Introduction
This privacy notice tells you what to expect us to do with your personal information.
Who we are
Olive Ridley Project is a Charitable Incorporated Organisation, operating in the UK, Kenya, the Republic of Maldives, Oman, Pakistan, and Seychelles.
Olive Ridley Project, Charity Registration number 1165905, registered in England & Wales.
Registered address: 91 Padiham Road, Sabden, Clitheroe, Lancashire, BB7 9EX, United Kingdom
Olive Ridley Project – Maldives, Registration number CR/04/2022 in the Republic of Maldives.
Registered address: H. Kaneerumaage, Dhonhuraa Goalhi, 20037 Malé, Republic of Maldives
Olive Ridley Project – Kenya, Registration number NGO-EPFPJ6 in Kenya.
Registered address: 10 Diani Bazaar Shopping Centre, Diani Beach Road, P.O. Box 5331 – 80401, Kwale County, Kenya
Contact details:
Post: Olive Ridley Project, 91 Padiham Road, Sabden, Clitheroe, Lancashire, BB7 9EX, UK
Telephone: +44 7724 775 071
Email: dataprotection@oliveridleyproject.org
What information we collect, use, and why
Name and contact details:
- To provide services and goods, including delivery and third party referrals
- To receive donations or funding and organise fundraising activities
- For service updates or marketing purposes
- For research or archiving purposes
- To comply with legal requirements
- For recruitment purposes
- For dealing with queries, complaints or claims
Date of birth:
- To provide services and goods, including delivery and third party referrals (only for volunteering and veterinary trainees)
- For recruitment purposes
National Insurance Number:
- For recruitment purposes
Emergency contact details:
- To provide services and goods, including delivery and third party referrals (only for volunteering and veterinary trainees)
Photographs or video recordings )or recorded images):
- To provide services and goods, including delivery and third party referrals
- For research or archiving purposes
- For recruitment purposes
- To comply with legal requirements
Service use history:
- To provide services and goods, including delivery and third party referral
- For dealing with queries, complaints or claims
Dietary information:
- To provide services and goods, including delivery and third party referral (only for volunteering and veterinary trainees)
Information about lifestyle, interests or personal history:
- To provide services and goods, including delivery and third party referral (only for volunteering and veterinary trainees)
Information relating to compliments or complaints:
- To provide services and goods, including delivery and third party referrals
- For dealing with queries, complaints or claims
Donation history:
- To receive donations or funding and organise fundraising activities
- For service updates or marketing purposes
- For research or archiving purposes
Payment details:
- To receive donations or funding and organise fundraising activities
- For dealing with queries, complaints or claims
- To provide services and goods, including delivery and third party referrals
Tax payer information (for Gift Aid Purposes):
- To receive donations or funding and organise fundraising activities
Gifts in wills:
- To receive donations or funding and organise fundraising activities
Website user information (including user journeys and cookie tracking):
- To receive donations or funding and organise fundraising activities
- To provide services and goods, including delivery and third party referrals
- For service updates or marketing purposes
- For analytical purposes
Visitors to our stores and website:
- To receive donations or funding and organise fundraising activities
- To provide services and goods, including delivery and third party referrals
Marketing preferences:
- For service updates or marketing purposes
Purchase or service history:
- To provide services and goods, including delivery and third party referrals
- For service updates or marketing purposes
- For research or archiving purposes
- For dealing with queries, complaints or claims
- For analytical purposes
Records of consent, where appropriate:
- To record, manage and demonstrate individuals’ consent to the processing of their personal data, and to enable them to withdraw consent where applicable
- For service updates or marketing purposes
- For research or archiving purposes
Identification Documents (including copies of passports or other photo ID):
- To provide services and goods, including delivery and third party referrals
- To comply with legal requirements
- For visa processing purposes, accommodation and transport bookings.
- For recruitment purposes
Financial transaction information:
- To provide services and goods, including delivery and third party referrals
- To comply with legal requirements
- For dealing with queries, complaints or claims
Health and Safety information:
- To provide services and goods, including delivery and third party referrals (only for volunteering and veterinary training)
- To comply with legal requirements
- For dealing with queries, complaints or claims
Customer accounts and records:
- To provide services and goods, including delivery and third party referrals
- For dealing with queries, complaints or claims
Learner and course participation data:
- To provide services and goods, including delivery and third party referrals
- For research or archiving purposes
- For dealing with queries, complaints or claims
- For service updates or marketing purposes
- For analytical purposes
Education and training data:
- To provide services and goods, including delivery and third party referrals
- For research or archiving purposes
- For dealing with queries, complaints or claims
- For service updates or marketing purposes
- For analytical purposes
Safeguarding information:
- To comply with legal requirements
Criminal offence data:
- To comply with legal requirements
Any other personal information required to comply with legal obligations:
- To comply with legal requirements
Employment history (e.g. job application, employment, references or secondary employment):
- For recruitment purposes
- For visa processing purposes
Right to work information:
- For recruitment purposes
Details of any criminal convictions (e.g. Disclosure Barring Service, Access NI or Disclosure Scotland checks):
- For recruitment purposes
Witness statements and contact details:
- For dealing with queries, complaints or claims
Relevant information from previous investigations:
- For dealing with queries, complaints or claims
Correspondence:
- To provide services and goods, including delivery and third party referrals
- For dealing with queries, complaints or claims
Social Media ID:
- For visa processing purposes
We also collect or use the following special category information. This information is subject to additional protection due to its sensitive nature:
Health information:
- To provide services and goods, including delivery and third party referrals (only for volunteering and veterinary training)
- For vital interests
Racial or ethnic origin:
- For research or archiving purposes
Religious or philosophical beliefs:
- For research or archiving purposes
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
- Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
- Your right to erasure – You have the right to ask us to delete your personal information. Read more about the right to erasure.
- Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
- Your right to object to processing – You have the right to object to the processing of your personal data. Read more about the right to object to processing.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collection and use of your data are:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
- Contract – we have to collect or use the information so that we can enter into or carry out a contract with you. All of your data protection rights may apply, except the right to object.
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
- Legitimate interests – we’re collecting or using your information because it is necessary for our operations (or a third party’s goals), which do not override your rights to freedoms, privacy or expectations.
- Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
Reason for collection and use of date and lawful bases
To provide services and goods including delivery and third party referrals:
- Consent
- Contract
- Legal obligation
- Legitimate interests
- Vital interests
To receive donations or funding and organise fundraising activities:
- Consent
- Contract
- Legal obligation
For service updates or marketing purposes:
- Consent
- Legitimate interests
For research or archiving:
- Consent
- Contract
- Legitimate interests
To comply with legal requirements:
- Consent
- Contract
- Legal obligation
For recruitment purposes:
- Consent
- Contract
- Legal obligation
- Legitimate interests
For dealing with queries, complaints or claims:
- Consent
- Contract
- Legal obligation
- Legitimate interests
Where we get personal information from
- Directly from you
- Family members or carers
- Schools, colleges, universities or other education organisations
- Publicly available sources
- Previous employers
How long we keep information
For more information on how long we store your personal information or the criteria we use to determine this please ask us for a copy of our retention policy.
Who we share information with
Data controllers
We are joint data controllers with the branches of the charity. These are listed below.
Organisation name: Olive Ridley Project – Maldives
Category of recipient: Branch of the Olive Ridley Project
Country the personal information is sent to: The Republic of Maldives
Organisation name: Olive Ridley Project – Kenya
Category of recipient: Branch of the Branch of the Olive Ridley Project
Country the personal information is sent to: Kenya
In order to provide you with the best service when volunteering or training, we sometimes have to share your information with other data controllers. These are listed below:
For volunteers and trainees:
Organisation name: Maldives Immigration
Category of recipient: Immigration authority
Country the personal information is sent to: The Republic of Maldives
How the transfer complies with UK data protection law: Performance of a contract or Explicit Consent for Volunteers and Veterinary Trainees.
Organisation name: Coco Palm Dhuni Kolhu
Category of recipient: Resort
Country the personal information is sent to: The Republic of Maldives
How the transfer complies with UK data protection law: Performance of a Contract
Organisation name: Jawakara Islands Maldives
Category of recipient: Resort
Country the personal information is sent to: The Republic of Maldives
How the transfer complies with UK data protection law: The International Data Transfer Agreement (IDTA)
Organisation name: Trans Maldivian Airways (TMA)
Category of recipient: Airline
Country the personal information is sent to: The Republic of Maldives
How the transfer complies with UK data protection law: Performance of a Contract
Data processors
Others we share personal information with
In order to manage your data we share it with a number of data processors. These are listed below.
- IT and cloud service providers: For website hosting, data storage, and infrastructure management (e.g. Kinsta, Amazon Web Services, Google Workspace).
- Communication Platforms: To manage our email communications and newsletters (e.g. Google, Mailchimp).
- Donor management and project coordination (e.g. Beacon CRM, Monday.com, Jotform, Enthuse)
- Payment and online donation processors: To securely process your transactions; we do not store your full credit card details ourselves (e.g. Stripe, GoCardless. Give As You Live, and PayPal).
- Analytics Providers: To help us understand how users interact with our website so we can improve it (e.g. Google Analytics, Microsoft Clear Sight, Mailchimp, CookiesYes).
- Accounting and finance: (e.g. Sage, QuickBooks)
- HMRC: Gift Aid claim processing
- Insurance companies, brokers and other intermediaries
- Organisations we need to share information with for safeguarding reasons
- Professional advisers
- Legal bodies or authorities
- Local authorities or councils
- Relevant regulatory authorities
- External auditors or inspectors
- Organisations we are legally obliged to share personal information with
- Suppliers and service providers
- Third Parties:
We use third-party platforms such as PayPal Giving Fund, PayPal, Enthuse, and Give as You Live to collect and process donations on our behalf. When you donate, these providers collect your name, email, and transaction details. They act as independent data controllers for this information, and their use of your data is governed by their own privacy policies.
These processors are authorised only to use your personal information as necessary to provide these services to us and are bound by strict contractual confidentiality and data protection obligations.
Sharing information outside the UK
Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR and EU GDPR, making sure appropriate safeguards are in place.
For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.
To operate effectively, we share data with:
- Our global team: Data may be accessed by our employees and branch offices in Kenya and Maldives for the purpose of running of the Charity. These are internal transfers within our organisation.
- External consultants & group organisation: We engage independent consultants and subsidiary organisations in India, Indonesia, Kenya, Oman, Pakistan, Saudi Arabia, Seychelles, Singapore, and the United States to provide specialised research, technology, operational, accounting, supporter stewardship, marketing, communications, and fundraising Services. To do so, they will access our systems from the location in which they are working. Because these are separate legal entities, we have implemented International Data Transfer Agreements (IDTAs) and conducted Transfer Risk Assessments to ensure your data receives the same level of protection as it does in the UK.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Helpline number: +44 303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated: August 2026
