RCB Bonds PLC (the “Company”) is committed to protecting your privacy and fully endorses and adheres to the six principles of the General Data Protection Regulations (GDPR). These principles specify the legal conditions that must be satisfied in relation to obtaining, handling, processing, transportation, and storage of personal data.

This page will let you know how the Company uses and protects your personal information. If at any time you have any questions about this privacy policy please email Allia Bond Services (the “Servicer”) at gdprcompliance@allia.org.uk.

RCB Bonds PLC is a public company registered in England and Wales with company number 8940313. Registered office: Allia Future Business Centre, King’s Hedges Road, Cambridge, CB4 2HY.

Further information about the Company’s Directors can be found here.

This Privacy Policy applies to the Company and to the Servicer, which provides administrative services to the Company (together “we” or “us”).

Personal information is any information that can be used to identify you. We may also collect information from you when you report a problem with this website or if you complete a survey which we use for research purposes. This personal information may include your name, personal or work email address, postal address, telephone or mobile number, as well as how you came to find out about us or our services. We may also keep a record of what mailing lists you are signed up to, and you have control in unsubscribing or updating these preferences at any time by either contacting us directly or by following the link at the bottom of a newsletter that we sent to you.

We may also collect details of your visits to our website, for example your location data, other sites you’ve visited and the resources that you access. We use this to provide you with the information, services or products that you’re interested in and are most relevant to you. If we take photos for marketing purposes we will always ask for your consent to use the photograph that you’re featured in.

This personal data, whether it is held on paper, digitally or via other media, will be subject to the appropriate legal safeguards as specified in the General Data Protection Regulation 2018 (GDPR).

To understand how we use information about the communications devices you use, such as IP address (the location of the computer on the internet) and cookies, please see our Cookies policy page.

If you wish to exercise any of your rights, as listed below, please notify the Servicer by email to gdprcompliance@allia.org.uk

• Access to your personal information;
• Objection to processing of your personal information;
• Objection to automated decision-making and profiling;
• Restriction of processing of your personal information;
• Your personal data portability;
• Rectification of your personal information; and
• Erasure of your personal information.

If you make a request relating to any of the rights listed above, we will consider each request in accordance with all applicable data protection laws and regulations. No administration fee will be charged for considering and/or complying with such a request unless the request is deemed to be excessive in nature.

Upon successful verification of your identity you are entitled to obtain the following information about your own personal information:

• The purposes of the collection, processing, use and storage of your personal data;
• The source(s) of the personal information, if it was not obtained from you;
• The categories of personal data stored about you;
• The recipients or categories of recipients to whom your personal data has been or may be transmitted, along with the location of those recipients;
• The envisaged period of storage for your personal data or the rationale for determining the storage period;
• The use of any automated decision-making and/or profiling.

You can make the above request by emailing gdprcompliance@allia.org.uk.

We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.

We hope we would be able to resolve any complain that you have, but if you are not happy you can contact the ICO via https://ico.org.uk/your-data-matters/raising-concerns/

To make sure we always have the most up-to-date information about how to contact you, we may also, from time to time, update your records to reflect any changes to your personal information. This information may come directly from you, or it may come from a third party that we consider is legitimate and trustworthy and in circumstances where it is appropriate and where you will have had a clear expectation that your details would be passed on for this purpose. We may also combine the information you provide us with information we collect from trusted third parties and partners, business partners, or sub-contractors (where applicable and relevant).

We use your cookies to give you a more personalised experience online. It helps us create a more effective website that reflects your needs. We may also collect and record information about how you use our site by collecting your IP address (in simple terms that just means a number that identifies a specific computer or other internet device). By continuing to use our site, you agree to our use of cookies – but these cookie files and IP addresses will never identify you as an individual. For more information on cookie files and IP addresses read our cookies policy.

The Company is a special purpose vehicle, created by Allia Ltd for the purpose of issuing bonds and lending the proceeds to charities in the UK. It has no employees and relies on the Servicer to provide corporate administration and loan management services. Any data collected by the Company is therefore shared with the Servicer and, where relevant, the Servicer’s group. It will not be shared with or sold to any other party.

These are the ways that we may use your personal information:

• We will send news announcements to you if you have subscribed to the Company’s mailing list.
• From time to time we may invite feedback which may be used for research and, if you have given specific consent, for marketing purposes.
• We will use information about individuals employed by charities for loan management purposes.

We only hold your data as long as necessary and regularly update our procedures.

You can contact us to change your contact preferences or to ask us to remove your information by emailing gdprcompliance@allia.org.uk.

We will never rent or sell your personal information to other organisations for use by them in any way, including in their own direct marketing activities.

We may ask external service providers to carry out tracking and analysis on our behalf as described in the cookies policy. For instance, we may pass on hashed out digital data (such as IP addresses) to our web analytics agency to monitor how well our websites or campaigns are performing.

We will only disclose your personal information to third parties if we are legally obliged to; or in order to enforce or apply our terms of use for this website or other agreements; or to protect the rights, property or safety of the Company. This includes exchanging information with other companies and organisations for the purposes of fraud detection or criminal investigations and would request your consent.

This website may include links to other websites, not owned or managed by the Company. Whilst we try our best to only link to reputable websites we cannot be held responsible for the privacy of data collected by sites not managed by the Company, nor can we accept responsibility or liability for those policies. For this reason, you should consult the privacy policy on any external website you link to before you submit any data to those websites.

The Servicer has taken all steps reasonably necessary to make sure that your data is treated securely and in accordance with this privacy policy. We have done our best to protect your personal data, and ensured that it will be held in compliance with European data protection regulations.