Privacy notice

Skyeline Marketing Ltd is a face-to-face fundraising agency. For the information described here we are the data controller. You can reach us about anything in this notice at amy@skyelinemarketing.co.uk.

Skyeline Marketing Ltd, registered office Third Floor, North Suite, 125 Buchanan Street, Glasgow, G1 2JA.

When one of our fundraisers signs you up to support a charity, your details are collected on the charity's own platform, under the charity's privacy notice, and the charity is the controller of them. We do not keep a copy. Our own records hold the campaign, the fundraiser, the time, the amount and a reference number, so that we can pay the fundraiser correctly and report to the charity how the campaign went. Nothing in our records identifies you.

If you want to change or cancel your support, contact the charity directly. If you have a concern about how you were approached, see our complaints procedure.

The application form asks for your name, email address, phone number, the office nearest you and anything you choose to tell us. We use it to contact you about the job, to arrange an interview and, if you join, to start your onboarding. The legal basis is the steps needed before entering a contract with you.

If you are not hired we keep the application for six months in case a place opens, then delete it. If you join, it becomes part of your staff record.

A message sent through the site or by email is kept for as long as it takes to deal with it and for twelve months afterwards, so that a follow-up makes sense. The legal basis is our legitimate interest in answering you.

Staff records are covered by the staff privacy notice you receive when you join. In short: we hold what is needed to employ and pay you, to meet our legal duties (right to work, tax, safeguarding checks), and to run the work, including the record of your shifts, the conversations you log and the photographs taken when you clock in. Those records are also the evidence a charity is entitled to see on how its campaign was run.

The photographs taken at clock-in — the badge and the stand — and the location fixes recorded between clocking in and clocking out are about our own staff, not about the public. They are processed to prove a shift was worked where and when it was booked, and are covered by the staff privacy notice.

• The charity whose campaign you were working on, or applied for, where the record concerns that campaign.
• Supabase, through Lovable Cloud, for the hosting and the database, in the European Union (Ireland).
• Resend, for email we send.
• Twilio, for text messages we send.
• Google Fonts, which serves the typefaces this website uses.
• Regulators, where the law or the Code of Fundraising Practice requires it.
• Nobody else. We do not sell or rent personal information.

Each of those providers processes information on our instructions and under a written agreement. Where information leaves the United Kingdom it goes to the European Economic Area, which the UK government has found to provide an adequate level of protection, so no further safeguard is required.

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to our use of it, ask us to restrict it, or ask us to send it to you or to somebody else in a portable form. Where we rely on your consent for something, you can withdraw that consent at any time, and withdrawing it does not affect anything done before you did. Write to amy@skyelinemarketing.co.uk and we will answer within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.