Privacy Policy

Last updated: 26 Sep 2026

The Syrian British Medical Society (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you use our website, contact us, make a donation, apply for membership, or otherwise interact with our organisation.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. About Us

Organisation name: THE SYRIAN BRITISH MEDICAL SOCIETY LTD

Private company limited by guarantee without share capital

Company number: 06411875

Registered address: 2 Lonsdale Street, Newton Heath, Manchester, England, M40 2FT

Email: info@sb-ms.org

Telephone: +447872426316

Nature of business (SIC):  86900 – Other human health activities

For the purposes of applicable data protection legislation, The Syrian British Medical Society is the data controller responsible for the personal information described in this Privacy Policy.


2. Medical and Health Information

Although our organisation supports or provides medical assistance, our website does not collect or process health or medical information.

Our website forms are not intended for submitting:

  • medical records;

  • diagnoses;

  • medical history;

  • prescriptions;

  • test results;

  • treatment information; or

  • other health information.

Please do not submit medical or health information through our contact, donation or membership forms.

If our services or website change in the future and we need to collect health information, we will update our privacy information and implement the appropriate legal and security safeguards.


3. Personal Information We Collect

We may collect personal information depending on how you interact with our website.

A. Contact Form

When you contact us through our website, we may collect:

  • name;

  • email address;

  • telephone number, if provided;

  • organisation name, if provided;

  • the contents of your message; and

  • any other information you voluntarily provide.

Please do not include medical or other unnecessary sensitive information in your message.

B. Donation Form

When you make a donation, we may collect:

  • name;

  • email address;

  • billing or postal address, where required;

  • donation amount;

  • donation date;

  • donation frequency;

  • Gift Aid information, where applicable;

  • payment or transaction reference; and

  • other information necessary to administer the donation.

Payment card information is processed by our payment provider, Stripe, rather than being stored directly by us, except where otherwise stated.

C. Membership Form

When you apply for or become a member of our organisation, we may collect:

  • full name;

  • email address;

  • telephone number;

  • postal address;

  • membership type;

  • membership start date;

  • membership status;

  • payment or transaction information, where applicable;

  • communication preferences; and

  • other information necessary to administer your membership.

We only collect information that is reasonably necessary to manage your membership.


4. Information We Collect Automatically

When you visit our website, certain technical information may be collected automatically.

This may include:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • pages visited;

  • date and time of visits;

  • referring website;

  • approximate location; and

  • information about how you use our website.

This information may be collected through cookies, analytics tools and similar technologies.


5. How We Use Your Information

We may use your personal information to:

  • respond to enquiries;

  • communicate with you;

  • administer donations;

  • process payments;

  • issue donation receipts;

  • administer Gift Aid;

  • manage memberships;

  • communicate with members;

  • organise events and activities;

  • manage our relationship with supporters;

  • send newsletters and communications where permitted;

  • maintain organisational records;

  • operate and improve our website;

  • protect our website and systems;

  • prevent fraud and misuse;

  • comply with legal and regulatory requirements; and

  • carry out our charitable and organisational activities.

We will only use your personal information for purposes that are lawful and compatible with the reasons for which it was collected.


6. Our Lawful Bases for Processing

Under the UK GDPR, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Consent

Where you have given us permission to use your information for a specific purpose.

Contract

Where processing is necessary to enter into or perform a contract or membership arrangement with you.

Legal Obligation

Where processing is necessary for us to comply with a legal or regulatory obligation.

Legitimate Interests

Where processing is necessary for our legitimate organisational interests and those interests are not overridden by your rights and freedoms.

For example, we may rely on legitimate interests for certain administrative, security, operational and supporter-management activities.

Vital Interests

In limited circumstances, where processing is necessary to protect someone’s vital interests.

The lawful basis we rely on will depend on the specific processing activity.


7. Donations and Stripe

Our website uses Stripe to process online payments and donations.

When you make a payment, certain information may be provided to Stripe so that the transaction can be processed securely.

This may include information such as:

  • name;

  • email address;

  • billing information;

  • payment details;

  • transaction information;

  • IP address; and

  • other information required to prevent fraud and process the transaction.

We do not normally receive or store your full payment-card number or security code on our own systems.

Stripe processes personal information in accordance with its own privacy documentation and applicable data protection requirements.

For more information, please refer to Stripe’s privacy notice.


8. Membership

If you become a member of The Syrian British Medical Society, we use your personal information to:

  • process your membership application;

  • administer your membership;

  • communicate with you about your membership;

  • process membership payments;

  • maintain membership records;

  • provide membership-related services;

  • notify you about important organisational information; and

  • comply with applicable legal obligations.

Where membership payments are processed online, payment information may be handled by our payment provider.


