This Policy sets out how we, Lifeafterhummus Community Benefit Society Limited, collect and process data and your rights regarding how your personal information is used. This policy is compliant with the EU’s General Data Protection Regulations (GDPR). All questions regarding this Policy should be sent to us at info@lifeafterhummus.com This Policy covers our website and any communications or services that we offer. We will post any changes and updates to this Policy on our website. We will communicate significant changes in this Policy to you by contacting you through the format to which you have agreed. This policy was last updated in 28th March 2020.
Data Collection
We will always make clear to you at the time when we collect any personal data the legal basis on which we will process that data. We will process your data on the basis of:
• Your explicit consent eg if you sign up to our mailing list at an event or on-line via Mailchimp; or
• A contractual relationship eg when you buy tickets for an event, when you participate in a programme or receive a service (whether free or paid for), where you are employed or volunteer for us or if you become a Member of Lifeafterhummus Community Benefit Society Limited; or
• Legitimate interest e.g. collecting sensitive personal data which helps us demonstrate the impact of our services, responding to enquiries, IT security, fraud prevention, maintaining “do not contact” lists; or
• A legal obligation eg if we are required to disclose the information to regulatory or government bodies eg HMRC, or when required to do so by the courts
We only collect the data that we need including data that will help us improve and administer our services. We collect two kinds of information through our website:
• Personal information such as your name, the organisation you represent, email and postal address, phone number, job description. You don’t have to disclose this information to browse our site, however you may not be able to access some of our services unless you disclose some or all of this information.
• Information such as IP addresses (the location of the computer on the internet), pages accessed and files downloaded. This helps us to analyse how people use our website. We will not link this to you individually.
We collect additional data when working face to face with users of our services:
• Special category data, which is sensitive information such as race/ethnicity, health related information. We collect and process this data to monitor if our services are effective as a preventive health measure,
Use and sharing of Data
We use your data to
• provide the service that you have requested
• communicate with you in the way that you have agreed and for the purposes you have agreed e.g. we will specifically ask you to consent to us contacting you by email for marketing purposes
• monitor, analyse and report on the efficacy of our services. We will not publish identifiable personal data (e.g. case studies) without explicit prior permission.
We may use third party processors through which we send out our newsletter, sell tickets and process and analyse the data we collect.
We will only share data where we are required to do so by law, as a contractual or funding requirement or with our third party processors. We will provide details of third parties with whom we share personal data and the purpose of sharing that data.
26/3/20 Covid-19 pandemic additional provision: During the provision of community based services as an emergency response to the Covid-19 we may be required to share data with statutory and voluntary sector providers to make referrals and to co-ordinate efforts to respond to the pandemic which are not part of a contract or funding arrangement. We may also need to share data with third parties to recoup the costs of delivery of services retrospectively. We will restrict this data to the bare minimum necessary. The situation is constantly changing. E.g. Where possible we will anonymise data with the exception of postcode data. Referrals may require disclosure of full details.
Personal data will not be transferred outside of the European Economic Area unless this international transfer meets requirements as detailed in the guidance from the Information Commissioner’s Office (ICO) which may include us obtaining explicit consent from data subjects.
We will never sell or swap your information with other organisations to use for their marketing.
Third party processors
We currently use the following third party processors to help us collect, process and analyse data. Please refer to the Privacy Policies of these third party processors by clicking on their name.
Eventbrite
Mailchimp
WordPress
Instagram
Linked In
Facebook
Twitter
Youtube
Google Analytics
Where do we store your data?
We have measures in place to prevent the loss, destruction, misuse, alteration, unauthorised disclosure of or access to your personal information. Information we collect can only be accessed by authorised personnel who agree to abide by this policy.
Data collected from beneficiaries and participants using feedback forms and registration forms is stored on a password protected computer which is kept in locked premises.
Our mailing list is maintained on Mailchimp’s servers. You can unsubscribe at any time by clicking on the unsubscribe link at the bottom of any group mailing from us.
Unfortunately, the transmission of data across the internet is not completely secure and whilst we do our best to protect your information, we cannot guarantee that loss, misuse or alteration of data will not occur whilst data is being transferred.
How long will we keep your data?
We will keep your information only for as long as we need it to provide you with the services and information you have requested from us. This means e.g. for newsletters we will periodically review the consent that you have given us and if necessary ask for re-consent, and for delegates to events we will only hold personal data beyond the event in order to enable us to analyse delegate engagement and to help us improve future events. If you would like any further information about how we use and store your information, please contact us at info@lifeafterhummus.com
Your rights
Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time. You can always view, update or request for your information to be deleted from our database either by clicking on the unsubscribe/update preferences button that appear on all our bulk mailings or by contacting us at info@lifeafterhummus.com
In addition you have the right to
• Rectification – if you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated.
• Restrict processing – you have the right to ask for processing of your personal data to be restricted if there is disagreement about its accuracy or legitimate usage.
• Right to data portability – you may ask us to provide your information to you – or another service provider – in a machine-readable format
Please contact us at info@lifeafterhummus.com if you wish to exercise any of these rights. Complaints about how we process your data should be made to the Information Commissioner’s Office.
Your agreement
By sharing your data with us and by using our website you consent to our processing of your data in accordance with this Privacy Policy
Use of Cookies
Our website use cookies to help us improve how our website works. By continuing to browse our site you are agreeing to our use of cookies. Most web browsers automatically accept cookies, but you should be able to change your browser preferences to prevent this if you wish. However, not using cookies can affect the extent to which you can use a particular website.
Performance
We may use Google Analytics to help us to analyse how you use our site. The cookie generates information (including your IP address), and this information is stored by Google. Google may also transfer this information to third parties where required to do so by law, or when such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
Social media sites
We operate a number of social media pages (including Facebook, Instagram, Youtube and Twitter). Although this policy covers how we will use any data collected from those pages it does not cover how the providers of social media websites will use your information. Please ensure you read the privacy policy of the social media website before sharing data and make use of the privacy settings and reporting mechanisms to control how your data is used.