Who we are
Sickle Cell Society Suffolk
What data we collect and how we use it
The type and quantity of data we collect and use depends on why you have provided it.
We will only collect, use and otherwise handle your personal data:
- where you have consented to this for specified, explicit and legitimate purposes
- where this is necessary to fulfil legal obligations that apply to us
- where it is necessary for our legitimate interests relating to running our daily operations, as long as, in each case, these interests are in line with applicable law and your legal rights and freedoms.
When someone visits Sickle Cell Society Suffolk we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out information, such as the number of visitors to the various parts of the site.
If we want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it. We will collect any questions, queries and feedback you leave. This will include your email address if you send us an email, your IP address, and which web browser (and version) you use. Information on how people use the site, through cookies and page tagging, helps us improve our website and our services.
We might also obtain your personal data through your use of social media such as Facebook, WhatsApp, Twitter or LinkedIn, depending on your settings or the privacy policies of these social media and messaging services. To change your settings on these services, please refer to their privacy notices, which will tell you how to do this.
Use of data processors
Data processors are third parties who provide elements of our recruitment service for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
Service providers and partners
Sickle Cell Society Suffolk will use contact details of personnel belonging to our service providers and partners for the purpose of managing the relationship and fulfilling each party’s obligations under the agreement with the supplier or provider. These contact details will be kept as long as the partnership or service provider agreement remains in force.
Sharing your data
Unless we are required to share your data for legal or regulatory reasons, to help with a complaint, we will never share your data with other organisations.
We do use third-party organisations to help us collect donations such as JustGiving and Virgin Money Giving, and to help us fulfil our marketing. Where we use external companies to collect or process data on our behalf, we carry out comprehensive checks on these companies, and put in place contracts to control how they manage the data they may collect or have access to.
Keeping your data safe and up to date
At Sickle Cell Society Suffolk we ensure that the most appropriate technical controls are in place to keep your data safely. Access to your data is regularly reviewed and only accessible to the relevant trained staff, volunteers and contractors.
Where we use external companies to collect or process data on our behalf, we carry out comprehensive checks, and put in place contracts to control how they manage the data they may collect or have access to.
Your data will be hosted on servers located in the UK, which will not be transferred out of the European Union.
We will only collect the data that we need to carry out the purposes you have contacted us for, or given us permission to use it for.
To enable us to carry out the purposes you have contacted us for, there will be occasions when we will make some data collection mandatory i.e. your name and address to claim gift aid, or your email address to access our services. If you don’t provide this data, we cannot carry out the purposes you have contacted us for.
We will always tell you why these fields are mandatory.
At any time that you wish you can:
- gain access to your personal information,
- object to the processing of your personal information,
- object to the use of automated decision-making and profiling,
- restrict the processing of your personal information,
- ask for a copy of your personal data (known as data portability),
- rectify or correct your personal information, and
- have your personal information removed (known as Erasure or the ‘right to be forgotten’).
Where you have provided consent to be contacted or to receive a service, you will be entitled to withdraw that consent at any time.
If you are at any point unhappy with the way that we handled your personal data, you can make a complaint to the Information Commissioner’s Office (details below).
Information Commissioner’s Office
Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number
Fax: 01625 524 510
To make changes to how we contact you, please contact [email protected]
Changes to this Policy