“Kew” refers to the following three separate entities :
RBGK’s full name is “The Board of Trustees of the Royal Botanic Gardens, Kew”. RBGK is a non-departmental public body with exempt charitable status and is a global resource for plant and fungal knowledge and manages Kew Gardens in west London and Wakehurst in West Sussex. If you buy a ticket for day-admission to our gardens, become a Friend of Kew, a Friend of Wakehurst (our membership schemes) or a Patron of Kew or make a donation, you will be principally dealing with RBGK.
The Foundation is a registered charity with charity number 803428, and its object is to provide support for RBGK, in particular by undertaking legacy fundraising.
Enterprises is a company (with company number 02798886) and is a wholly owned trading subsidiary of RBGK whose main activities are commercial trading activities to generate income for RBGK including operation of our shops at the gardens and online, and certain events that are not included as part of the normal day admission to the gardens such as .Christmas at Kew and Kew the Music
Enterprises also provides services to RBGK and the Foundation particularly to support and undertake their fundraising activities.
1.4 We refer to these three entities collectively as “Kew” throughout this policy, and references to “we” and “us” refer to the Kew entities collectively.
RBGK, The Foundation and Enterprises may each be data controllers of your personal data.They each have different roles, but some activities they undertake overlap and personal data may be shared internally for certain purposes. Information may be shared between them to facilitate, support and integrate their respective activities, for example, RBG Kew may administer invoices and payments made to Enterprises, who are themselves responsible for promoting and running an event at the gardens. Where possible and appropriate, we do try to be clear which entity is collecting your information and to explain which entity does what, but there is inevitably some overlap.
RBGK’s address is Royal Botanic Gardens, Kew, The Herbarium, Kew Green, Richmond TW9 3AE.
The Foundation and Enterprises are both based at the Royal Botanic Gardens, Kew and have offices at 47 Kew Green, Richmond TW9 3AB.
2.1 What personal data do we hold?
Some examples of the type of information we may collect and hold about you are as follows:
But we may also collect, hold and process other personal data where it is appropriate and relevant, for example:
2.2.How and why will we use this personal data?
2.2.1 We will use your personal data to:
Charitable giving is very important to Kew’s ability to achieve its mission. We carry out a wide variety of marketing activities to seek individuals’ support for our work, ranging from appeals for small one-off donations, to large fundraising initiatives for specific projects, such as building renovations. We want to ensure that we are contacting you with tailored and appropriate communications, and ensure we direct our resources and fundraising activities as efficiently and effectively as we can. We also want to communicate with you from time to time to thank you for your support and tell you what we have achieved with the help of your donation.
2.4. Research and profiling using information in the public domain
2.4.1.Throughout our history Kew has relied on gifts of all sizes to support both our recurrent costs and for new buildings or projects. In order that our fundraising is appropriate, respectful, efficient and effective, we tailor our approaches to different people in different ways. We use information you have given us, sometimes together with data we collect from publicly available sources, to help us decide how best to do this.
2.4.2.For a small number of people, we may undertake research using publicly available information relating to philanthropic activities, wealth and capacity to give, to create a profile of interests and preferences. This helps us understand the background of the people who we believe may be willing to attend events and enter into a dialogue with us to learn more about supporting our work and organisation. Ultimately it helps us to ensure that proactive requests for gifts are directed to only those who we believe may be able and willing to give. This information is collected from public sources such as news articles, Companies House, the Charity Commission, Who’s Who as well as specialist charity research sources such as Factary Phi, and Trustfunding.org. Very occasionally we may work with similar organisations (such as other botanic gardens or other charities) to undertake this research collaboratively.
2.4.3.If we do collect such information about you, whether jointly or on our own, we will inform you within one month of collecting this information in order to provide you with an opportunity to opt out of your data being used for these purposes. You can also opt out by emailing us on email@example.com.
2.4.4.We also have an obligation to ensure we are undertaking appropriate due diligence on potential donors, in accordance with guidelines set out by the Charity Commission and the Fundraising Regulator, and we may collect information from the public domain information for this purpose too.
The legal bases that we rely on for processing your personal data are:
3.1. You have provided your consent to us using your personal data for a specific purpose:
We will ask for your consent to use your personal data to send you marketing emails and SMS.
You always have the right to withdraw your consent at any time.
3.2. It is necessary in connection with the performance of a contract with you:
Sometimes it is necessary to process your personal data so that we can enter into contractual relationships with you. For example, if you purchase something from our online shop, or become a Friend of Kew or Friend of Wakehurst (our membership schemes) or a Patron of Kew, we will require your personal data to enable us to perform our agreement.
