Last updated on: 1 July 2021

Privacy Policy

This Privacy Policy governs the use of data that is collected by The Virgin Foundation (operating as Virgin Unite) and Virgin Unite Trading Limited.  This website at www.human-atwork.org is managed and operated by the 100% Human at Work team at Virgin Unite (the “Website”).  The use of this Website is governed by this Privacy Policy, which is set out in the document below, and the Terms of Use that can be found on the Website.  The Website is hosted by Squarespace, which has its own Privacy Policy that can be found on Squarespace’s website.  

The Virgin Foundation (operating as Virgin Unite) is an independent UK charity.  There are several other not-for-profit or charitable organisations in other jurisdictions that use or refer to the “Virgin Unite” brand and may have similar objectives; however, they are separate and independent to Virgin Unite’s UK entity.  The Website may include content relating to those organisations, and the Website may provide a means to donate to them.

Here at The Virgin Foundation (operating as Virgin Unite) and Virgin Unite Trading Limited ("Unite", "we" or "us"), we take your privacy seriously.  We're committed to protecting the privacy of any personal data you give us and we will comply with all relevant data protection legislation.

We have a philosophy about the way we use the data you share with us and the way that we communicate with you.  If you hear from us, we will always aim to be respectful, relevant and appropriate.  If at any time you don't feel we've lived up to our philosophy, please let us know straight away using the details set out in the “Talk to us” section of this Privacy Policy below.

Please take the time to read this Privacy Policy as it is important for you to understand how we collect and use your data as part of your use of the Website and our provision of related services and projects. This Privacy Policy explains how we collect, use and store the personal data you provide to us. References in this Privacy Policy to 'personal data' means data that relates to you and that identifies or can be used to identify you, which might be your name, email address or other identifiers relating to you, such as cookies, IP addresses or logs.

For the purposes of relevant data protection laws, Virgin Unite is a “data controller” of personal data we hold and process about you, including data collected, used and/or otherwise processed in conjunction with your use of the Website.  That means, among other things, that we control how the personal data relating to you that we hold is used, and we have certain obligations under data protection laws in doing so.  We are registered on the public register of fee payers maintained by the Information Commissioner in the UK.  See the "Talk to us" section below for details of how to contact us.

This Privacy Policy may change from time to time and, if it does, the most up-to-date version will always be available on the Website. 

We are proud to give you access to the Website, to work with you in relation to your support of Unite and to assist with related services and projects and, in return, we may collect, use and share your personal data.  We will only use your personal data for our purposes in a manner permitted by relevant data protection legislation, which may include:

  • for our legitimate interests (for example to provide the Website and its features and in order to give you the best user experience);

  • where you have explicitly consented (for example by actively signing up to receive communications from us); or

  • where we are under a legal obligation to do so (for example in order to comply with UK or EU law).

By “legitimate interests”, we mean our interests in managing the Website and our relationship with you. We will make sure that we take into account any potential impact that such use may have on you. Our legitimate interests will not automatically override your interests and we won’t use your information if we feel that your interests override ours (unless, of course, you provide your consent or we have a contractual or legal obligation to use your information in that way). If you have any questions or concerns, please contact us using the details set out in the “Talk to us” section below.

Cookie Policy

Squarespace may use cookies to improve your experience on the Website but please note that we have disabled Squarespace analytics and performance cookies.  You can find out more about what cookies are and the cookies Squarespace uses by clicking here.

What are cookies?

A cookie is a text file containing small amounts of information which is downloaded to your device when you access a website. The text file is then sent back to our server each time your browser requests a page from the server. This enables us to operate the site more effectively and load the site so that it reflects your personal preferences, based on your previous browsing on the Website as well as keywords we may be able to gather from URLs of other webpages from which you accessed the Website. Cookies can also allow us to do various other things, as explained below.

What cookies do we use?

When you visit the Website, the following types of cookies may be downloaded to your device:

Strictly Necessary Cookies

These are cookies that are required for the administration and operation of our site. Some cookies that we use are necessary for the Website to function properly and to enable you to move around the Website and use its features.

Functional Cookies

We may use functional cookies that allow us to remember choices you have made on the Website so as to provide you with a more enhanced user experience.  We may also use cookies to embed certain social posts on the Website.

