In our pursuit of ending youth homelessness by 2037, we collaborate with organisations who possess specialised expertise and knowledge. Unfortunately, one of these organisations, which has been working with us to deepen our understanding of our supporters and improve their overall experience, has recently faced a data security incident involving one of their subcontractors.
The research company conducted an extensive investigation and has confirmed that there is no evidence indicating that the data has been shared. We have promptly reported this breach to the Information Commissioner's Office, Action Fraud, and the relevant law enforcement authorities.
Even though we believe that the risk is low, we wrote to our supporters as a precautionary measure. We will always be transparent with our supporters about their personal information, and we take our responsibility for protecting their information very seriously. Robust measures are in place to protect their data, and we are continually strengthening our security protocols.
We have asked supporters to remain vigilant for any suspicious messages or communications that may raise concerns. These may include typographical errors, poor grammar, or unusual requests, such as downloading attachments. For further guidance, please visit www.actionfraud.police.uk/.
We understand the concern this incident may evoke, and we extend our sincere apologies for any inconvenience it may have caused to those affected. Your trust is of paramount importance to us, and we deeply appreciate your understanding and support.
Should you have any questions or concerns regarding this incident or the security of your data, please do not hesitate to contact our dedicated Supporter Care team at 0800 472 5257 or via email at yourdata@centrepoint.org.
What information was at risk?
There is no evidence that any of our supporter data has been shared, but if it has, it would be very limited and encompass:
- Surname
- Email address and, if applicable, the initial part of your postcode
- Historical donation details (e.g., donation dates, annual amounts, and volunteer status)
Importantly, no banking or financial information, such as passwords or bank details, have been affected by this incident.
Am I or others at risk of fraud?
We believe the risk to supporters to be low. However, we urge affected supporters to remain vigilant for any suspicious messages or communications that may raise concerns. These may include typographical errors, poor grammar, or unusual requests, such as downloading attachments. For further guidance, please visit www.actionfraud.police.uk/.
We also ask supporters to practice caution when sharing personal information. Centrepoint will never ask you to update financial information via email. If you are unsure if an email is from Centrepoint, please do not reply to the email directly. Instead, please reach out to our Supporter Care team at 0800 472 5257 or via email at yourdata@centrepoint.org.
Why did you share my data?
We work with organisations who possess specialised expertise and knowledge – in this case to better understand our supporters and to improve their experience.
We do not sell or share personal data to third parties for the purposes of marketing. We may allow our suppliers to access and use your personal data to allow them to perform services on our behalf, such as payment processing and maintenance and support of our systems. In these circumstances we will not give these organisations any rights to use your personal information except to provide services to us and in accordance with our instructions. You can read our privacy policy on our website.
Can I opt out from having my data shared for profiling purposes?
We work with organisations to deepen our understanding of our supporters and improve their overall experience. If you would like to opt out from supporter profiling, please reach out to our Supporter Care team on 0800 474 5257 or via email at yourdata@centrepoint.org
Is my data safe with Centrepoint? Is it safe to donate to Centrepoint?
We take our responsibility for protecting your information very seriously. Robust measures are in place to protect your data, and we are continually strengthening our security protocols.
We adhere to the EU’s General Data Protection Regulation and the Privacy and Electronic Communications Regulations (PECR).
When you make a donation to Centrepoint, you payments are processed through specialist payment gateway providers. You can read our privacy policy on our website.
I support Centrepoint, but wasn’t contacted. Why?
We are only contacting people whose data may have been affected, haven’t opted out to receiving communications from us and have engaged with Centrepoint in the last three years. If you are concerned you may have been affected and should have been contacted, please do not hesitate to reach out to our Supporter Care team at at 0800 472 5257 or via email at yourdata@centrepoint.org.
Who do I contact if I have more questions?
Please do not hesitate to reach out to our Supporter Care team at 0800 472 5257 or via email at yourdata@centrepoint.org.