3.3. It is necessary for compliance with a legal obligation to which we are subject:
This would include where we have to retain certain records, for example, to manage health and safety, for the detection and prevention of crime, safeguarding obligations, for maintaining suppression lists to ensure we comply with marketing laws, for tax reasons (such as those related to gift aid donations) and undertaking due diligence before accepting certain donations or entering into certain relationships.
3.4. It is within our legitimate interests.
Applicable law allows personal data to be collected and used if it is reasonably necessary for our legitimate interests or a third party’s legitimate interests (as long as the processing is fair, balanced and does not unduly impact individuals’ rights). We will rely on this ground to process your personal data when it is not practical or appropriate to ask for your consent, and where we are confident that this will not impact your rights. This may include where we undertake research on individuals including before we proactively contact them, as set out in Sections 4.2 and 4.3.
Our legitimate interests include raising funds for a wide range of activities to support our charitable objectives, such as being a global resource for plant and fungal knowledge, undertaking and disseminating our scientific knowledge, and plant and fungal research, and preserving the living and non-living collections for public access. We also have a legitimate interest in publicity and income generation, campaigning and fundraising in order to support these objectives and undertaking due diligence to establish the provenance of donations that are made, or may be made, to us.
Where you have provided your details to us, we may contact you by post and phone for certain marketing and fundraising activities as set out in section 5 below (but we will explain this to you at the point that we collect your details). You can opt out of this activity at any time by emailing us on firstname.lastname@example.org.
We will also rely on our legitimate interests for the proper administration of Kew, and to manage our operations (for example, maintaining appropriate records and databases, for the detection and prevention of crime and safeguarding all those who access our premises and facilities).
When we process your personal data to achieve such legitimate interests, we consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. We will not use your personal data for activities where our interests are overridden by the impact on you, for example where use would be excessively intrusive (unless, for instance, we are otherwise required or permitted to by law).
Please see section above for the limited legal basis for when we process sensitive personal data.
We collect information about you:
4.1. When you give it to us directly
You may give us your personal data in order to receive information from us; visit our facilities; buy products or services from us including such things as purchasing, administering and renewing membership; when you volunteer with us or take part in any of our community programmes (or request information about these); when you donate to us; when you respond to a survey or when you otherwise engage with us on our websites and digital products.
4.2. When a third party provides us with your personal data
4.3. When it is available publicly
We may combine personal data you provide to us with personal data available from external publicly available sources such as Companies House and published articles and newspapers. Depending on your privacy settings for social media services, we may also access personal data from those accounts or services. We use this personal data to gain a better understanding of you, and to improve our communications and fundraising approaches (see section 3 above).
4.4. When you use our websites and digital products, such as kew.org and support.kew.org
We may collect personal data about you when you use our websites and digital products. Whenever you input personal data into our website (for example, if you become a member or renew a membership online or otherwise support us through our website, book a visit online or download any of our resources), we will collect the personal data that you give to us.
We use “cookies” to identify you when you visit our websites and digital products. Amongst other things this helps us to understand our website users and may enable us to improve the website experience for you and/or other users. Please refer to our Cookies Policy for details on how and why we use this data at kew.org/cookies.
We may collect other personal data from your use of the websites, such as your IP address and access times.
5.1 We may contact you by post and telephone, and, where you have provided consent, by e-mail, to let you know about our events and activities (and we may also mention those of third parties, particularly where they are collaborating with us or sponsoring our events) that might be of particular interest to you; retail offers and promotions, or about the work of Kew more generally; and to request donations and provide you with information about and the opportunity to participate in our fundraising activities. We provide the opportunity for you to opt-out from receiving our marketing communications every time we contact you.
You can opt-out from receiving our marketing communications, or update your contact preferences at any time by emailing: email@example.com
5.2 Social media targeting
If you are a social media user, we will use certain social media tools as part of our relationship with you. These tools include such things as Facebook and Instagram Custom/Lookalike Audiences, Google Customer Match/Similar Audiences, Twitter Tailored/Lookalike Audiences and LinkedIn Matched Audiences.
Through using these tools, we will provide some of your data to the social media platform / organisation to allow them to identify your social media profile with them. The social media platform / organisation will then show you relevant advertisements relating to Kew which we think you will be interested in seeing on your newsfeed.
We do not sell your information under any circumstances. We may from time to time share your personal data with third parties for them to use for marketing purposes or for us to use jointly with a third party where we are embarking upon a joint fundraising project. However, we will only ever do this where you have given us permission to do so or where we are carrying out joint research as detailed in section 2.4.2.
