This privacy policy is for St Ives Community Orchard CIC and governs the privacy of its users who choose to use our services. It relates to our use of any personal data we collect from you for any of our services, the collection, use, disclosure of personal data when you use our Service and the choices you have associated with that data. See also our other Policies
We may update our Privacy Policy from time to time and when we do we update the “effective date” at the bottom of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
We are committed to protecting and respecting your personal data and privacy. Whenever you provide such information, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data.
St Ives Community Orchard CIC is registered with Companies House, Company No. 13342142.
Your rights
The UK GDPR provides the following rights for individuals:
- The right to be informed – about the collection and use of personal data, with access to this privacy policy including our purposes for processing personal data, retention periods for that personal data, and who it will be shared with.
- The right of access – to request and receive a copy of your personal data, and other supplementary information if requested.
- The right to rectification – to have inaccurate personal data rectified, or completed if it is incomplete.
- The right to erasure – to have personal data erased, this is also known as the ‘right to be forgotten’.
- The right to restrict processing – to request the restriction or suppression of their personal data.
- The right to data portability – to obtain and reuse your personal data provided to us.
- The right to object – you have an absolute right to stop your data being used for direct marketing.
- Rights in relation to automated decision making and profiling.
More info on this can be found on //ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
The Website
This website and its owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website complies to all UK national laws and requirements for user privacy. While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Your personal information is kept private and stored securely until a time it is no longer required or has no use, as detailed in the Data Protection Act 1998. We use any information submitted to provide you with further information about the products / services we offer or to assist you in answering any questions or queries you may have submitted. This includes using your details to subscribe you to any email newsletter program the website operates but only if this was made clear to you and your express permission was granted when submitting any form to email process. Or whereby you the consumer have previously purchased from or enquired about purchasing from the company a product or service that the email newsletter relates to.
Your details are not passed on to any third parties. We are very sensitive to our customers privacy and adhere to guidelines set out in the Data Protection Act 1998. We will only supply your details to a known and trusted supplier with your prior agreement, only for cases where this was needed.
Any newsletters sent containing special offers or information will always include a link, to give you the option, to remove/unsubscribe yourself from any future mailings.
Tracking & Cookies Data
This website uses tracking software provided by Google analytics to better understand how visitors use the website. The software will save a cookie to your computers hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information. You can read Google’s privacy policy here for further information [ //policies.google.com/privacy ].
Cookies are files with small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.
Security Of Data
We will never sell your data to a third party for marketing purposes. The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. We have put in place reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, partner agencies, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
Data Correction
We will correct or update your data at the earliest opportunity provided you make the request in writing to the contact details provided in this policy, clearly specifying which data is incorrect or out of date.
Data Retention
We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
Data Deletion and Withdrawal of consent
You have the right to erasure under specific circumstances. A request for your personal data to be deleted will be decided on a case by case basis and must be submitted in writing to the contact details provided in this policy.
Where you have consented to our processing of your personal data, you have the right to withdraw that consent at any time. Please inform us immediately if you wish to withdraw your consent. Please note:
- The withdrawal of consent does not affect the lawfulness of earlier processing.
- If you withdraw your consent, we may not be able to continue to provide services to you.
- Even if you withdraw your consent, it may remain lawful for us to process your data on another legal basis (e.g. because we have a legal obligation to continue to process or hold your data).
Links To Other Sites
Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Your Personal Data
The personal data we process may include your (or your employer’s or our client’s) name, address, date of birth, family relationships and email address. It also may include your IP address and cookies (website). If you are employed by us, or supply or receive goods or services from us, we may also keep a record of your bank account details.
We will collect personal data from you in relation to the provision of our services to you. This may include details relating to our medical history to make sure you are safe participating in activities, your education status and history to provide the best support if you are referred to one of our programmes, your family history to provide the best support if you are referred to one of our programmes
We may require documentary details from you such as a driving licence, passport or birth certificate, in order to comply with our obligations under disclosure and barring service requirements [DBS], identification, money laundering and anti-terrorism legislation.
We will only use your details for the following purposes:
- To fulfil a contract we have with you to provide our services
- Where it is our legal duty
- When it is in our legitimate interest (A legitimate interest is when we have a programme related, business or commercial reason to use your information. But even then, it must not unfairly go against what is right and best for you. If we rely on our legitimate interest, we will tell you what that is.)
- When you consent to the use of the data
How we collect your data
Our collection methods are via our website, Mailchimp, Jotform, via client/participant referral agencies, through engagement (or potential engagement) of our services; by communications, including email, telephone, post or social media; • networking; through engagement of service providers; via third parties and/or publicly available resources. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
How we use your data
We use information held about you to:
- provide services to you
- provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes
- allow you to participate in our service when you choose to do so
- for the purposes of our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data.
- carry out necessary maintenance to our infrastructure
- notify you about changes to our services
- fulfil our legal obligations including our obligations under disclosure and barring service requirements (DBS), identification, money laundering and anti terrorism legislation
- use in the investigation and/or defence of potential complaints, disciplinary proceedings and legal proceedings, and
- to enable us to invoice you, or your referrer, for our services.
- If you are an existing customer, client, referral agency or contact, we may send you information about other products, events and services that we feel may be of interest to you. You have a right at any time to ask us to stop contacting you for marketing purposes.
If you refuse to provide us with certain information when requested, we may not be able to perform the contract we have entered into with you. Alternatively, we may be unable to comply with our legal or regulatory obligations. We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do.
Disclosure Of Data – Legal Requirements
We may disclose your Personal Data in the good faith belief that such action is necessary to:
- To comply with a legal obligation
- To protect and defend the rights or property of St Ives Community Orchard CIC
- To prevent or investigate possible wrongdoing in connection with the Service
- To protect the personal safety of users of the Service or the public
- To protect against legal liability
How we will share your data.
We will share your information within St Ives Orchard CIC for administration purposes, to develop ways to meet our clients needs and to carry out marketing activities. We may use third party service providers such as agents, subcontractors and other organisations to help us provide services to you. These would include accounting and payroll providers for invoicing for services and processing staff payroll; email and Document storage systems, Digital marketing services such as Mailchimp.
All of our third party service providers are required to take commercially reasonable and appropriate security measures to protect your personal data. We only permit our third party service providers to process your personal data for specified purposes and in accordance with our instructions.
Contact Us
If you want to request more information about our privacy policy or information regarding data protection you should contact us using the details provided below:
Mail: For the attention of the St Ives Orchard CIC, 5 Porthia Crescent, St Ives, TR2 62JA
Email: info@stivesorchard.co.uk