PETAL (People Experiencing Trauma and Loss) Support Ltd (Charity) General Data Protection Regulation (GDPR) Privacy Notice
Background
From 25th May 2018 GDPR will apply, and will replace the existing data protection laws. GDPR will provide increased protection for the personal data of individuals by imposing a new framework of rules for organisations which handle or process such personal data.
This framework of rules will apply to PETAL Support Ltd as a ‘controller’ of personal data.
Who We Are
PETAL Support is a charity inaugurated in 1994 in the pursuance of support to the adults and children deemed by PETAL Support as being affected by the act of homicide or suicide. This Privacy Notice explains your privacy rights and how we gather and use information about you.
Your rights
You have the right to object to how we process your personal information. You also have the right to access, correct, sometimes delete and restrict the personal information we use. In addition, you have a right to complain to us and to the data protection regulator
How we gather information
All information gathered is given directly by you. We do not collect personal information from any other source.
How we use Personal Information
We use your information to provide you with the best possible service, to comply with the law and enforce our legal rights.
How we look after your information
We need some personal information before we can provide our service to you, for example to allow us to contact you for PETAL Support Ltd events, although we make sure we process and store your data safely and securely. We will not share your data with anyone without your consent. In some cases we won’t be able to provide services to you if we don’t have all the personal information we need.
We keep your personal information securely for as long as we need to for the purpose described and for no less than the period of 50 years (information supplied for events and PETAL Support Ltd client development).
How data helps us
By keeping your details up to date, we can use this information to provide a better service for you. We’ll be able to:
- Get in touch with you quicker
- Pass on event requests or basic volunteering information
- Contact you with information that’s relevant and useful to you
- Let you know about any changes to the service we provide for you
Your Consent
Sometimes we need your consent to use your personal information (for example for marketing). We won’t always need consent to use personal information – for example if we need to meet regulatory requirements such as requests by a court of law or to perform a contract with you. Where you have given us consent, you have the right to withdraw it at any time.
Privacy
This privacy policy tells you what to expect when PETAL Support collects your personal information.
Why do we collect personal data? (hard-copy/electronically by e-mail/telephone or website)
We gather this information in order to:
- improve the website by monitoring how you use it
- respond to any feedback you send us, if you’ve asked us to
- send out email alerts to those who have requested them
- record and/or publish your response to a survey
- publish your comment anonymously
The personal data you send us can be viewed by authorised people in PETAL Support.
What data do we collect?
1. Visitors to our websites
The information we collect doesn’t identify anyone and is kept for a maximum of 38 months.
2. Emails and alerts
We collect your name and email address, although we do not issue email alerts or ask you to sign up to that service.
3. Feedback
If you contact us asking a question or giving feedback, we collect your email address and any other personal data contained in your message. If you contact us asking for information, we may need to contact other agencies to find that information.
We include personal data where permission has been given to do so. We never publish email or postal addresses.
5. Blogs & discussion sites
We collect names or usernames, and email addresses with each comment. This data is kept as long as the blog post or dialogue remains published. We include personal data where permission has been given to do so. We never publish email or postal addresses.
Links to other websites
When we link to other websites, we encourage you to read the privacy policy statements contained on those sites.
Your rights
You have a right of access to any personal data we hold about you, by making a Subject Access Request (SAR).
In addition, if you believe that the data we hold is inaccurate or incomplete you can ask us to update our records. If you are unhappy with the way in which we process your personal data you can request that we stop or restrict the processing we complete using your personal data or you may (we are duty bound by law to keep client records relating to homicide and for vulnerable people for 5o years) be able to ask us to delete the personal data we hold about you.
Find out more about your rights on the Information Commissioner’s site.
In some circumstances we may not be able to comply with your request. This is because some of these rights are conditional and can only be applied in certain circumstances and/or where there is no compelling reason to continue to process your personal data.
Contact
Data Protection Officer
Victoria Quay
Commercial Street
Edinburgh
EH6 6QQ