Privacy and Data Protection Policy
We have updated our privacy and data protection policy in accordance with the General Data Protection Regulation (GDPR), that came to effect on May 25, 2018. The goal is to ensure organisations (business and charities alike) properly handle personal data collected from citizens of the EU. Here, we aim to clearly communicate the essential information we hold, our commitments to protect your data and your rights as outlined below.
Who we are:
We (A-CET) are a registered charity in England and Wales (Reg. No 1066869). We are the data controller for the purpose of GDPR’s Data Protection Law (2016/679). Please contact us by emai: info@a-cet.org or by post: 670 Ethel Road, Leicester LE5 4WR, UK for any enquiries on our data protection and privacy policy.
How we collect information:
We primarily collect information provided by you when you make a donation, sign up for sponsorship, fund raise, sigh up for our newsletter or set up a fundraising event through event platforms such as Just Giving, Virgin Giving and BT MyDonate.
What information we hold:
Here is an overview of the information we securely hold, although the details may vary based on the level of engagement you have with us.
- name
- contact details (primarily address and optionally telephone number or email
- bank details (on the rare occasion that you provided them directly to us, otherwise this will be maintained and processed directly by the payment providers)
How we use your information:
We only ask for and hold the minimal amount of information we need to:
- provide you with the service, information or products you requested
- process your donation
- make GiftAid claims, and
- communicate with you on how your donation is being used (via our email newsletter and / or annual report)
- let you know of upcoming events
- communicate a student’s progress (if you sponsor a student )
Legal basis for using your information:
According to the General Data Protection Regulation (2016/678), any use of your personal information needs to have a “legal basis”. Among the various legal bases outlined in the GDPR guidelines, we primarily use your information based on your consent, to process your donation and keep you up to date with our work. In some cases, we may have a “legal obligation” or a “legitimate interest” (that is when for example we need to share information with legal regulators; or when we send you our annual report by post respectively). In any case, we will never use your information in a way that is against your preferences and privacy nor collect/use any sensitive information.
How we keep your information safe:
As always, we will continue to safeguard your information using appropriate on premise and online safeguarding measures.
How long we keep your information for:
We only keep your information as long as it is necessary for the purpose of the relevant activity (eg. Gift Aid claims, sponsoring students, fraud prevention).
Sharing your information:
We will never sell or share your information with third parties so that they may call you for marketing purposes. Please let us know immediately if you receive any calls or Your information is solely used by our staff, volunteers so that we can fulfil our objectives efficiently and support you effectively. We may however disclose your information if required to do so by law or fulfil contractual agreements.
Your rights:
Here is a summary of the key rights outlined in the data privacy regulation:
- Right to access to your personal information: you have a right to request access to information we hold about you.
- Right to ask for your information to be rectified: you can ask us to correct any inaccurate or incomplete information we hold about you. Please contact us to rectify any information that you believe is incorrect or incomplete.
- Right to object processing of your personal information: while we do not process your information beyond your consent, please let us know if you have any objections (eg. if you do not wish to receive our newsletters or updates).
- Right to consent: you have a right to withdraw your consent any time (eg. if you do not wish to receive our news later, updates or appeals)
- Right to erasure/delete your personal information: you can ask us to delete any personal information we hold about you. This may be due to your withdrawn consent, when it is not relevant for our work or there is no legal basis to hold it.
- Right to make your personal information portable: you can ask us to send you your personal information in a format that can be easily used by you or other service providers.
If you have any requests or queries regarding your rights or any aspect of your personal information use, please contact us on any of the following methods:
Post: A-CET, 670 Ethel Road, LE5 4WR, Leicester, UK
Email: info@a-cet.org
We may ask you to provide evidence of your identity before taking action. Please note that some types of requests may not apply for the data we hold. For additional information on your rights and general privacy guidelines, please refer to the UK’s Information Commissioner’s website: https://ico.org.uk.