Privacy Notice.
Our Privacy Notice explains how we use and protect personal information about you and/or your family, to show that we are adhering to the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA).
It also explains how we collect and use the personal information that you provide to us whether, in person, online or via phone, email, letter or other correspondence, this includes data from our website and sets out how The Cheyne Charity uses and protects any information that you give us.
Personal information includes any information that identifies you personally, such as your name, address, email address or telephone number, information collected for research, media, stock content or support purposes, and may also include photographs and video content. The Charity recognises that your privacy is very important and so we want you to be confident with the way we handle your personal information.
How We Collect Information
The Charity receives and stores personal information provided by beneficiaries, applicants, and donors supplied to us in writing, via email, via the telephone, in meetings, or on our website when applying, enquiring, or registering for help, or when donating money to the Charity. We may also receive information about you from third parties, for example a therapist, charity, agency or other third-party organisation who refers you to the Charity. We may also collect information for the purposes of research and online resources.
How We Use Information
We may use the information we collect from you in a number of ways. This data will only be used where you have consented to this for specified, explicit and legitimate purposes or where this is necessary to fulfil legal or business obligations that apply to us.
We principally collect personal information so that we can provide you with the services, products or information you have requested or to further our charitable aims, including for fundraising activities.
We may also use personal information such as your address, email address and telephone/mobile phone number to communicate with you, for example to provide information relating to our work.
We only use your personal information for direct marketing purposes if we have your consent. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time using the contact details below or by using an unsubscribe link. Some personal information may be used for internal administration, and operational/service reviews.
If you have given us explicit permission to publish your details and images electronically or in printed publicity materials, we may use these in the following ways: stories on our website; social media, for example, Facebook and Twitter; reports – including our Annual and Impact Reports; promotional materials such as newsletters, posters, banners, magazines, leaflets and flyers.
Disclosure of Information
The Charity may disclose personal information to employees and/or contracted parties, including the Charity Trustees if needed to allow them to perform their duties. The Charity does not permit these parties to use such information for any other purpose than to perform the services they have been instructed to provide by us.
On occasion we may need to share your details with specific third-party organisations who work with us to deliver our services. We will always ask your permission before we do this, giving you precise details of why we need to share the data, with whom and how it will be used.
We may also need to disclose your information if required to do so by law. We will not share your data with any third-party organisations without your consent.
Your Consent
By providing us with your personal data, including sensitive personal data, such as information on your health, you consent to the collection and use of any information you provide in accordance with the above purposes and this Privacy Notice. Where we offer you services either directly or through a third-party supplier, we will ask you for permission to use and/or share your information before we proceed.
Commitment to Personal Data Security and Storage
The Charity will use all reasonable endeavours to ensure that personal information provided is handled in a secure and confidential manner and when the information is no longer needed it will be destroyed or permanently rendered anonymous.
We have put in place appropriate physical, electronic and managerial procedures to safeguard information we collect in order to prevent unauthorised access, maintain data accuracy, and ensure the correct use of information.
Your data will be hosted on servers located in the UK, or in the case of Mailchimp, (the organisation we use for subscription-only Cheyne Charity newsletters and communications) and Eventbrite, (the organisation we use to promote and manage events), and Survey Monkey (the organisation we use for online surveys), the data will be stored in the US. Their systems are in compliance with the General Data Protection Regulations.
Your Rights & Changes to this Policy
We will only collect the data that we need to carry out the purposes you have contacted us for, or given us permission to use it for.
Subsequently, at any time you can:
Gain access to the personal data which The Cheyne Charity holds about you. This is called a Subject Access Request.
Have your personal data rectified if it is inaccurate or incomplete
Restrict the processing of your personal data, for example, ask us not to contact you
Object to the processing of your data for specific purposes such as communications or direct marketing
Ask for the transfer of your data electronically to a third party – this could be yourself (known as data portability)
Have your personal information removed (known as Erasure or the ‘right to be forgotten’)
Lodge a complaint with the Information Commissioner’s Office
This Privacy Notice will be reviewed regularly in-line with business practices and relevant laws. We will publish any changes we make to the Privacy Notice on our website. www.cheynecharity.org/privacy-notice
Controlling Your Personal Information
The Cheyne Charity follows the data protection principles specified in the General Data Protection Regulations (GDPR) and the Data Protection Act (2018). Personal data is processed in accordance with these principles so that the data is:
Processed fairly, lawfully and transparently – and only if there is a valid legal basis for doing so.
Processed only for specified, explicit and legitimate purposes.
Adequate, relevant and limited.
Accurate (and rectified if inaccurate).
Not kept for longer than necessary.
Processed securely – to preserve the confidentiality, integrity and availability of the personal data.
The Cheyne Charity is a Registered Charity under number 1122968, and a Registered Company Limited by guarantee under number 06489707 (England and Wales). You can change how we contact you or discuss our use of your personal information at any time, simply by contacting us.