Privacy policy

Privacy Notice Statement

C3 Collaborating for Health (C3) promises to respect and protect the personal information (or data) you or your family have provided us with or that we get from other organisations and to keep it safe.  We will manage this data effectively and securely so that we can deliver better services to and for you, including our fundraising activities.

We are committed to using your personal information in accordance with our responsibilities. We are required to provide you with the information in this Privacy Policy under applicable law which includes:

  • the Data Protection Act 1998, which will be read in conjunction with the General Data Protection Regulation from 25 May 2018
  • the Privacy and Electronic Communications (EC Directive) Regulations 2003.

We ensure that we use your information in accordance with all applicable laws concerning the protection of personal information. This policy will outline what kinds of data we collect, why we collect it, how we will use, share, and store it, what your rights are, and how you can contact us to manage, edit or delete this information.  You can request a printed (or large print) copy of this privacy policy by contacting us at the email address, telephone or postal address mentioned in point number 8 of this policy.

When you register with us we ask for your permission to hold your personal data. We hold your information so that we can keep you informed and signpost you to events, activities and general health related information.

How and when we collect information about you

When you directly give us information

We may collect and store information about you when you interact with us. For example, this could be when you:

  • Register for or attend our events
  • support our work through a donation or any of our campaign/events/project
  • fundraise on our behalf
  • tell us your story
  • campaign with us
  • phone or email for help and advice
  • direct message us on our social media channels
  • sign up to receive our newsletter, annual review and/or any other communications
  • register to our online platforms
  • submit an enquiry online through our website, by email, by phone or by post
  • give us feedback
  • make a complaint
  • apply for a job
  • apply to volunteer
  • enter into a contract with us

When you indirectly give us information

When you interact with us on social media platforms such as Facebook, Twitter or LinkedIn we may also obtain some personal information about you. The information we receive will depend on the privacy preferences you have set on each platform and the privacy policies of each platform. To change your settings on these platforms, please refer to their privacy policies.

We may obtain information about your visit to our site, for example the pages you visit and how you navigate the site, by using cookies. A cookie is a small text file that is passed to your computer’s hard disk through your web browser so the website remembers who you are when you return. To find out more about cookies and how you can disable them please visit

The information collected by the cookies is anonymous and not personally identifiable. It does not contain your name, address, telephone number, or email address. We use it for our own internal purposes to track how users navigate through the site. This helps us improve our website and online services, and to determine if the website is operating effectively.

What information we might collect

When you engage with us by phone, mail, in person or online, we may collect information about you (referred to in this Privacy Policy as ‘personal information’). This may include your name, address, email address, telephone number, date of birth, social media handle, job title and details of your education and career, why you are interested in C3, and other information relating to you personally which you may choose to provide to us.

Data protection law recognises that certain types of personal information are more sensitive. This is known as ‘sensitive’ or ‘special category’ personal information and covers information revealing racial or ethnic origin, religious or philosophical beliefs and political opinions, trade union membership, genetic or biometric data, information concerning health or data concerning a person’s sexual orientation.

Sensitive information will only be collected where necessary, for example, we may need to collect health information from you when you register with us as a volunteer or member of staff or to deliver a community service/project. Clear notices will be provided at the time we collect this information, stating what information is needed, and why.

With your explicit consent, we may also collect sensitive personal information if you choose to tell us about your experiences/story for use in a case study.

If you’re 16 or under

If you’re aged 16 or under, you must get your parent/guardian’s permission before you provide any personal information to us.

The basis for processing data and how we use it

Legitimate interests

We may process your personal data because it is necessary for our or a third party’s legitimate interest. This will always be weighed against your rights, interests and expectations. Our legitimate interests include the operation of C3 in accordance with our charitable objects.  

Examples of where we process personal data in accordance with our legitimate interests include:

  • To correspond with you about our charitable services, including sharing details of our events and of our health welfare services, that you have requested from us;
  • To process donations and payments, and to ask for further support by post, email or telephone if you have done so in the past;
  • To provide tailored information/results to you (unless we are required to obtain your explicit consent, for example in respect of medical information);
  • To inform you of media opportunities, potentially, and of opportunities to write or feature in newsletter and other C3’s content, and to send you these newsletters and other similar updates from time to time;
  • Processing technical information about your use of our website to ensure that content on our website is presented in the most effective manner;
  • Processing enquiries and complaints;
  • Carry out research and analysis, either in house or via a third party, of the services we provide so that we can improve these in future

Building profiles of our supporters and targeting communications

We may use profiling and analytical techniques to ensure communications are relevant and timely, and to provide an improved experience for our service users and supporters.  Analysis also allows us to target our resources effectively, which attendees to our events attendees and donors consistently tell us is a key priority for them. We do this because it allows us to understand who, how and why people support us and helps us to make appropriate requests to our supporters.

When building a profile, we may analyse giving history, geographic, demographic & other information relating to you in order to better understand your interests & preferences, and in order to contact you with the most relevant communications. In doing this, we may use additional information from third party sources when it is available. Such information is compiled using publicly available data about you, for example addresses and listed role/designation. Please let us know if you would prefer us not to undertake such profiling.

