We shall be updating this policy on a regular basis and you should therefore open the policy on a regular basis to be sure that you are aware of any changes we may have made.
What personal data do we collect, for what purpose and how do we use it?
Personal data means any information which can identify an individual and so does not include anonymised data.
This includes any communication we receive from you through the website contact form, e-mail, text, social media messaging, social media posting, or any other communication you send to us. We process this data in order to communicate with you, to keep accurate records and for information in case of disputes or complaints.
When we have vacancies for paid staff or interns we may place the application pack in the vacancies section of our website. The application form asks for a range of personal information. We advise you to password-protect and/or encrypt the completed form before sending it to us via the website. You can also send it by post to our address above. The application form will only be seen by staff involved in the recruitment and selection process and you will be contacted and invited to interview if you are shortlisted.
We may use your contact details to send you information on events, activities, opportunities, services or any other area we think you might be interested in knowing about. Before we share your personal data with a third party we will get your express consent, unless we are required by law to divulge it.
We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed or accessed without authorisation. We also allow access to your personal data to employees and partners who have a business need to know such data. They will only process your data on our instructions and will keep it confidential.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally obliged to do so.
Data Retention – We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
When deciding the length of time we need to retain information we will make an assessment of whether the purpose for which we collected the data is still valid and if not, destroy it securely.
We permanently delete electronically stored records from our servers and we use a secure on-site shredding company for destroying paper records.
Under data protection legislation you have rights in relation to your personal data which include the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and to withdraw consent (unless in that instance we are required by law).
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow a third party to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.