Introduction to the Policy
I am committed to protecting the personal data that you provide to me and recognise the importance of being clear about how I intend to use it.
All personal data provided by you will be held by me, Lauren Saunders.
When freelancers, sub-contractors, volunteers or others undertake work alongside me or on my behalf, they agree to take responsibility for data protection and GDPR requirements in the delivery of work as outlined below.
I will never monitise or sell on any data you share with me.
There are hyperlinks contained within my website which link to other websites owned and operated by third parties. These third parties have their own privacy policies and I recommend that you consider those when using their websites. I do not accept any liability or responsibility in terms of the privacy and security practices of these third party organisations and their websites.
Information I may collect from you
When you engage in an activity delivered by in or in partnership with me, or access my website or submit feedback, I may ask you for personal data and other information to allow me to deliver the service or activity you require. This could include the following:
- Full Name
- Date of Birth
- Socio-economic status
- Health and Wellbeing
- Email address
- Telephone number
- Details of your enquiry
- Name of your organisation
- Curriculum vitae details/ examples of previous work / portfolio
The internet is not completely secure. I cannot guarantee the security of your personal data transmitted through my website or by email. Any transmission is at your own risk. Some of the information you provide may be considered sensitive personal data as defined under the General Data Protection Regulations (GDPR). This includes information about your ethnic or racial origin, political opinions, religious beliefs, trade union membership, physical or mental health, sexual life or criminal record. I would advise users of this website to send such information by a more secure system such as encrypted email, paper format, via the telephone or in person. Sensitive personal data will only be processed following your explicit consent.
How do I intend to use your personal data?
When engaging with an activity or service I deliver: I may contact you for reasons relating to the service you have made a request for. The information I collect and keep is in order to refer you to the correct people or deliverables within my projects, volunteer brokerage, consultation exercises, monitoring, evaluation and reporting to relevant funders and to provide statistical data to help me to continue drawing down relevant funding. I would use your contact details to manage this and may retain them for marketing purposes.
When applying for opportunities with me: If you are interested in working with me I will only use your personal data to process your application, monitor recruitment and provide statistics. Personal data about unsuccessful candidates will be retained for six months after the recruitment process is completed, at which point it will be disposed of securely.
Will my personal data be shared with other organisations?
Your personal data provided by you to me will only be used by me, Lauren Saunders. Everyone who I may work alongside to deliver activity have to also keep the information about you confidential. However, there are instances when I may need to share some information with partners when delivering activities – for example, partner venues may need to know some information relating to a disability so we can support access needs better, or funders be shared (anonymised) information for statistical purposes.
Only those involved in your data processing (i.e. Lauren) will have access to the information, I won’t share it with anyone else unless;
- You ask me to share it.
- I ask you and you say I can share it.
- The law says I have to report some things, such as people being perceived to be at risk or harm, including children or vulnerable adults who may be at risk. This may also include my legal obligations to report to HMRC.
I may also use a third party service for the distribution of email newsletters. If you sign up to receive this, I will store your email address with this service.
In exceptional circumstances such as dealing with fraud, credit risk, dealing with abusive online behaviour, to enforce rights, to protect property, to protect human safety or if the law requires it. I will not otherwise disclose your personal data to anyone outside project delivery to use for their own purpose without obtaining your consent.
How long will The Critical Fish retain my personal data?
I will retain your personal data for as long as is necessary for the required activity or service to be provided to you and will dispose of your personal data 12 months after work has been completed. All personal data is subject to the controls of my data protection policy.
Where will my personal data be kept?
Once I have received your personal data I will use recognised industry standard procedures and security features to try to prevent unauthorised access.
Your personal data will be under the control of Lauren Saunders. It will be held on my password protected computer systems. Parts of my computer system, including my website and email, are provided by third parties with their own security systems. I also encourage all those I work alongside to take responsibility and ensure any data they are using for the delivery of activity or service is kept behind passwords and secure systems, and destroyed or deleted at the earliest opportunity.
When I print your personal data this will be in the possession and control of Lauren and will be securely disposed of when it is considered to be of no further use, should this be the case prior to the 12 month cut off point.
An IP address is a number that uniquely identifies a specific computer or other network device on the internet. I might use your IP address to locate you for the purpose of your safety and security in relation to child protection issues.
The General Data Protection Regulation provides the following rights for individuals:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling.
Like most websites, this one uses ‘cookies’, small packets of data that are stored in your web browser. Cookies help me to identify information such as how many people are using my site and what devices they’re using. This allows me to tailor my service to best meet the needs of the people using it.
You can manage how your browser handles cookies, or refuse them altogether, by changing your settings on your browser. www.aboutcookies.org has useful information on how to manage cookies in your browser.
For more information please go to the Information Commissioners Officer, www.ico.org.uk
In particular please complete the self-assessment tool here, https://ico.org.uk/for-organisations/resources-and-support/data-protection-self-assessment/