Privacy policy

STRUCTURE ONLY - NOT LEGAL TEXT. DO NOT PUBLISH.

This page exists so that navigation, footer links and the CMS structure can be completed. The content must be written or approved by the data controller and its legal adviser in each market, because the controlling entity, supervisory authority and applicable law differ by country.

Sections each market must complete

Who the data controller is, including registered name, address and registration number.

What personal data is collected, and how - donations, newsletter signup, volunteer applications, contact forms, website analytics and cookies.

The legal basis for each processing purpose.

Who data is shared with, including payment providers, fundraising platforms, email systems and any other Mercy Ships entity.

Whether data is transferred outside the country or region, and on what safeguards.

How long data is retained.

The rights of the individual, and how to exercise them.

Contact details for privacy enquiries, including a data protection officer where one is required.

How to complain to the relevant supervisory authority.

The date the policy was last updated.

Note on scope

Volunteer applications and patient data are likely to involve special categories of personal data, including health data. These require their own legal basis and safeguards, and must not be covered by a generic donor privacy statement.