Analytical and Performance Cookies

We may use analytics service providers for website traffic analysis and reporting. Analytics service providers generate statistical and other information about the use of the Website by using cookies. They allow us to recognise and count the number of visitors and to see how often visitors return to the Website, how long they stay and how visitors move around the Website when they are using it. This helps us to improve the way the Website works, for example, it helps users to find what they are looking for easily. The information generated relating to the website may be used to create reports about the use of the Website and the analytics service provider will store this information.

You can find more information about the individual cookies we use and the purposes for which we use them in the table below:

 Squarespace’s strictly necessary cookies

Name - Purpose, type, and duration

  • _acloggedin

    • Supports login by Scheduling client if the client has an account.

    • Cookie

    • January 1, 2025

  • _client_acloggedin

    • Supports login by Scheduling client if the client has an account.

    • Cookie

    • January 1, 2025 

  • algoliasearch-client-js

    • Adds auto-populated suggestions to address fields in Scheduling to help clients complete forms faster.

    • localstorage

    • Persistent

  • AWSALB, AWSALBCORS

    • Improves performance in Scheduling by using one server for the duration of the session.

    • Cookie

    • 1 week

  • CART

    • Shows when a visitor adds a product to their cart

    • Cookie

    • 2 weeks

  • CHECKOUT_WEBSITE

  • Commerce-checkout-state

    • Stores state of checkout while the visitor is completing their order in PayPal

    • sessionstorage

    • Session

  • Crumb

  • hasCart

    • Tells Squarespace that the visitor has a cart

    • Cookie

    • 2 weeks 

  • Locked

    • Prevents the password-protected screen from displaying if a visitor enters the correct site-wide password. 

    • Cookie

    • Session

  • PHPSESSID

    • Securely authenticates a visitor during their checkout in Scheduling.

    • Cookie

    • 1 month

  • RecentRedirect

    • Prevents redirect loops if a site has custom URL redirects. Redirect loops are bad for SEO.

    • Cookie

    • 30 minutes

  • remember_client

    • Remembers Scheduling client’s login details if they have an account.

    • Cookie

    • 365 days 

  • siteUserCrumb

  • SiteUserInfo

  • SiteUserSecureAuthToken

    • Authenticates a visitor who logs into a customer account

    • Cookie

    • 3 years

  • squarespace-announcement-bar

    • Prevents the announcement bar from displaying if a visitor dismisses it

    • localstorage

    • Persistent

  • squarespace-likes

    • Shows when you've already "liked" a blog post.

    • localstorage

    • Persistent

  • squarespace-popup-overlay

    • Prevents the promotional pop-up from displaying if a visitor dismisses it

    • localstorage

    • Persistent

  • ss_cookieAllowed

    • Remembers if a visitor agreed to placing Analytics cookies on their browser if a site is restricting the placement of cookies

    • Cookie

    • 30 days

  • ss_sd

    • Ensures that visitors on the Squarespace 5 platform remain authenticated during their sessions.

    • Cookie

    • Session

  • Test

    • Investigates if the browser supports cookies and prevents errors.

    • Cookie

    • Session

  • TZ

    • Allows a Scheduling client’s appointments to display correctly based on their time zone preferences.

    • localstorage

    • Persistent

YouTube Cookies
(Functional Cookies)

Used for embedding social posts onto the website
https://policies.google.com/privacy#infocollect

YSC
VISITOR_INFO1
use_hitbox
LOGIN_INFO

  • At end of session
    6 months
    At end of session

    • Used to gather information about visitors and video usage and allow the embedding of videos on the site.

PREF

  • 10 years

    • Used to store visitor preferences

Google Analytics Cookies
(Analytical and Performance Cookies)

Used for serving and recording clicks for certain links on the website

_ga
_gid

  • 2 years
    24 hours

    • Used for visitor identification

_gac_UA-XXXXXXX

  • 90 days

    • Used to hold campaign information

_gat

  • 1 minute

    • Used for the throttling of data to Google Analytics

DV
HSID
SID
SIDCC

  • 2 years
    2 years
    2 years
    2 years

    • Used to ensure security and privacy

NID
SSID

  • 90 days
    2 years

    • Used to store visitor preferences

UULE

  • At end of session

    • Used to store visitor geolocation Information


https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
https://policies.google.com/technologies/

 

Third Party Cookies

Because Unite and Richard Branson have a strong presence on various social networks, we try to make it as easy as possible to share content and to see what content is popular on those networks. We add buttons to allow people to easily share to those networks.  When we include these social 'plugins', it gives those sites the flexibility to use their own cookies. They can't read any cookies we set from the Website, and we can't read any cookies they set, but it lets them do the same kind of traffic measuring that we do on the rest of the Website (and it also lets them know whether you're logged into their site).

