Privacy Notice
City Hearts (UK) Limited is a registered charity that runs programmes to help vulnerable people and survivors of modern day slavery.
This document (our “privacy notice”) sets out information relating to how we use personal information relating to our clients. It also sets out information about what rights individuals have in relation to their personal information and various other matters required under data protection law.
In particular, this privacy notice provides information to individuals about how they can object to our use of their personal information, how they can withdraw any permissions they have given to us to enable us to process their personal information and how they can make a complaint.
This privacy notice applies to:
- individuals who use our website;
- individuals who make enquiries;
- individuals who subscribe to our newsletters or updates;
- donors;
- individuals who engage with us on social media;
- individuals who access our premises or the surrounding areas and who may be recorded on our CCTV system;
In the sections below, when referring to the individuals listed above, we use the terms “you” or “your”.
We take your privacy extremely seriously and want you to feel confident that your personal information is safe in our hands.
We will only use your personal information in accordance with data protection law applicable to England and Wales from time to time.
Under data protection law, when we use your personal information, we will be acting as a data controller. Essentially, this means that we will be making decisions about how we want to use your personal information and why.
Below, we summarise the main rules that apply to us under data protection law when we use your personal information:
We must be upfront about how we intend to use your personal information and must use your personal information fairly. Providing privacy information to individuals (such as in this privacy notice) is one aspect of using personal information fairly.
We must only use your personal information if we have a legal basis to do so under data protection law. These legal bases include:
- That you have consented to our use of your personal information;
- That we (or someone else) has a legitimate reason for needing to use your personal information and those legitimate interests are not outweighed by your rights or interests. We must balance our respective rights and interests before we can rely upon this legal basis; and
- We need to use your personal information to comply with laws we are subject to.
We must only use certain types of sensitive personal information (such as information relating to your health, racial or ethnic origin or religion) if we can also satisfy one of the conditions for processing this type of information set out in data protection law. These conditions include:
- As a not-for-profit body, it is necessary for us to process your personal data internally, in the course of our legitimate activities;
- That the processing is necessary for reasons of substantial public interest.
- That processing is necessary to protect your vital interests; or
- That you have given us your explicit consent.
We are only permitted to share your personal information with others in certain circumstances and if we take steps to ensure that your personal information will be secure.
Generally speaking, we must only use your personal information for the specific purposes we have told you about. If we want to use your personal information for other purposes, we need to contact you again to tell you about this.
We must not hold more personal information than we need for the purposes we have told you about and must not retain your personal information for longer than is necessary for those purposes (this is known as the “retention period”). We must also dispose of any information that we no longer need securely.
We must ensure that we have appropriate security measures in place to protect your personal information.
We must act in accordance with your rights under data protection law.
We must not transfer your personal information outside the European Economic Area (“EEA”) unless certain safeguards are in place. One such safeguard is that the personal data is only transferred to a country that has been approved by the European Commission as having an acceptable level of data protection law.
How we will use your personal information, the legal bases we will rely upon, how long we will keep your personal information and other details will depend upon who you are and why we need your personal information in the first place.
In this section, we provide specific privacy information relating to the different categories of individuals that this privacy notice applies to.
Individuals Who Use Our Website
What personal information we will use |
|
How we will obtain the personal information |
|
What purposes we will use the personal information for |
|
The legal grounds we rely upon |
|
How long we retain the personal information and why |
|
Consequences of not providing/permitting us to obtain personal information |
|
Individuals who Contact us with Enquiries
What personal information we will use |
|
How we will obtain the personal information |
|
What purposes we will use the personal information for |
|
The legal bases we rely upon |
|
How long we retain the personal information and why |
|
Consequences of not providing/permitting us to obtain personal information | If you do not permit us to collect or provide us with the personal information we require, we may not be able to deal with your enquiry. |
Donors
What personal information we will use |
|
How we will obtain the personal information |
|
What purposes we will use the personal information for |
|
Who we share your personal information with |
|
The legal grounds we rely upon |
|
How long we retain the personal information and why |
|
Consequences of not providing/permitting us to obtain personal information |
|
Individuals Who Subscribe To Our Newsletters Or Updates
What personal information we will use |
|
How we will obtain the personal information |
|
What purposes we will use the personal information for |
|
The legal grounds we rely upon |
|
How long we retain the personal information and why |
|
Consequences of not providing/permitting us to obtain personal information] |
|
Individuals who Engage with us on Social Media
What personal information will we use? |
|
How we will obtain it? | From the relevant social media site/your posts. |
What purposes will we use it for and what legal bases will we rely upon to do so? | To interact with you on the relevant social media site;
We won’t use the above information for any other purpose. The legal basis that we will rely upon to do so will be the consent provided by you when you agreed to the terms and conditions of use relating to the relevant social media site |
Engagement with us on Social Media
Any social media posts or comments you send to us (on our Facebook page, for instance) will be shared under the terms of the relevant social media platform (e.g. Facebook or Twitter) on which they’re written and could be made public. Other people, not us, control these platforms. We are not responsible for this kind of sharing. So, before you make any remarks or observations about anything, you should review the terms and conditions and privacy policies of the social media platforms you use. That way, you will understand how they will use your information, what information relating to you they will place in the public domain, and how you can stop them from doing so if you are unhappy about it.
Individuals Captured on our CCTV System
What personal information will we use? | Your image;
The dates and times you accessed our premises. |
How we will obtain it? | Automated CCTV recordings. |
What purposes we will use it for and what legal bases will we rely upon to do so? | We will use the personal information referred to above for security purposes;
Our legal basis for doing so is our legitimate interest in ensuring that our premises are secure. |