RBGK, Enterprises and the Foundation may share your personal data between themselves, so if you give your information to RBGK then this may be shared with Enterprises and the Foundation, for example. Your personal data will only be shared between the entities for the purposes set out in section 2.2 of this policy.
We work with service providers and other third parties who help us to operate and to provide and improve our information, products and services, and we may share information with them for this purpose..
Whilst we may allow our staff, consultants and/or external service providers acting on our behalf to access and use your personal data for the activities we have described in this policy (eg. to provide services or products to you, deliver mailings, to analyse data and to process payments), we only permit them to use it to deliver the relevant information, goods or services, and only if they apply an appropriate level of security protection.
We may need to disclose your personal data upon request to regulatory and government bodies as well as law enforcement agencies. We may also merge or partner with other organisations and in so doing, acquire or transfer personal data but your personal data would continue to be used for the purposes set out above.
The personal data we collect from you may be transferred to, shared and/or otherwise processed by organisations or companies outside the European Economic Area (“EEA”). Where your personal data is transferred outside the EEA, we will take reasonable steps to ensure that the recipient implements appropriate measures to protect your personal data (for example, by entering into EU Commission approved standard contractual clauses).
Unfortunately, the transmission of personal data via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to or via our websites and digital products; any transmission is at your own risk. If you have any questions about the international data transfer of your personal data, please contact us using the details below in section 12.
We may collect and manage personal data about children in some circumstances, such as where children participate in activities at Kew (such as educational and learning activities, fundraising events) or have requested to receive certain communications from us, such as newsletters. Those aged under 13 are not permitted to receive our newsletters, or enter any competitions or prize draws with us. We will not knowingly have any other direct contact with those aged under 13.
Where consent is required to process children’s personal data and the child is under 13 years, where appropriate we shall seek consent from a parent or guardian, or shall ensure such consent is in place before any data is shared with us. We shall only hold personal data about children that is absolutely necessary for the purpose of the event/programme that they are applying for or participating in.
Where a parent or guardian gives consent on behalf of a child, we may contact that child after their 16th birthday, to check if they wish to maintain their relationship with us.
We are committed to ensuring that there are appropriate technical controls in place to protect your personal data including protection from misuse and unauthorised access. For example our network is protected and routinely tested.
Your information is only accessible by staff, volunteers and contractors who are bound by appropriate policies and procedures to protect your information
Please note that you may only use/ benefit from some of the following rights in limited circumstances. For more information, we suggest that you consult guidance from the Information Commissioner’s Office (ICO) – https://ico.org.uk/for-organisations/guide-to-the-general-data-protectio... - or please contact us using the details in section 12 below.
9.1.Right to restrict processing
In certain circumstances as outlined in the ICO guidance referred to above, you have a right to require us to stop processing your personal data in a particular way.
9.2.Right to erasure
You have the right to request that your personal data is erased from our records in certain circumstances.
9.3. Right of access
You have a right to ask for a copy of the personal data we hold about you. If you want to access your personal data, please send a description of the personal data you want to see and proof of your identity by post to The Privacy Team, The Royal Botanic Gardens, Kew, Richmond, TW9 3AE.
9.4. Right to rectification
We also want to make sure that your personal data is accurate and up to date. Please let us know if your details change. You may also ask us to correct or remove personal data which is inaccurate.
9.5. Right to object
You can also opt-out of receiving all or some of our marketing/ fundraising communications or request that we stop processing personal data about you for certain purposes at any time by contacting us using the details below.
9.6.Right to data portability
In certain circumstances you have a right to data portability which means we will provide you (or a third party you nominate) with your personal data in a structured, commonly used and machine-readable format.
If you are unhappy with the way in which we have handled your personal data please contact us using the details below.
Please let us know if you have any queries or concerns about the way that your personal data is being processed by us by contacting us on the details below. You are also entitled to make a complaint to the Information Commissioner’s Office. For further information see the Information Commissioner’s guidance here https://ico.org.uk/for-the-public/personal-information.
We keep personal data for as long as there is a need to keep it in connection with the purposes for which it was collected. We may keep your personal data after a particular matter or exchange has concluded but purely for record keeping purposes and to be able to respond to queries. In some cases, we are also obliged to retain your personal data to comply with legal or statutory obligations (for example, to keep records of contractual or financial matters).
Whilst the specific time periods vary depending on the circumstances, in general we will not keep records that include personal data for more than 10 years after a particular matter or exchange has concluded. In the event that you ask us to stop sending you marketing communications, we will retain certain details, such as your name and email address, but only to ensure that you are not contacted again.
In this policy “websites and digital products” refers to all Kew websites, including the primary Kew website found at https://www.kew.org/, and all our digital products, such as email, applications and digital channels, including social media.