google Analytics to count visits and see how the site is used, for example which pages are read, how people arrive on the site and what type of device they use. Google Analytics sets cookies to tell visits apart. We have turned off Google’s advertising features and its detailed location data, we never send Google what you type into the site search, and we do not use this information to find out who you are.

If you press Reject, Google Analytics does not load at all. You can change your choice at any time with “Cookie settings” at the bottom of every page.

Legal reason: your consent. You can withdraw it at any time.

Tools on this website

The Kind Guide, the BMI check and the site search run entirely inside your browser. The questions you ask and the numbers you enter stay on your device and are not sent to KCK or anyone else. They are cleared when you close or reload the page.

Who we share it with

We only share personal data with the service providers we need in order to run KCK, and only for that purpose:

• Cloudflare, which hosts this website.
• Google, which provides our email service (Gmail) and, only if you agree, visitor analytics (Google Analytics).
• Stripe, which processes online donations.

We may also share information if the law requires it, for example with HMRC or the Charity Commission, or with professional advisers such as our accountant. We do not sell personal data, and we do not give it to other organisations for their marketing.

Our website links to other sites, such as Amazon for our books and our social media pages. When you leave our site, that website’s own privacy policy applies.

Data outside the UK

Cloudflare, Google and Stripe are international companies, and they may store or process data outside the UK, including in the United States. Where they do, they rely on safeguards that UK data protection law accepts, such as approved contract clauses or the UK-US data bridge.

The people who help KCK answer its email work in the UK and outside the UK. They can read the messages you send us, and they use them only to help us reply to you, following this notice.

How long we keep it

• Emails and enquiries: for up to 2 years after our last contact with you, unless we need them for longer to deal with an ongoing matter.
• Email updates: until you ask us to stop. After that we keep only your email address on a “do not contact” list, so that we do not add you again by mistake.
• Donation records: for 6 years after the end of the financial year of the donation, because charity accounting rules require us to keep financial records for that long.
• Website server logs: held by Cloudflare for a limited time under its own policies.
• Visitor analytics: kept in Google Analytics for 14 months, then deleted automatically.

Cookies

We only use cookies if you agree. We do not use advertising or social media tracking.

If you press Accept on our cookie message, Google Analytics sets two cookies. Google says both last up to 2 years:

• _ga: used to tell visitors apart.
• _ga_QP78JTNQ8L: used to keep track of a visit.

If you press Reject, these cookies are not set and Google Analytics does not load. To change your choice, use “Cookie settings” at the bottom of any page. If you withdraw your consent, we delete these cookies from your browser.

Your browser remembers your Accept or Reject choice on your own device, so we do not ask you on every page.

If you change the site’s appearance (for example light or dark mode), your browser remembers that choice on your own device so the site looks the same next time. This is stored only on your device, it contains no personal details, and we cannot see it. You can clear it at any time in your browser settings.

Stripe’s payment page, which you reach only when you choose to donate, uses its own cookies to process payments safely and prevent fraud.

Children

Young people are welcome to read our website. We do not knowingly collect personal data directly from children under 13 through this website. If you are under 13 and want to contact us, please ask a parent or carer to contact us on your behalf. Online donations are for adults.

Your rights

UK data protection law gives you rights over your personal data. You can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data;
• limit how we use your data, or stop using it;
• give you your data in a format you can move to another organisation.

Where we rely on your consent, for example for email updates, you can withdraw it at any time. Some rights have legal limits. For example, we may need to keep donation records even if you ask us to delete them.

To use any of these rights, email us. It is free, and we will reply within one month.

If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this notice

We will update this notice if the way we use personal data changes, for example if we start using a new service. The date at the top shows when it was last changed.

Contact

For questions about your data or this notice, email [email protected] or write to Killing Cancer Kindly, 9 Jesmond Road, Cottingham, England HU16 4NG.