Privacy Policy

We, the “Nipple Innovation Project” or “NiP”, are a UK based charity (charity number 1188561) dedicated to empowering breast cancer survivors and mastectomy patients with realistic nipple tattoos from professionals.

When you visit our website, make a donation, interact or purchase products and services from us, NiP collects your personal data. You therefore have the right to know what we do with it, how long we retain it, and with whom we share it. This is the main purpose of the present Privacy Policy.

“Personal data” is any data that can be used to identify you directly or indirectly (e.g., your identity data, your credit card details, device identifier, location, browsing activity, IP address, etc.).

In this Privacy Policy, we will tell you:

  • What personal data we collect from you and how we collect it;

  • What purpose we are processing it for;

  • Whether providing us with your personal data is mandatory;

  • How long we store it for;

  • Whether there are other recipients of your personal information;

Guiding Principles:

  • We only process the data that is strictly necessary with regard to its purpose;

  • You remain in control of your personal data; and

  • Your data is processed in a transparent, confidential and secure manner.

  1. What personal data we use

1.1 Data you provide us directly

You may be asked to provide us with information that relates to you. For example, we collect this personal information when you subscribe to our newsletter, make a donation, fill out a form or survey, or place an order from our store.

The personal data you provide to us directly includes:

  • Your name and email address when you sign up to our newsletter, fill out one of our forms or donate.

  • Your address and phone number when you purchase one of our products.

1.2 Data we collect indirectly

When you donate to NiP through fundraising platforms such as JustGiving or Raisely, or engage in a campaign with a partner, your information may be shared with us indirectly. These third parties will transfer your data to NiP if you have expressed your desire to support us and provided your consent, or if it is necessary to fulfil a contract with you.

1.3 Data collected when you visit our website & social media

During your visit to our site, we collect information about your connection and your browsing activity.

We use different technologies to collect your personal data. For example, through cookies.

These necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

We also use optional Performance and Analytics cookies. These cookies provide quantitative measures of website visitors. With the usage of these cookies, we are able to count visits and traffic sources to improve the performance of our site.

We also use Advertising Cookies. These cookies are used by advertising companies to serve ads that are relevant to your interests.

You can turn off Performance and Analytics Cookies and Advertising Cookies by clicking “Cookie Preferences” and switching these cookies from “On” to “Off”.

We may also collect your personal data through your interactions on social media platforms like Facebook, Whatsapp, X, or LinkedIn, depending on your settings and the privacy policies of these services. To adjust your settings on these platforms, please consult their privacy notices for guidance.

2. When we use your personal data

We will use your personal information:

  • When you or your legal representative have provided consent

  • When you have entered into a contract with us

  • When it is essential to fulfil our legal obligations

  • When it is mandated by law

  • When it is necessary for archiving materials of public interest

  • When it is crucial to protect someone in an emergency

  • When it is necessary for employment-related purposes

  • When you have made your data publicly accessible

  • When it is required to establish, exercise, or defend a legal claim

  • When it serves a significant public interest

  • When it is vital to protect public health

3. Why we use your personal data

We will use your personal information for:

  • Delivering services, products & support to you

  • Billing & collection of payments

  • Management of ad hoc and continuous donations

  • Processing orders for products or services, and execution of these orders

  • Management of deliveries and follow-up of orders

  • To send information relating to our latest charity activities, achievements, events, and new products via our newsletter.

  • Checking the quality of services, products and support supplied to you

  • Collection of Charity supporters’ and beneficiaries’ opinions through surveys.

  • Quantify website performance through visit counts and traffic sources to grow the reach and improve the impact of our website

4. Disclosure of your personal data

4.1. Third Parties

We disclose your personal data to external organisations. These organisations may have access to your data in order to process your data on our behalf. We will always ensure that such disclosure allows you to benefit from the same level of protection that is granted to you by this Privacy Policy.

These external organisations may have access to your data in particular for securing your online donations (Raisely) and shipping your orders (Printify).

4.2. Employees / Volunteers

We only disclose your personal data to a limited number of individuals within our charity. This is for operations, administration, accounting, IT, and customer service reasons.

All volunteers and employees of NiP are required to sign a Non-Disclosure Agreement before any access to personal data is given.

5. Data retention

Our data will only be kept for as long as there is an administrative need to do so in order to enable our charity to carry out its business or support functions, or for as long as it is required to demonstrate compliance for audit purposes or to meet legislative requirements.

In general, records are kept for 6 years after the end of the accounting year to which they relate but we do not keep personal records any longer than necessary and certain records may be required to be retained for longer. Factors affecting retention periods include legal requirements, storage costs, historical value, industry standards, and archival needs.

6. Individual rights

We recognise that individuals’ rights include the right to be informed, of access, to rectification, erasure, restrict processing, data portability and to object.

7. Data breach

We will investigate the circumstances of any loss or breach, to identify if any action needs to be taken. Action might include changes in procedures, where this will help to prevent a recurrence or disciplinary or other action, in the event of negligence.

We will notify the ICO within 72 hours of a breach if it is likely to result in a risk to the rights and freedoms of individuals. If unaddressed such a breach is likely to have a significant detrimental effect on individuals.

For example:

  • Result in discrimination

  • Damage to reputation

  • Financial loss

  • Loss of confidentiality or any other significant economic or social disadvantage

8. Changes to this policy

We may update this Policy to reflect changes to our information practices but we will not reduce your rights under this Privacy Policy without your express consent.

We will post any changes to this page and, if the changes are significant, we will provide a more prominent notice. We will also keep prior versions of this Privacy Policy in an archive for your review. We encourage you to periodically review our Privacy Policy for the latest information on our privacy practices and to contact us at info@nipcharity.org if you have any questions or concerns.

Last Updated: 09/04/2025