Legal obligations

We may also process your personal data for ensuring compliance with our legal obligations. In this respect, we may use your personal data to comply with subject access requests of others, tax legislation (including processing Gift Aid claims, if and as applicable), safeguarding requirements (for example those required by the Charity Commission), for the prevention and detection of crime, and in order to assist the police and other competent authorities with investigations (including criminal investigations).


We will normally seek consent when processing your personal information. At times, the processing of personal data concerning your health may be necessary to protect your vital interests (such as your immediate safety) and it may not be appropriate to seek your consent in such circumstances.

If you have given your consent and you wish to withdraw it, please contact us using the contact details mentioned in point number 8 of this policy.

In some circumstances C3 may seek your specific consent to process your personal data: for example:

  • If we wish to use your name, likeness or an attributed quote in our newsletter, on our website or in marketing materials or as a case study to demonstrate the impact of our work;
  • Sending marketing communications in relation to our events, services and resources by, electronic mail, through our database management systems, by post, by SMS, in respect of which we operate an ‘opt-in’ communications policy;
  • When working with charity, public sector or corporate partners where we have a relationship that we believe could help your financial or on personal circumstances.

When your personal data may be shared with others

We will only use your information for the purposes for which it was obtained. We will not, under any circumstances, sell or share your personal information with any third party for their own purposes, and you will not receive marketing from any other companies, charities or other organisations as a result of giving your details to us.

For the purposes referred to in this Privacy Notice, and relying on the bases for processing as set out in this policy, we will share your personal data with certain third parties, including:

  • Our volunteers (including visitors), agents and contractors where there is a legitimate reason for their receiving the information;
  • Our bank, to whom payment details are provided in order to process donations and payments;
  • Our website operator, who may store details such as name and email address (for example in respect of our e-newsletter mailing list);
  • C3’s independent examiners/auditors;
  • Our professional advisers and/or insurers where it is necessary for us to obtain their advice or assistance;
  • Professionals who assist us in putting together, printing and delivering our newsletter (and other materials) and website content, and our IT support and data storage provider(s);
  • When carrying out research and analysis in order to improve our services.
  • Third party suppliers: We may need to share your information with data hosting providers or service providers who help us to deliver our services, projects, or fundraising activities and appeals. These providers will only act under our instruction and are subject to pre-contract scrutiny and contractual obligations containing strict data protection clauses.
  • Where legally required: We will comply with requests where disclosure is required by law, for example, we may disclose your personal information to the government for tax investigation purposes, or to law enforcement agencies for the prevention and detection of crime. We may also share your information with the emergency services if we reasonably think there is a risk of serious harm or abuse to you or someone else.

Google Analytics

This is a service we use from Google that collects information about how people use our website. We use this to make sure we are providing the best service we can to our web visitors.

Using cookies Google Analytics stores information about:

  • Which pages you visit
  • how long you stay on the page
  • how you came to the site
  • which things you click on

Although we collect this data, we do not collect any personal information. For example, we do not know your name or where you live and the information we collect cannot be used to identify you.  This information is used by C3’s analytical purposes.

Retention of your data

We may retain your personal data for as long as it is necessary to deliver our charitable services; and to protect our legal interests (for example where required by relevant authorities or for a reasonable legal limitation period after we have ceased providing services); or as otherwise stated to you when your data is collected; or for such period as we reasonably consider appropriate in connection with our relationship with you and/or the organisation you represent/ed; or for record-keeping and archival purposes. 

International transfers

As a matter of course, we do not transfer your personal data outside the European Economic Area (EEA). We may, however, transfer your personal data around the world on an ad hoc basis, for example where this is necessary for interaction with you and you are located outside of the EEA. In such circumstances, we will consider whether any additional measures are required in order to give adequate protection for the information when it is transferred outside of the EEA.

Your rights

You have the following rights:

  • To be informed what personal data we hold about you and/or to obtain access to it (i.e. by receiving a copy of it in a relevant form);
  • To require us not to send you direct marketing communications;
  • To require us to correct the personal data we hold about you if it is inaccurate;
  • To require us (in certain circumstances) to erase your personal data;
  • To request that we restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);
  • To receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you; and
  • To object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights.

Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply: for example if we have reason to believe the personal data we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this Privacy Notice.

You can find out more about your rights under data protection legislation at the Information Commissioner’ Office website.

Other websites

Our website contains links to third parties, including social networking sites. If you follow a link to any of these other websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies or for these third-party websites. Please check these policies before you submit any personal data to them.

Questions and concerns

If you have queries or requests, such as unsubscribing or changing your details, or have any questions/concerns about how we process your personal data, or you wish to exercise any of the General Data Protection Regulation (GDPR) rights set our above, please contact

  • By email:
  • By telephone: +44 (0) 20 3096 7706; (charged at local rates)
  • By post: C3 Collaborating for Health, 7-14 Great Dover Street, London, SE1 4YR

Thank you for visiting our site.