9. Contact Form

Information submitted through our contact form is used to respond to your enquiry and manage communications with you.

We will not use information submitted through the contact form for unrelated purposes unless we have a lawful basis to do so.

Please do not submit medical or health information through the contact form.


10. Marketing and Communications

We may contact you about:

  • our charitable activities;

  • fundraising campaigns;

  • events;

  • membership;

  • volunteering opportunities;

  • newsletters;

  • organisational updates; and

  • other activities relating to The Syrian British Medical Society.

Where required by law, we will obtain your consent before sending electronic marketing communications.

You can unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us.

Unsubscribing from marketing communications does not necessarily stop essential administrative or transactional communications, such as donation receipts or membership notices.


11. Sharing Your Information

We do not sell or rent your personal information.

We may share personal information with trusted third parties where necessary and lawful, including:

  • Stripe and other payment service providers;

  • website hosting providers;

  • website developers and IT service providers;

  • email and communication providers;

  • membership management providers;

  • accounting and professional advisers;

  • auditors;

  • regulators;

  • government authorities; and

  • law enforcement agencies where legally required.

Where appropriate, we require third-party service providers to protect personal information and process it only for authorised purposes.


12. Stripe and Third-Party Services

Some services used by our website may process personal information on our behalf or independently.

These may include payment, hosting, email, analytics, security and membership-management services.

We carefully select service providers where appropriate and take reasonable steps to ensure that personal information is handled securely and in accordance with applicable data protection requirements.


13. International Data Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful under applicable UK data protection legislation.

Where required, appropriate safeguards or approved transfer mechanisms will be used.


14. Data Security

We take reasonable technical and organisational measures to protect personal information from:

  • unauthorised access;

  • accidental loss;

  • destruction;

  • alteration;

  • misuse;

  • unauthorised disclosure; and

  • other unlawful processing.

We restrict access to personal information to people who need it for legitimate organisational purposes.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.


15. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless we are required by law to retain it for a longer period.

Different types of information may be retained for different periods.

For example:

  • contact enquiries may be retained for as long as reasonably necessary to manage the enquiry and related records;

  • donation records may be retained for the period necessary to meet financial, accounting and legal requirements;

  • Gift Aid records may be retained as required by applicable HMRC requirements;

  • membership information may be retained while you are a member and for an appropriate period afterwards.

When personal information is no longer required, we will securely delete, destroy or anonymise it where appropriate.


16. Your Data Protection Rights

Subject to certain legal conditions and exceptions, you may have the right to:

  • request access to your personal information;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal information;

  • request restriction of processing;

  • object to certain processing;

  • request data portability where applicable;

  • withdraw consent where processing is based on consent; and

  • object to direct marketing.

To exercise your rights, please contact:

Email: info@sb-ms.org

Postal address: 2 Lonsdale Street, Newton Heath, Manchester, England, M40 2FT

We may need to verify your identity before responding to certain requests.


17. Withdrawing Consent

Where we rely on your consent to process personal information, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.


18. Cookies

Our website may use cookies and similar technologies.

These may be used for:

  • essential website functionality;

  • security;

  • analytics;

  • remembering preferences;

  • website performance; and

  • understanding how visitors use our website.

Where required by law, we will obtain consent before placing non-essential cookies on your device.


19. Third-Party Websites

Our website may contain links to third-party websites, including:

  • Stripe;

  • social media platforms;

  • partner organisations;

  • charities;

  • government websites; and

  • other external websites.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.


20. Children’s Information

Our website is not intended to knowingly collect personal information from children unless there is a specific and appropriate reason to do so.

If we become aware that we have collected personal information from a child without an appropriate lawful basis, we will take reasonable steps to address the situation.


21. Automated Decision-Making

We do not currently use personal information to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.


22. Data Breaches

We maintain procedures for identifying, managing and responding to personal data breaches.

Where legally required, we will notify the Information Commissioner’s Office (ICO) and affected individuals of a personal data breach.


23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • our organisation;

  • our website;

  • our services;

  • the information we collect;

  • the third-party services we use; or

  • applicable laws and regulations.

Any updated version will be published on this page.

Last updated: 26 Sep 2026


24. Contact Us

If you have questions about this Privacy Policy or how we process personal information, please contact us:

[NGO NAME]

Privacy Contact: The Syrian British Medical Society

Email: info@sb-ms.org

Telephone: +447872426316

Postal Address: 2 Lonsdale Street, Newton Heath, Manchester, England, M40 2FT


25. Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we can investigate and attempt to resolve your concern.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

Information Commissioner’s Office: https://ico.org.uk/


26. Effective Date

This Privacy Policy is effective from:

26 Sep 2026

Version: 1.0