Privacy Policy

Last updated: 3rd September 2025

This policy covers all information collected following the date of the last update shown above. If you have concerns about information collected before this date, please contact us using the information below.

Contact information

This privacy notice explains how we collect, use, and store your personal information. If you have any questions, concerns, or complaints about your privacy that are not answered by this policy, you can contact us by emailingthe24hourrun@gmail.com.

If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the Information Commissioner's Office (ICO) using the contact details below:

ICO Contact Details

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint

Our Responsibilities

The 24 Hour Run Against Homelessness operates within the United Kingdom, and so we are required to adhere to the following legislation with regards to collecting and processing your personal information:

The General Data Protection Regulation ('GDPR')
The Data Protection Act 2018 ('DPA')
The Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by The Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011

For the purposes of the GDPR and DPA, we are a data controller.

We must have a lawful basis for collecting and using your personal information. For our purposes, we rely on:

Consent - Where possible, we will seek your explicit consent for any data collection and processing. This consent must be freely given and not given as a condition of a service.
Legitimate interest - In some cases, collection of certain data is necessary (e.g. responding to an enquiry). In such cases, we rely on legitimate interest as the lawful basis.

We must not keep personal data longer than necessary, unless used solely for archiving, scientific/historical research, or statistical purposes.

Your Rights

You have a number of rights with respect to any data that we collect about you:

Access - Request copies of your personal information.
Rectification - Ask us to correct or delete inaccurate or incomplete data.
Erasure - Request deletion of your personal information.
Restriction of processing - Limit how we use your data.
Objection to processing - Object to data processing.
Portability - Ask us to transfer your data to another organisation or to you.
Consent withdrawal - Withdraw consent at any time (where consent was the lawful basis).

We must respond to any request regarding your personal information without undue delay and within one month.

What Information We Collect, How We Use It, and How Long We Keep It

When we collect it	What we collect	How we use it	Lawful basis	How long we keep it
When you sign up to an event	Name, contact details, and other requested details	To help us plan our events effectively	Legitimate interest	Organisations' names retained indefinitely; other info deleted after 1-3 years
When you contact us directly	Information provided in your message	To respond to your enquiry or request	Legitimate interest	Retained according to system defaults
When you make a donation via a third-party fundraising platform	Display name and donation amount (if public)	Acknowledgements on our website, livestreams, or social media	Legitimate interest	Retained indefinitely as part of fundraising records
When you sign up to volunteer at events	Contact info, emergency contact, availability, health info (where required)	To manage rosters and ensure safety at events	Legitimate interest	Names and event participation retained indefinitely; other info deleted after 1-3 years
When photos, videos or audio are taken at events	Your image, voice, or likeness	Promote events and archive history	Consent and/or Legitimate interest	Retained indefinitely unless removal requested
When you sign up for marketing emails	Name, email address	To send you news and updates	Consent	Retained until you withdraw consent; unsubscribed emails go to suppression list

Data Security

We take appropriate technical and organisational measures to protect your personal information, including secure systems, encryption where appropriate, access controls, and restricting access to staff/volunteers who need it.

Cookies & Tracking

Our website uses cookies and similar technologies which are essential for the site to function. We do not knowingly use any cookies that are not essential.

International Transfers

Some of the third-party services we use may transfer your personal data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs).