About this policy
Vasculitis Scotland is committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible way. This policy outlines how we aim to achieve this and includes the information collected when:
- you use our website (http://vasculitis-scotland.org/).
- you book or register for an event on our website.
- you make a donation through our online Donation form (embedded & powered by CAF Donate {Charities Aid Foundation})
- you sign up to our newsletter
Definition of Personal Data
Personal Data means any data that relates to an identifiable person who can be directly/indirectly identified from that data. In this case, it means personal data that you give to us via our site.
By providing your personal data, you agree that we can use your personal data in accordance with this policy. We collect, use and retain Personal Information about you only to the extent that is reasonably required to conduct our business effectively.
Ensure you understand this policy in its entirety and take your time to read it.
How do you get my consent?
When you provide us with personal information to donate; book/register for an event or purchase an item from our store, we assume you understand that your data must be collected to process your request. We will use your data for processing purposes only.
If we ask for your personal information for a secondary reason, like marketing, we will ask you directly for your expressed consent via a form checkbox.
Who are we?
Vasculitis Scotland is a registered charity based in East Kilbride
Our registered address is:
Vasculitis Scotland
Westpoint House
5 Redwood Place, Peel Park
East Kilbride, G74 5PB
How do we collect information from you?
We collect information from you:
- when you book or register for an event or register to become a member of Vasculitis Scotland. We use a CMS form plugin called Ninja Forms to collect the information necessary to complete your booking. We have multiple forms featured at any time on our website. We do not share data collected via our online forms with any other business or third parties, apart from Ninja Forms itself and unless when required/instructed to do so by law. Data collected via our forms is both stored in the CMS and can be downloaded as a csv file for marketing purposes. Our policy is to delete data from our CMS every three years, whilst the archiving and deletion of data from our email servers is subject to whether or not the data is still relevant or necessary. You can find out more about about how Ninja Forms comply with General Data Protection Regulation by reading their Privacy Policy.
- make a donation. Online donations are collected by CAF. Payment details are entered directly to their systems for the purpose of completing the transaction and are never handled or stored by our website. If you do not opt to remain anonymous your contact details (name and email address) will be forwarded by CAF to us on completion of a donation. We will then store your data as discussed within this Privacy Policy, section titled “How and where do we store data?” Learn more about how CAF handle your data by reading their Privacy Policy
- sign up to our newsletter. If you sign up for our newsletter, which is administered through Mailchimp, we will store some of your information, including your email address, IP address and certain information about the links you click within the emails we send you, on a Mailchimp server. Neither we nor Mailchimp will ever sell your email address or share it with any other party, unless we are legally compelled to do so. If you contact Mailchimp directly regarding your subscription to our newsletter, Mailchimp may contact you directly; otherwise, Mailchimp will never contact you. Only authorized Mailchimp employees have access to our subscriber list. You are always free to unsubscribe from our newsletter and can do so through a link on the email newsletters you have received, or by contacting us directly.
- make an enquiry. There is no contact form on our website, therefore all enquiries are sent to our email servers. We delete all emails once we have no business reason to keep them, or every three years, whichever timeframe is less.
What type of information is collected from you?
You will be asked to submit personal information about yourself when you donate, register to become a member, or book an event. We will collect this information so we can fulfil your registration and/or booking.
Vasculitis Scotland (or our third parties, Ninja Forms, CAF) typically collects all or some of the following information to process donations, event bookings and member registrations:
- title
- name
- e-mail address (used for booking, registration &order confirmation)
- home or work address
- billing information (compliant with the Payment Card Industry security standard (PCI-DSS) as discussed in the above section.
- telephone number
- company name
- dietary requests
- marketing preferences (whether you opt-in or opt-out)
When you access our website, Vasculitis Scotland collects:
a nugatory amount of data, which is automatically collected by our web server access log records. Access log records collect and store information based on IP addresses and access request date/time. We host our website on Namesco servers. Namesco is fully compliant with Data Protection laws, although the basic information they store is not user-specific and cannot be used to identify an individual. We have never had reason to access these logs as we use Google Analytics performance cookies to display more advanced access and usage data in a user-friendly dashboard which we (and our web agency) can more easily interpret.
We use Google Analytic cookies to gather and display information relating to
- device type (e.g. mobile, computer, tablet)
- operating system
- browser type
- browser information (e.g., type, language, version)
- domain names
- access times and dates
- location (country + city/town)
- referring website addresses
- All data gathered, processed and displayed by Google Analytics cookies is randomised and can never by traced to an individual.
Careers:
You may submit your CV if you’re interested in working for us to info@thelaurencurrietwilightfoundation.org. This information may include:
- personal details
- employment details
- education
- salary history
- other relevant details
We will use this information to assess your application. We may also keep it in our records for future reference. We delete all emails and attachments once we have no business reason to keep them, or every three years, whichever timeframe is less. Please email info@thelaurencurrietwilightfoundation.org if you would no longer like us to hold your records at any time.
How is your information used?
Our use of your personal data will always have a lawful basis, either because it is necessary to complete a booking, because you have consented to our use of your personal data (e.g. by subscribing to emails), or because it is in our legitimate interests.
We require the information outlined in the previous section to understand your needs and provide you with a better service, and in particular for the following reasons:
- Process membership registrations
- Internal record keeping.
- Send you service emails (booking confirmation/receipts).
- Improve our products and services.
- Send marketing communications if you have opted in to receive them or have signed up to our newsletter.
Who has access to your information?
- We will not sell, distribute, or lease your personal information to third parties. Any personal information we request from you will be safeguarded under current legislation.
We will only share your information with companies if necessary to deliver services on our behalf. These service providers are limited to Names.co.uk to host our website; Ninja Forms to collect, process and store form data; CAF to process donations and Mailchimp to administer our newsletter service. We do not host any further third party website content such as imagery hosted on CDNs or embedded social or video content which could use their own cookies to gather data about you. - CAF Donate may transfer your information to HMRC where you’ve consented to Gift Aid on the embedded form featured here. For more information please see CAF Donate’s Privacy Policy
You may choose to restrict the collection or use of your personal information at any point. Please refer to the Your Choices section of this Privacy Policy for details. - Our website agency has access to our Google Analytics Dashboard, but no other data.
How and where do we store data?
We only keep your personal data for as long as we need to in order to use it as described in this Privacy Policy, and/or for as long as we have your permission to keep it.
When you send an email to the email address displayed on our website, we collect your email address and any other information you provide in that email (such as your name, telephone number and the information contained in any signature block in your email). Microsoft Office 365 provide our email server, data sent via email is stored in either their Durham or London data centre. You can find their Privacy Policy here.
Namesco
A nugatory amount of data is automatically collected by our web server access log records. Access log records collect and store information based on IP addresses and access request date/time. We host our website with Namesco who are fully compliant with Data Protection laws, although the basic information they store is not user-specific and cannot be used to identify an individual. We have never had reason to access these logs as we use Google Analytics performance cookies to display more advanced access and usage data in a user friendly dashboard which we can more easily interpret. Namesco is fully compliant with GDPR regulation – please access their Privacy Policy to learn more.
Ninja Forms
As discussed in this Privacy Policy we use third party software, Ninja Forms, to process form data submitted via our website. Ninja Forms is fully compliant with GDPR regulation – please access their Privacy Policy to learn more.
CAF
As discussed in this Privacy Policy we use third party software, CAF Donate, to process donations made via our website. CAF is fully compliant with GDPR regulation – please access their Privacy Policy to learn more.
As discussed in this Privacy Policy we use third party software, Mailchimp, to administer our newsletter service. Mailchimp is fully compliant with GDPR regulation – please access their Privacy Policy to learn more.
Your choices
We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. We will not pass your details to any third parties for marketing purposes unless you have expressly permitted us to. Furthermore, you can change your marketing preferences at any time by contacting us by email at info@thelaurencurrietwilightfoundation.org
You have a right to request a copy of the personal information that Vasculitis Scotland holds about you and have any inaccuracies corrected. Any such requests should be made to emailed to info@thelaurencurrietwilightfoundation.org
You have the right to withdraw your consent to us using your personal data at any time, and to request that we delete it.
We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Data will, therefore, be retained for the following periods: 36 Months
Security
Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure data collected through our Site. Although no method of transmission over the Internet or electronic storage is 100% secure, we implement generally accepted industry standards.
Use of ‘cookies’
Like many other websites, we use cookies. We use them to help you personalise your online experience.
A cookie is a text file that is placed on your hard disk by a web page server which allows the website to recognise you when you visit. Cookies only collect data about browsing actions and patterns, and do not identify you as an individual.
We use cookies for the following purposes:
- Performance and analytics: We use Google Analytic (tag manager) cookies to help us analyse how our web pages are being accessed and used. We also use cookies to provide insights such as page views, conversion rates, device information, visitor IP addresses, and referral sites.
Opting Out
You can set your browser to not accept cookies, but this may limit your ability to use the third party services on our website.
What happens if our business changes hands?
We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part. The new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by us.
In the event that any of your data is to be transferred in such a manner, you will not be contacted in advance and informed of the changes.
Changes to this statement
Vasculitis Scotland will occasionally update this Privacy Policy to reflect company and customer feedback.Vasculitis Scotland encourages you to periodically review this statement to be informed of how Vasculitis Scotland is protecting your information. This policy was last updated in July 2018.
Contact Information
Vasculitis Scotland welcomes your comments regarding this Privacy Policy. If you believe that Vasculitis Scotland has not adhered to this Privacy Policy, please contact us at info@thelaurencurrietwilightfoundation.org. We will aim to use commercially reasonable efforts to promptly determine and remedy the problem.