Data Ethics

Our Data Ethics Principles

Data ethics is central to how we operate. We believe that data is a responsibility, not just an asset. Our approach is guided by these core principles:

• Transparency: You know what data we collect and why
• Consent: We ask permission before collecting or using your data
• Minimization: We collect only what we need
• Security: Your data is protected with strong security measures
• Fairness: We use data in ways that respect your rights

Data Minimization

We collect only the data necessary to provide our services. We don't collect data "just in case" or for speculative future use. This means:

• No unnecessary personal information requests
• No tracking beyond what's needed for platform functionality
• Regular deletion of data we no longer need
• Clear retention policies for all data types

Consent & Control

You have control over your data:

• Explicit consent for all non-essential data collection
• Easy opt-out from marketing communications
• Ability to access, correct, or delete your data
• No pre-ticked consent boxes or dark patterns

No Selling or Sharing Without Purpose

We never sell your personal data. We share data only when necessary to provide our services:

• With payment processors to complete transactions
• With providers to complete your switches
• With causes to direct your contributions

All partners are bound by strict confidentiality agreements and can only use your data for the specific purpose we've shared it for.

Algorithmic Fairness

We are committed to fair and unbiased use of data and algorithms:

• Provider recommendations are based on suitability, not commission rates
• No discriminatory profiling or targeting
• Regular audits for bias in our systems
• Transparency about how algorithms make decisions

Data Security & Privacy by Design

Security and privacy are built into our systems from the start:

• Encryption of all sensitive data in transit and at rest
• Regular security audits and penetration testing
• Strict access controls and employee training
• Incident response procedures for data breaches

Accountability & Governance

We take responsibility for our data practices:

• Designated Data Protection Officer
• Regular data protection impact assessments
• Compliance with GDPR and UK data protection law
• Transparent reporting of our data practices

Questions About Our Data Ethics?

We're committed to transparency and accountability. If you have any questions about how we handle data ethically, please contact our Data Protection Officer at dataprotection@switch4good.co.uk.