Autism Berkshire is committed to protecting your privacy and security. This notice explains how and why we use your personal data, to ensure you remain informed and in control of your information.
Since May 2018, Autism Berkshire has asked its supporters to “opt-in” for communications regarding services, fundraising and volunteering activities. This is due to a change to the rules which govern how we can communicate with you and a new regulation on personal data (the General Data Protection Regulation) which came into force on the 25th of May 2018.
Therefore, we are introducing a new approach that relies on you giving us your consent about how we can contact you. This means you’ll have the choice as to whether you want to receive these messages and be able to select how you want to receive them (email, phone or post).
You can decide not to receive communications or change how we contact you at any time. If you wish to do so please contact Autism Berkshire by emailing firstname.lastname@example.org or writing to Autism Berkshire, 40 Caversham Road, Reading, RG1 7EB, or telephoning 01189 594 594.
We will never sell your personal data, and will only ever share it with organisations we work with following prior consent from you or in the event of a safeguarding concern and if its privacy and security are guaranteed.
Any questions you have in relation to this policy or how we use your personal data should be sent to email@example.com and addressed to The Data Protection Officer.
1. About us
Your personal data (i.e. any information which identifies you, or which can be identified as relating to you personally) will be collected and used by Autism Berkshire (charity no. 107627) For the purposes of data protection law, Autism Berkshire will be the data controller.
2. What information we collect
Personal data you provide
We collect data you provide to us. This includes information you give to us when registering or booking events with Autism Berkshire. This is likely to include personal details (name, date of birth, email, address, telephone etc.).
Your involvement with Autism Berkshire will result in personal data being created. This will include services that you have accessed with Autism Berkshire.
Information we generate
We conduct analysis on the information we hold, which can in turn generate personal data. For example, by analysing feedback provided by you accessing Autism Berkshire services we are able to inform funders of the difference the services have made to families. No individual information will be passed to funders.
We may aggregate and anonymise personal data so that it can no longer be linked to any particular person. This information is used for reporting to funders and helps us to show the difference the services we offer to service users.
Information from third parties
We may collect information from social media where you have given us permission to do so, or if you post on one of our social media pages.
Sensitive personal data
We do collect and store sensitive personal data (such as information relating to health) about service users. We do take extra care to ensure your privacy rights are protected. This information is held on a secure database.
If you are a volunteer (whether specifically for Autism Berkshire, or if you are helping us for other reasons – for example you work for another organisation which is running an event with us) then we may collect extra information about you (e.g. references, criminal records checks, details of emergency contacts, medical conditions etc.) This information will be retained for legal reasons, to protect us (including in the event of an insurance or legal claim) and for safeguarding purposes.
3. How we use information
We only ever use your personal data with your consent, or where it is necessary in order to:
- enter into, or perform, a contract with you;
- comply with a legal duty;
- protect your vital interests;
- for our own (or a third party’s) lawful interests, provided your rights don’t override these.
In any event, we’ll only use your information for the purpose or purposes it was collected for (or else for closely related purposes):
We use personal data to communicate with people, to promote Autism Berkshire and to help with fundraising. This includes keeping you up to date with our news, updates, campaigns and fundraising information.
We use personal data for administrative purposes (i.e. to carry out our services). This includes:
- receiving donations (e.g. direct debits or gift-aid instructions);
- maintaining databases of our volunteers, service users;
- fulfilling orders for services (whether placed online, over the phone or in person);
- helping us respect your choices and preferences
4. Disclosing and sharing data
We will never share your data with any third party without your permission.
Since May 2018, Autism Berkshire has asked its supporters to “opt-in” for most communications. This includes all our marketing communications.
This means you have the choice as to whether you want to receive these messages and be able to select how you want to receive them (post, phone, email, text).
You can decide not to receive communications or change how we contact you at any time. If you wish to do so please contact Autism Berkshire by emailing firstname.lastname@example.org or by writing to Autism Berkshire, 40 Caversham Road, Reading, RG1 7EB, or telephoning 01189 594 594.
What does ‘marketing’ mean?
Marketing does not just mean offering things for sale, but also includes news and information
- our charity
- volunteering opportunities
- appeals and fundraising
- our events
Twice monthly newsletters are emailed to service our members, providing information regarding services.
As a charity, we rely on donations and support from others to continue to offer free and low cost services. We will contact members and supporters with fundraising material and communications. This might be about an appeal or to suggest ways you can raise funds (e.g. a sponsored event or activity).
As with other marketing communications, we’ll only contact you specifically about fundraising if you’ve opted into receiving marketing from us (and you can, of course, unsubscribe at any time).
We take great care to protect and respect the rights of individuals in relation to their personal data, especially in the case of children. If your child is under 18, we’ll only use his or her personal data with your consent.
6. How we protect data
We employ a variety of physical and technical measures to keep your data safe and to prevent unauthorised access to, or use or disclosure of your personal information.
Electronic data and databases are stored on secure computer systems and we control who has access to information (using both physical and electronic means). Our staff receive data protection training and we have a set of detailed data security procedures which personnel are required to follow when handling personal data.
All the data we hold is stored within the European Economic Area (EEA).
Data in transit
Sending information over the internet is generally not completely secure and we can’t guarantee the security of your data while it’s in transit. Any data you send is as your own risk. We have procedures and security features in place to keep your data secure once we receive it.”
Where we store information
Your information is stored on our CRM database, hosted by CharityLog. CharityLog is accredited to ISO9001 for quality management and to IS027001 for system security. Paper records, where necessary will be kept in a locked, fireproof storage system at the Autism Berkshire offices to which only authorised staff have access.
We will only use and store information for so long as it is required for the purposes it was collected for. We review what information we hold and delete what is no longer required.
8. Keeping you in control
We want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
- the right to confirmation as to whether or not we have your personal data and, if we do, to obtain a copy of the personal information we hold (this is known as subject access request)
- the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a lawful reason)
This Privacy Notice was last updated on 23 January 2019.