Privacy
What is the purpose of this policy?
Your privacy is important to us. This policy explains how we will process your personal data when you participate in our projects, make a donation, or otherwise engage with us. Please read this policy carefully to understand why and how your personal data will be used, how it will be shared, and the rights you have in respect of your personal data.
In this policy, when we talk about "personal data", we mean information relating to an individual who can be identified – directly or indirectly – by reference to that information. For example, their name, email address, or phone number. When we talk about "processing",we mean any action taken in relation to that data, including collecting, using, storing, or deleting it.
Who will process your personal data, and how can you contact us?
Your personal data is collected by Globe Community Project, who acts as the data controller for the processing described in this policy. This means that we are responsible for the processing and decide why and how your personal data is processed. We are a Registered Charity, with Charity number: 1104770.
You can contact us at St Margaret’s House, 21 Old Ford Road, Bethnal Green, London, England, E2 9PL.If you have any questions in relation to our use of your personal information or this Privacy Policy, please email gcp@globecommunityproject.org.
What personal data do we collect?
We collect personal data when you participate in one of our projects (for example, Touching Safe Ground or Wellbeing for Over 60s), make a one-off or regular donation to us, or otherwise engage with us (for example, if you sign up to receive our newsletter).
Depending on how you engage with us, we may collect personal data directly from you, from local authorities, from family members or carers, from healthcare providers, from other charities or voluntary sector organisations, or from educational institutions.
If you participate in one of our projects, we may collect the following categories of personal data (please note that many of these are optional, meaning you do not have to provide them in order to participate):
Your name and contact details
Gender
Address
Date of birth
Marital status
Information about whether you are a carer or not
Information about your religious beliefs
Information about your racial or ethnic background
Information about your education (for example, your school)
Emergency contact details
Next of kin details
Photographs or video recordings (and only with your permission)
Information about your engagement with us and our projects
Health information (including any long-term health conditions)
Information that helps us assess whether you might be at a higher risk of loneliness (for example, whether you have just moved to London, if you are low income, are single/living alone, your sexuality, your experience of prejudice or feeling different, and whether you are
deaf or disabled)
Information about your care needs (including disabilities, home conditions and general care
provisions)
Information about your support requirements
Records of meetings and decisions
Information relating to compliments or complaints
If you make a donation to us, we will collect:
Your name and contact details (your email address, address, and phone number)
Whether you are eligible for gift aid
If you sign up for our newsletter or to receive other communications from us, we will collect:
● Your name and contact details (your email address and address)
● Your marketing preferences, including a record of your consent if applicable.
Why do we collect personal data, and how long do we keep it for?
We collect personal data in order to:
● Administer, operate, and improve our projects.
● Report on projects to our funders (although we will only ever share anonymised data, unless you agree to be part of a case study)
● Process donations
● Communicate with you if you sign up to receive communications from us
We will retain the personal data that we collect in line with the following retention periods:
● If you participate in one of our projects: for 4 years after the end of the project
● If you make a regular donation: for 6 years after your last donation.
● If you sign up to our mailing list: for 1 year after you withdraw consent.
● If you provide quotes, photos, or input into a case study: for 6 years, at which point we will
either delete your personal data or seek your permission to keep it.
● Safeguarding incident reports: for 20 years after closure of the incident.
● Gift Aid data: for 6 years after the end of the year or accounting period that includes the last donation to which they relate, or at least 12 months after you claim for the last donation to which the declaration relates if this is later.
How will your personal data be shared?
Access to your personal data is restricted to only those who need it for a legitimate purpose, on a "need to know" basis. However, there are certain circumstances where we will share your personal data to third parties. These include:
Service providers, who process your personal data on our instructions. These include IT suppliers, payment service providers, cloud hosting providers, and email providers.
Our funders, such as local authorities, to whom we report on our projects. The vast majority of this information is anonymised or aggregated, so it does not identify you directly. However, and only with your permission, we may sometimes share your personal data as part of a case study.
Professional advisors, such as our lawyers, accountants and advisors, or other unaffiliated third-party companies who provide us with assistance or advice or are under contract to perform services for or on our behalf, provided that their use of personal data disclosed by us will be limited to performing services for us or on our behalf.
These third parties are carefully selected and take all reasonable steps to ensure that they process your personal data securely, and in accordance with applicable data protection laws.
Will we transfer your personal data to other countries?
We will primarily process your personal data within the UK. However, we may need to transfer your information to a location outside the UK. Where this is the case, we will implement appropriate measures under applicable data protection laws to ensure that your personal data remains protected and secure, such as only transferring your personal data to countries deemed to provide an adequate level of protection for personal data, or by entering into standard contractual clauses with the recipient.
Access to your personal data is restricted to only those who need it for a legitimate purpose, on a "need to know" basis. However, there are certain circumstances where we will share your personal data to third parties. These include:
What are my rights?
You have the following rights in relation to our handling of your personal data. Some of these rights are not applicable in certain circumstances and exemptions my apply. Your rights include the following:
Access: you are entitled to ask us if we are processing your personal data and, if we are, you can request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Correction: you are entitled to request that any incomplete or inaccurate personal data we hold about you is corrected.
Erasure: in certain circumstances, you are entitled to ask us to delete or remove personal data in certain circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with legal claims.
Restriction: in certain circumstances, you are entitled to ask us to suspend the processing of certain of your personal data about you, for example if you want us to establish its accuracy.
Transfer: you may request the transfer of certain of your personal data to another party in some circumstances, known as "data portability". This is the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable format and request the transmission of this personal data to you or a third party, without hindrance from us, and subject to your own confidentiality obligations.
Objection: where we are processing your personal data based on a legitimate interest (or those of a third party) you may object to processing on this ground. However, we may be entitled to continue processing your information if we have compelling legitimate interests which override your rights and freedoms or for the establishment, exercise and defence of legal claims.
Automated decision making: you have a right not to be subject to a decision that is solely based on automated processing (including profiling), where such decision produces legal effects concerning you or similarly significantly affects you. This right does not apply where the processing is necessary for entering or performing a contract with you, is required by law or we have your explicit consent. However, we do not carry out this type of processing.
Objection to marketing: you may object to the use of your personal data for direct marketing purposes.
Withdraw consent: where you have provided your consent to the collection and processing of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.
To exercise the above rights, please send an email to gcp@globecommunityproject.org. In certain circumstances, where necessary, we may request additional information to confirm your identity. You are not required to pay any charge for exercising your rights.
If you do not want to receive email or other communications from us anymore, please adjust your communications preferences by clicking "Unsubscribe" from any email communication from us or by sending an email to gcp@globecommunityproject.org.
If you have any questions about, or are not satisfied with how we process your personal data, please email us at gcp@globecommunityproject.org.
You also always have the right to file a complaint with the competent data protection authority. In the UK, this is the Information Commissioner's Office:
Information Commissioner’s OfficeWycliffe HouseWater LaneWilmslowCheshireSK9 5AFHelpline number: 0303 123 1113Website: https://www.ico.org.uk/make-a-complaintChanges to this Privacy PolicyChanges to this Privacy Policy
This privacy policy may change from time to time and is available on our website. You can tell when this privacy policy was last updated by looking at the date at the bottom of the policy. If we make changes to this privacy policy, we will post the updated version on our website.
If we make a change that significantly affects your rights or, to the extent we are permitted to do so, significantly changes how or why we use personal data, we will notify you by way of a prominent notice on our website or, if we have your email address, by email.
Any changes to this privacy policy will become effective upon posting. We encourage you to review this website from time to time for the latest information.