Privacy Policy

Mercy Mission UK

We are Mercy Mission UK. We provide a custodian service to (Give Tree Ltd trading as) My Ten Nights.

This means we support My Ten Nights to process your donations and to make sure it gets to the right charity.

When we receive your donation and personal data we treat this as an Amanah and strive to uphold the trust placed in us.

This privacy notice explains:

  • who is responsible for making decisions about your personal data
  • how your personal data is collected, shared, and used
  • who to contact for any questions about your personal data
  • how you can exercise your privacy rights when you use the My Ten Nights platform.

Mercy Mission UK as a Data Processor

For most of the work we do with your personal data we act as the Data Processor.

This means we are not responsible for making decisions about how your personal data is used or for what purposes.

We simply act only on the instructions of My Ten Nights.

(Give Tree Ltd trading as) My Ten Nights is the Data Controller responsible for your personal data and you should refer to the privacy notice on their website.

 If you have any questions you can contact Give Tree Ltd:

Mercy Mission UK as a Data Controller

Mercy Mission UK acts as a Data Controller of your personal data where you have indicated you wish to add Gift Aid and you are eligible to do so.

Contact Us

If you have any questions about your personal data please contact our Data Protection Officer:

  • By email: [email protected]  
  • By post: Mercy Mission UK DPO Kazient Privacy Experts The Minster Building Great Tower St, London, UK EC3R 7AG

EU Representative

You can contact our EU Representative by using the following details:

  • By email: [email protected]
  • By post: Mercy Mission UK EU Rep c/o Kazient Privacy Experts 77 Lower Camden Street, Dublin, Ireland, D02 XE80

Making a Data Protection Complaint

If you have any concerns about the use of your personal data or the way we handle your requests relating to your rights, you can raise a complaint directly with us by using the contact details provided in this notice.

If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with the UK Information Commissioner’s Office via the details available on their website: www.ico.org.uk.

Personal Data We Collect From You

We do not collect any personal data directly from you.

Personal Data We Collect From Others

We receive your personal data from Give Tree Ltd when you make a donation via the My Ten Nights platform:

  • Identity data - your first name and last name
  • Contact data - your postal address, email address and phone number
  • Profile data - the charities you have chosen to support, the date and time you made your donation
  • Financial data - the last four digits of your credit/debit card and the amount you donated

How Your Personal Data Is Processed

We process your personal data only where we have a valid lawful basis to do so. Your personal data is used for the following purposes:

PurposeType of Personal DataLawful Basis for ProcessingData Controller
To administer your donation(s)Identity
Contact
Profile
Financial
Performance of a contractGive Tree Ltd t/a “My Ten Nights”
To send you a tax receipt for your donationIdentity
Contact
Profile
Financial
Performance of a contractGive Tree Ltd t/a “My Ten Nights”
To claim gift aid on your donation (where you have indicated you wish to do so)Identity
Contact
Profile
Financial
Performance of a contractMercy Mission UK

How Your Personal Data Is Shared

Where we act as the Data Controller we share your personal data with:

  • our service providers
  • tax, government, and any relevant regulatory authorities
  • prosecuting authorities and courts, and/or other relevant third parties connected with legal proceedings or claims
  • law enforcement agencies
  • third parties where we are required to do so by law

Transfer of Your Personal Data Outside the UK

Your personal data may be transferred outside of the UK to our trusted service providers.

We only engage service providers that can demonstrate that they will keep your personal data secure and private.

We always make sure appropriate safeguards are in place.

Retaining Your Personal Data

As a Data Controller we retain your personal data for as long as necessary to fulfil our legal obligations. As a Data Processor we retain your personal data as instructed by Give Tree Ltd.

Profiling

We do not engage in any profiling activities with your personal data.

Automated Decision Making

We do not use any automated processes to make decisions about you that produce legal or significant effects concerning you.

Your Data Subject Rights and How to Exercise Them

You have rights relating to the personal data we hold about you. These rights may be subject to some exceptions and/or limitations.

You can request to exercise any of your rights by contacting us where we act as the Data Controller.

You can request to exercise any of your rights by contacting Give Tree Ltd where we act as the Data Processor.

Your rights:

Right to be informed: We are obliged to provide clear and transparent information about our processing activities of your personal data.

Request access to your personal data (commonly known as a “data subject access request”): You have the right to understand what personal data we hold about you and why.

Request correction of the personal data: If we hold inaccurate or incomplete personal data, you have the right to request us to rectify or correct your personal data.

Request erasure of your personal data: You may ask us to delete or remove personal data. We may not always be able to comply with your request, where this is the case we’ll let you know why.

Request restriction of processing of your personal data: You may ask us to stop processing your personal data. We will still hold the data but will not process it any further. You may exercise the right to restrict processing when one of the following conditions applies:

  • the accuracy of the personal data is contested
  • processing of the personal data is unlawful
  • we no longer need the personal data for processing but the personal data is required for part of a legal process
  • the right to object has been exercised and processing is restricted pending a decision on the status of the processing

Please note when you request to exercise any of your rights we may need some information from you to help us confirm your identity so we can keep your personal data protected from imposters.

Give Tree Ltd