Privacy statement

General

This website is owned and operated by Careif, who is the data controller for the purposes of the Data Protection Act 1998. (ICO registration number ZB385483).

Careif is a registered charity (registered in England and Wales No 1121374) and a company limited by guarantee (No 06231733).

In this Privacy Statement, we, us, or our refers to Careif.

We are committed to respecting and protecting your privacy at all times and we take seriously our responsibilities under data protection legislation. This Statement outlines the type of data we may collect about you when you interact with us, how we store and handle that data, how we keep it secure, and your legal rights.

If you have any questions or concerns about this Statement or how we are processing your personal information, please get in touch with us at xxxx.

What is personal information?

Personal data or personal information means any data or information about an individual from which that person can be identified. It does not include data where the information has been removed (anonymised data).

Conditions for processing data

We are only entitled to hold and process your data where the law allows us to. The current law on data protection sets out a number of different reasons for which we may collect and process your personal data.

These include:

  • Legitimate interests: in specific situations we require your data to pursue our legitimate interest in a way that might reasonably be expected as part of running our charity, and that do not materially inspect your rights, freedom, or interest. This may include satisfying our external auditors or our regulators.

  • Legal compliance: if the law requires us to, we may need to collect and process your data. For example, we may can pass on details of people involved in fraud or other criminal activity.

  • Consent: in some situations, we can collect and process your data with your consent. For example when you opt-in to receive an email newsletter.

When collecting your personal data, we will always make clear to you which data is necessary in connection with a particular service.

When do we collect your data?

We normally collect your data when you provide it to us.

You may give us your data by email, through an online web form, over the telephone, face to face, or by post.

What sort of data do we collect?

We may collect your name and contact details as well as a list of our contacts with you and any donations you have given.

We may also collect usage data when you use our website, including IP protocol data, cookies, enquiry information, geographic data including time zones, browser information, and operating system information.

How do we use your data

We process personal information for the following purposes:

  • Providing and personalising our services

  • Dealing with your enquiries and requests

  • Administering donations

  • Maintaining information as a reference tool or general resource

  • Providing you with information about our activities

  • Ensuring we can comply with our legal obligations when you exercise your rights under data protection law and make requests;

Some of the data we collect may be automatically processed. This includes usage data collected from our website. Please see the paragraph Cookies below. 

If you donate to us via the online fundraising platform JustGiving, they will pass your personal information on to us to allow us to record and process your donation. We will contact you to confirm that we have received your donation and to see whether you would like to keep in touch in the future. Please make sure you read JustGiving’s own privacy policy as this will tell you how they use the information for their own purposes.

Who do we share your personal information with?

Under certain circumstances and only when it is appropriate we may share your personal data with trusted third parties, for example file storage and destruction companies, our accountants and other professional advisers.

To keep your data safe and protect your privacy:

  • We provide only the information they need to perform their specific services

  • They may only use your data for the exact purposes we specify in our contract with them

  • We work closely with them to ensure that your privacy is respected and protected at all times

  • If we stop using their services, any of your data held by them will either be deleted or rendered anonymous,

How do we protect your data? 

We take protecting your data very seriously and will treat your data with the utmost care and take all appropriate steps to protect it. We have clear data protection and information security policies and procedures in place, along with regulatory and other legal obligations to keep your data safe and these are regularly reviewed. 

Where is your data stored and processed?

Your data is stored and processed within the UK and/or the European Economic Area. If we have to transfer data outside the UK and/or EEA we will only do so if it is to countries that have adequate data protection laws in place or if we have entered into specific contracts (in a form approved by the European Commission and/or the UK regulator) and/or they are part of any government authorised arrangement.

Other websites

Our website may, from time to time, contain links to and from other third-party websites that are outside our control and are not covered by this Statement.

If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal detail to these websites.

How long will we keep your data?

We only keep your data for as long as is necessary for the purpose(s) for which it was provided

What are your rights?

You have various rights under the General Data Protection Regulations. These rights are subject to any legal constraints or rights we may have but include:

  • Information: you have the right to be informed about the data we hold and share about you. This is described to you through this Statement.

  • Access: you can make a request for your personal data (this is known as a subject access request) (see below);

  • Correction: if you believe any information we have is incorrect or incomplete then you can ask us to rectify this. This will be subject to us verifying the inaccuracy;

  • Erasure: you are entitled to ask us to erase or amend any personal data we may process;

  • Transfer: you may request that we transfer your data to you or a third party;

  • Withdrawing consent: at any time you may withdraw any consent you have given to us to process your personal data.

We will not usually charge you for exercising any of the above rights but:

  • We may have a legal basis on which we cannot carry out your request. Unless prohibited by law we will set out our reasons for refusing or seeking to amend any request;

  • We may charge a reasonable fee in limited circumstances – for example, if a subject access request is excessive or we consider it unfounded; and/or

  • We will usually require identification to satisfy ourselves of the legitimacy of any request before we carry it out.

We will carry out any request as soon as reasonably possible but usually within one month.

Where we are processing your personal data on the basis of our legitimate interest, you may ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.

The Regulator

If you feel your data has not been handled correctly or you are not happy with our response to any requests you have made to us regarding the use of your personal data, you have a right to complain or contact the Information Commissioner's Office (ICO). We would however appreciate the chance to deal with any concerns you may have before you approach the ICO, so please feel free to contact us first.

The ICO has enforcement powers and can investigate compliance with data protection laws. Contact the ICO at www.ico.org.uk or you can call them on 0303 1231113.

Changes to this Privacy Statement 

We may update this Statement from time to time without notice. Where we do make changes we will publish the amended version on our website. Your continued use of our website following the posting of any changes to this Statement will mean you accept these changes.

Cookies

Cookies are small data files that can identify you when you visit a website. Cookies remember your settings during and between visits to our site and also improve the speed and security of the website.

We use cookies on our website to improve the visitor’s experience, ensuring our website is responsive, fast and shows the information that you need. It enables us to improve the website.

We do not use cookies to collect any personally identifiable information about you, and do not pass personally identifiable data to third parties. You can disable cookies in your browser settings. If your browser settings are set to accept cookies we take this as agreement.

 

Last updated  20 January 2023