This policy sets out how we will treat your personal information and how it is kept secure in accordance with UK General Data Protection Regulation and the Data Protection Act 2018.
VCS Academy CIC is committed to protecting the personal information and privacy of everyone we work with, including our team (including volunteers, employees, consultants, associates and interns), clients (including current and former clients), funders and website visitors. We believe you have the right to privacy on the web. We will only ask for the information we need. We always let you decide what you’re comfortable telling us, explain why we need it and treat it as confidential.
When we record and use your personal information we:
- only access it when we have a good reason
- only share what is necessary and relevant
- don’t sell it to anyone
This policy must be read in conjunction with our Data Protection Policy and our Assets Management policy.
What information do we collect?
We may collect, store and use the following kinds of data:
- Information about your computer and about your visits to and use of this website including your IP address, geographical location, browser type, referral source, length of visit and number of page views;
- Information relating to any transactions carried out between you and us on or in relation to this website, including information relating to any booking or payment you make to us;
- Information that you provide to us for the purpose of registering your interest in one or several of our services e.g. your email address, telephone number, purpose of the call and other personal information;
- Information that you provide to us for the purpose of subscribing to our website services, email notifications and/or newsletters; and
- Any other information that you choose to send to us.
How do we collect and store information?
Mailchimp
- We use MailChimp as our marketing automation platform. It helps us to keep the information organised and to design and send you our various newsletters. By signing up to our newsletters through any of the specific forms, you acknowledge that the information you provide will be transferred to MailChimp for processing in accordance with their Privacy Policy and Terms.
- We will use the information you provide on the newsletter form to be in touch with you and to provide updates and marketing.
- As reiterated later on this document, you can change your mind at any time by clicking the unsubscribe link in the footer of any email you receive from us, or by contacting us.
HubSpot
- HubSpot is our Customer Relationship Management system and it helps us to avoid asking you the same questions over and over again.
- If you have shown interest in any of our products or services; by downloading our resources, by booking a training course or simply by calling or emailing us asking for more information, we may keep data about your contact information, your name, your organization as well as notes about your specific interests.
- We do this under the lawful basis of legitimate interest, taking on extra responsibility for considering and protecting your rights and interests, as stated by the General Data Protection Regulation.
- HubSpot’s privacy policy is available in: https://www.HubSpot.com/privacy.html
How will we use your personal data?
Personal data submitted on our various websites will be used for the purposes specified in this privacy policy or in relevant parts of the websites.We may use your personal information to:
- administer the websites;
- improve your browsing experience by personalising the website;
- enable your use of the services available on the website;
- send statements and receipts to you, and collect payments from you;
- send you general (non-marketing) communications;
- send you email notifications which you have specifically requested;
- send you marketing communications relating to VCS Academy and our campaigns, which we think may be of interest to you;
- provide third parties with statistical information about our users – but this information will not be used to identify any individual user;
- deal with enquiries and complaints made by or about you relating to the website;
- answer your questions about our services and provide you with the best value.
- Where you submit personal information for publication on our various websites, we will publish and otherwise use that information in accordance with the license you grant to us.
- We will not sell or rent your personal data with third party organisations.
- We may share your personal data with third party organisations for specific purposes e.g. delivering to you a service in collaboration with other agencies or foundations, only after collecting your consent.
Payments
- All our one-off website financial transactions are handled through our payment services provider, Stripe. You should only provide your personal information to Stripe after reviewing the Stripe privacy policy (available at https://stripe.com/gb/privacy). We will share information with Stripe only to the extent necessary for the purposes of processing payments you make via our websites. We do not store your financial or credit card details.
- We have a refund policy in case you make a donation in error. If you contact us within 7 days of making the donation we will return it to you within 40 days without charge.
Other disclosures
In addition to the disclosures reasonably necessary for the purposes identified elsewhere in this privacy policy, we will disclose information about you only when required to do so by law. At times we might use or share your information without your permission. If we do, we’ll always make sure there’s a legal basis for it. This could include situations where we have to use or share your information:
- to comply with the law – for example, if a court orders us to share information. This is called ‘legal obligation’
- to protect someone’s life – for example, sharing information with a paramedic if a client was unwell at our office. This is called ‘vital interests’
- to carry out our legitimate aims and goals as a not-for-profit – for example, to create statistics for national research, or to protect our systems from malfunction due to cyber-attacks by viewing and sharing where required our network audit logs. This is called ‘legitimate interests’
- for us to carry out a task where we’re meeting the aims of a public body in the public interest – for example, delivering a government or local authority service. This is called ‘public task’
- for us to carry out a contract we have with you – for example, if you’re an employee or a volunteer, we might need to store your bank details so we can pay you. This is called ‘contract’
- to defend our legal rights – for example, sharing information with our legal advisors if there was a complaint that we gave the wrong advice or support.
- We handle and store your personal information in line with the law – including the UK General Data Protection Regulation and the Data Protection Act 2018.
Security of your personal data
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. You are responsible for keeping your user details confidential.
Policy amendments
We may update this privacy policy from time-to-time by posting a new version on our website. You should check this page occasionally to ensure you are happy with any changes. We may also notify you of changes to our privacy policy by email.
Your rights
On receipt of proof of identity and a written request you may have a copy of any information that we hold about you. Please e-mail gdpr@vcsacademy.org.uk
Third party websites
The various websites we host contain links to other websites. We are not responsible for the privacy policies or practices of third party websites.
Unsubscribing
You may unsubscribe from any of our mailing lists at any time by clicking the unsubscribe link in the footer of any marketing email we send through Mailchimp.
Complaints and contact
If you have any questions and/or complaints about this privacy policy or our treatment of your personal data, please write to us by e-mail complaints@vcsacademy.org.uk
Complain to the Information Commissioner’s Office
You can also complain to the ICO if you are unhappy with how we have used your personal information.
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline number: 0303 123 1113