Other sites and services (including, for example, advertising networks, providers of external services like web traffic analysis services and content recommendation engines) may also use cookies, over which we have no control. These cookies are likely to be analytical and performance cookies or advertising and targeting cookies and we use these to improve your experience on the Website.

The following third parties may use cookies:

  • Facebook

  • Instagram

  • LinkedIn

  • Twitter

  • YouTube

  • Google 

How do I turn cookies off?

If you do not wish us to download cookies or you don’t agree with how we use these cookies, you can change the settings on your internet browser to reject cookies.  For more information, please consult the ‘Help’ section of your browser or visit www.aboutcookies.org, www.allaboutcookies.org, or http://optout.aboutads.info/.  Please note that if you do set your browser to reject all cookies (including strictly necessary cookies), you may not be able to use all of the features on our site.

What information will we collect from you?

You may give us information (including personal data) about you by filling in forms on the Website or by communicating with us verbally, by phone, by email, by your actions or otherwise. This includes information you provide when you create an account, make a donation, request to get involved in a project or an event, update your profile information, enter a competition, promotion or survey and when you report a problem with the Website. The information you give us may include the following:

  • contact details including your name, email address and phone number;

  • personal details including gender, date of birth and location where you are based;

  • professional details including your role, skills, years of experience and CV;

  • community trip details including passport details, emergency contact details, medical history and dietary requirements;

  • financial information including bank account details, card details, details of donation(s); and

  • project and donation history information including whether you've taken part in a project or donated before.

If you do decide to make a donation to Unite, our donors due diligence policy requires that we collect some further information to ensure the legitimacy of the origin of the donation. As part of this due diligence, we may be required to collect information such as, your nationality, your home address or other addresses at which you reside and information on your business activities. It is your decision as to whether you give us this information but in the event that you choose not to share this information with us, we may not be able to accept your donation.  We may also seek information independently (e.g. by carrying out searches on the internet).

Will we use your information for marketing?

If you provide your consent to receive information around events, donation opportunities or community trips, we may communicate with you in relation to them. You may withdraw your consent to these communications at any time by contacting us using the details set out in the “Talk to us” section of this Privacy Policy below.

How else will we use your information?

We may also use your information (including personal data) for the following purposes:

  • to help us make the Website and related content, services and projects available to you (please see the "Will we share your information with anyone else?" section below for more information);

  • to make the Website more relevant for you and our other visitors. This includes sometimes requesting personal data from you to help us run and develop the Website and associated functions;

  • to arrange an event, trip or project that you may want to take part in;

  • to process any donation you have given;

  • to send you our newsletter if you have signed up to receive it;

  • if you have consented, to market community trips or projects to you, or to ask you to donate;

  • to carry out occasional surveys and to analyse our user base — ultimately we want to ensure that the Website provides everything that you — our audience — is looking for;

  • to check whether you are eligible for a competition and to contact you if you win;

  • to comply with the law; or

  • as we feel is necessary to prevent illegal activity or to protect our interests.

How long do we keep hold of the information?

There are certain reasons that we have to keep hold of some of your information (including personal data). Naturally we keep your information while you are a member of Unite so that we are able to communicate with you and provide you with the information set out above, but we may also keep it after you've left us (though only for as long as we need it). How long we keep it depends very much on the type of information we are holding and the purpose for which we need it (as well as complying with our legal obligations).

We may also keep information about how you have used the Website to help us improve our offering for other members, though we will remove any identifiable (or personal) data.

You can request that we delete your personal data at any time. 

Will we share your information with anyone else?

