Your personal data
The processing of personal data is governed by the General Data Protection Regulations (GDPR) enacted on the 25 May 2018.
Personal data relates to an individual or person who can be identified from that data. Identification can be from the information alone or in conjunction with any other related information in our possession.
What we do with your personal data
Child Action Northwest meets its legal requirements under the GDPR Act:
- By ensuring that personal data is kept up to date
- Ensuring that it is stored and destroyed securely
- By not collecting or retaining excessive amounts of data
- By protecting personal data from loss, misuse, unauthorised access and disclosure
- And by ensuring that systems and people that handle data are suitably trained and designed with the protection of protect personal data in mind.
We use your personal data for the following purposes and only for these purposes:-
- To enable us to provide you with a quality service.
- To ensure that our service is evaluated and improved and meets standards required by our many commissioning authorities.
- Promotion of our Charity and its various services.
- To meet any statutory legal regulations that we are legally obliged to carry out for individuals who fall within this statute.
- To disseminate advice, guidance and information which could be of benefit to you.
What is the legal basis for processing your personal data ?
- Processing is necessary for executing our legal and statutory obligations under charity, trust and company law.
- Processing is necessary under terms and conditions of service level agreements and procured contracts set by our commissioning authorities.
- Explicit consent of the data subject allows us to keep you informed about news, events, activities, services and information relevant to you.
Sharing your personal data
Your personal data will be treated as strictly confidential and we will not share your data with anyone without your explicit consent to do so.
How long do we keep your personal data?
We keep data only as long as you have a connection with Child Action Northwest or for as long as we need to legally keep records in accordance with charity, company law and our commissioning authorities. Once this period has passed we will then securely dispose of all data relating to you. We have a written policy that is specifically about retention of personal data.
Your rights and your personal data.
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
- The right to request a copy of any personal data which Child Action Northwest retains about you.
- The right to request that Child Action Northwest corrects any personal data if it is found to be inaccurate, wrong or out of date.
- The right to request your personal data is erased where it is no longer necessary for Child Action Northwest to retain your data.
- The right to withdraw your consent to the processing of your data at any time.
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and provide an opportunity to opt-out if you so wish to do so.
Where and whenever necessary, we will seek your prior consent.
To exercise all relevant rights, queries or complaints please in the first instance contact the Data Protection Officer Sue Cotton at Child Action Northwest. You can do this by email to firstname.lastname@example.org Tel 01254 244700