I.

Action Not Disability Consortium (AND)

DATA PRIVACY NOTICE

 

 

Our commitment to your data

 

At Action Not Disability, we value the support and engagement people have with our consortium, and want every interaction people have with our consortium to be positive.

 

In all areas of our work, we are committed to protecting your personal information, being open about what information we hold and also ensuring that we only gather information as necessary. This policy outlines how we go about this – in line with the requirements and stipulation of the GDPR which came in to effect from 25th May 2018.

 

The policy applies to how Action Not Disability collects and uses personal information you provide to us and that we collect, whether online, via phone, email, in letters or in any other correspondence or from third parties. If you are accessing this notice by way of a AND website please note that you do not have to provide personal information in order to make use of it. However, if you wish to use certain services such as the ability to send us your questions, comments and receive notices, you will need to provide certain personal information.

 

We ensure that we use your information in accordance with all applicable laws concerning the protection of personal information. This policy explains:

  • What information Action Not Disability may collect about you
  • How we process that information
  • How we will use that information
  • How we use your information in marketing and fundraising
  • Whether we disclose your details to anyone else
  • Your choices regarding the information you provide to us
  • How we use cookies to improve your use of our websites
  • How you can ask to change or delete personal data when it is no longer needed for the reason it was collected

 

If you have any queries about this privacy policy, please contact us at CONTACT@ACTIONNOTDISABILITY.ORG.UK or call 01420 547459.

 

 

Who we are

Action Not Disability (AND) is a consortium of five charities, who together, promote independence for disabled people through payroll giving. The details of AND member charities can be found on our website at http://actionnotdisability.org.uk/  

 

AND is the data controller, which means we decide how your personal data is processed and for what purposes. 

 

Information we collect about you

AND collects information in the following ways;

 

Information you give us. For example, when you sign up to be a payroll giver through our representative agencies or otherwise provide us with personal information. When you register, we’ll ask for personal information, like your name, email address and telephone number to store with your account.

 

Information we get from your use of our website. We collect information about the pages accessed and files downloaded in order to monitor and improve our website.

 

Information from third parties. We may also receive information about you from third parties (payroll giving agencies acting on our behalf) and from the public domain. This may include information such as your name, postal address, email address, phone number, your geographic location, and employer details such as your company name, employee/payroll number and NI number.  We do not buy, sell or swap data with third parties or other charities.

 

 

Sensitive personal data

Data Protection law and the GDPR recognises that certain categories of personal information are more sensitive. This is known as sensitive personal data and covers health information, race, religious beliefs and political opinions.

 

We do not collect ‘sensitive personal data’ about our payroll giving supporters.

 

How we process your personal data

AND complies with its obligations under relevant legislation, such as “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.  However, you should know that when using our services we are subject to other areas of legislation.

 

 

We use your personal data for the following purposes;

  • To enable us to provide services for the benefit of the public in a particular geographical area as specified in our Memorandum of Understanding;
  • To administer supporters’ records;
  • To fundraise and promote the interests of the charity;
  • To maintain our own accounts and records
  • To inform our supporters of news, events, activities and services of AND

 

 

Legal basis for processing your personal data

As a consortium made up of five charities, we have a legitimate interest in generating both support and financial donations to deliver our work. After carrying out a balanced assessment , we rely on Legitimate Interests for the processing of your Personal Data for direct marketing purposes, whether you are an active supporter to AND, or when we approach you as a potential new supporter to the charity.

 

In all our fundraising communications we will give you clear opportunities to opt-out of future communications. We will provide easy to understand information on our newsletters making you aware that we are processing your data based on legitimate interests , including how to contact us  and request to be removed from specific or all future communications from AND.

 

In the main we will communicate with you via non-electronic communications, for example our newsletter mailing, but when we do collect your electronic communication details such as email, we will seek your explicit consent to collect that data.

 

 

Sharing your personal data
 Your personal data will be treated as strictly confidential and will only be shared with other members of the charity in order to carry out a service or for purposes connected with the consortium. We will only share your data with third parties outside of the charity with your consent, unless there is a legal reason to do so.

 

 

How we store your personal data

Information is stored by us on computers located mainly in the UK. We use a range of tools and third party suppliers to store your information. In all cases we work to ensure that the measures we take and suppliers used are GDPR compliant, and your information will not be passed outside of the European Economic Area.

 

We place a great importance on the security of all personally identifiable information associated with our supporters. We have security measures in place to protect against the loss, misuse and alteration of personal data under our control. For example, only authorised personnel are authorised to access user information and we use secure server software (SSL) to encrypt financial and personal information you input before it is sent to us. While we cannot ensure or guarantee that loss, misuse or alteration of data will not occur while it is under our control, we use our best efforts to try to prevent this.

 

We are also working to ensure, where we can, that we do not keep paper copies of information and only scan and store information electronically.

 

 

How long we keep your personal data
 We will keep your information only for as long as we need it to provide you with the services or information you have required, to administer your relationship with us, to inform our research or the preferences of our supporters, to comply with the law, or to ensure we do not communicate with people that have asked us not to.

 

When we no longer need information we will always dispose of it securely, using specialist companies if necessary to do this work for us .

 

 

 

 

 

Your rights and your personal data 

Unless subject to an exemption under legislation, you have the following rights with respect to your personal data;

  • The right to request a copy of your personal data which AND holds about you;
  • The right to request that AND corrects any personal data if it is found to be inaccurate or out of date; 
  • The right to request your personal data is erased where it is no longer necessary for AND to retain such data;
  • The right to withdraw your consent to the processing at any time;
  • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
  • The right to object to the processing of personal data, (where applicable)
  • The right to lodge a complaint with the Information Commissioners Office.

 

If you wish to exercise any of these rights please contact us at CONTACT@ACTIONNOTDISABILITY.ORG.UK or call 01420 547459.

 

The use of Cookies 

AND only uses cookies on our websites to determine the pages accessed and files downloaded. This helps us to determine how many people use our sites, how many people visit on a regular basis. This information doesn't tell us anything about who you are or where you live. It simply allows us to monitor and improve our service.

 

Further processing

If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.

 

 

Contact Details

We welcome any queries, comments or requests you may have regarding this Privacy Policy.

 

If you are not satisfied with our work or something that we have done or failed to do, we want to know about it. Please do not hesitate to contact us at CONTACT@ACTIONNOTDISABILITY.ORG.UK or call 01420 547459.

Or you can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

 

 

Thank you

We thank you for your support and kind gifts through your payroll to Action Not Disability, and the difference you are making to the lives of disabled children and adults.