We may share your information only if:

  • you specifically request this, such as when you submit information to enquire about projects or donations through the Website;

  • we are required to do so to comply with a contractual obligation or legal requirement or with the directions of the courts or other authorities;

  • we feel it is reasonably necessary to prevent illegal activity or to protect our interests;

  • we feel that Virgin entities’ products and services, or the activities of other Virgin Unite branded organisations may interest you;

  • it helps other members of the Virgin group, Virgin Unite branded organisations or other third parties to arrange (or help run smoothly) an event, trip or project that you may want to, or are confirmed to take part in and in which we are involved; or

  • it helps our trusted third party service providers to provide and improve our service to you or to carry out surveys and user analysis to understand your needs and preferences - please see details of our trusted third party service providers below.  We may also share your information with MailChimp, who securely host emails.  We require these service providers to keep your personal data safe and secure. These trusted third parties would only be permitted to use your personal data for the purposes we specify.

As at August 2020, the trusted third party service providers with whom we currently share personal data are:

  • our payment processing agents (currently MasterCard and Stripe); and

  • our supporter and finance database providers (currently Salesforce and Unit4).

If you sign up to attend an event, we may also share your personal data with third parties we use in organising and managing that event, including providers of accommodation, travel operators, an e-signature platform and a survey platform.

If we do share personal data with other third party service providers in the future, we will update this Privacy Policy as soon as possible to include them.

We may share some broader statistics and customer profiling information with third parties and other Virgin entities - but we'll keep it anonymous, so you won't be identifiable from that data.

We will never rent or sell our users’ details to any other organisation or individual.

Will we transfer personal data outside the EU?

Countries outside the European Union may have a lower standard of protection for personal data than that required by EU data protection laws. The information we collect from you may be transferred to, and stored, outside the EU (including for example in the United States) and may also be processed by people operating outside the EU who work for us or one of our suppliers. If we need to transfer your data to a company based outside the EU (e.g. if our hosting company is based in the US), we'll take steps to make sure your personal data is handled in line with EU law. If you would like any more details on this please get in contact with us (using the details set out in the “Talk to us” section below).

What are my rights?

You have the right to stop using the Website at any time. Please note that, in these circumstances, we may still keep your data for the reasons set out in the "How long do we keep hold of information?" section.

You also have the following rights when it comes to our handling of your personal data:

  • Right of access – you have the right to request a copy of the personal data we have about you and to request supporting information explaining how the personal data is used. Please note that sometimes we may ask you to provide proof of identity before we show you your personal data - so we can prevent unauthorised access.

  • Right of rectification – you have the right to request that we rectify inaccurate personal data about you that we have.

  • Right of erasure – you have the right to request that we erase all personal data about you that we have (please note that we may be able to reject or restrict the request in some circumstances, depending on the information we hold and our lawful reason to keep it).

  • Right to restrict processing – in some situations, you have the right to request that we do not use the personal data you have provided (e.g. if you believe it to be inaccurate).

  • Right to object, including to direct marketing – you have the right to object to certain processing by us of your personal data (unless we have overriding compelling grounds to continue processing) and the right to object to direct marketing by us.

  • Right to data portability – you may have the right to request that we provide you with certain information that you have provided to us in electronic format or to provide that information to a third party.

Please get in touch with us at the address below if you would like to exercise any of these rights (including having access to your data):

Virgin Unite
c/o Virgin Management Limited
66 Porchester Road
London W2 6ET
UK

Email: contact@virginunite.com

Alternatively, you can contact dpo@virgin.com.

You have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), about our handling of your data. You can use the relevant section of the ICO website to do this: https://ico.org.uk/make-a-complaint/.

What about personal data relating to minors?

Protecting the online privacy of children is especially important to us. If you are under 18 years old, please do not provide us with your name, contact details or any other information about yourself. To find out more, please read our Terms and Conditions.

Are you protected by this Privacy Policy outside the Website?

The Website contains links to other websites. Obviously, we don't have any control over those websites and we cannot take any responsibility for any information you give them. Other sites have different privacy and security policies and terms and conditions, so we advise you to read them before using those sites.

Talk to us

If you have any questions, comments or complaints regarding this Privacy Policy, just get in touch. You can contact us using the details set out in the “What are my rights?” section above.

The Virgin Foundation (operating as Virgin Unite), a company limited by guarantee, registered in England and Wales with company number 02155645, UK registered charity number 297540 with its registered office at 7 Savoy Court, London WC2R 0EX. ©2021