In carrying out our day-to-day activities, we process and store personal information whether you are visiting our website to seek information, to partake in research, as a supporter, shopper, or campaigner. We adhere to the requirements of the UK Data Protection Act (DPA) 1998 and on implementation, the General Data Protection Regulations (GDPR) 2018.
‘Processing data’ means obtaining, recording or holding information, or carrying out an action such as organising, disclosing or destroying the information.
‘Direct marketing’ means the communication of any advertising or marketing material which is directed to particular individuals.
‘Administration’ means the processing of data which excludes any element of direct marketing. Examples include: sending a thank-you letter to acknowledge a donation; contacting and sending information to applicants during a recruitment process, sending charity sport activity details to participants; sending out materials requested for fundraising, research, training and events purposes; sending out advance-notification letters for direct-debit purposes and invoicing.
The type of communications and information you receive about our charity and the ways in which you can get involved are your choice. You can change your mind at any time, or ask to see the information we hold about you, by contacting: Cornerstone Community Alliance Ltd, Kemp House, 160 City Road, London, United Kingdom, EC1V 2NX, or by phone on 0203 488 0377 or via email at [email protected]
We collect information about:
Visitors to our website (WordPress) and owned social-media channels (Cornerstone Community Alliance Ltd’s Facebook page, Twitter and YouTube channel).
Our subscribers via an e-marketing newsletter tool (WordPress).
Respondents to surveys (Lime Survey), website training and events forms and applications WordPress).
Our customers who have purchased products via our online shop (WordPress) ie. credit/debit card details (if making a purchase or donation - Paypal or BACS).
Our supporters (including our past and present donors, event participants, individuals giving non-financial assistance), prospective supporters, beneficiaries and members of the public who make contact with us, including those who share their personal information with us.
Complainants and other individuals in relation to a data protection or freedom of information complaint or enquiry.
Personal data. Examples are names, dates of birth, email addresses, telephone and postal addresses. We also collect Internet Protocol (IP) addresses. This is information a computer uses to identify a networked computer to which it transmits.
Non-personal data. An example is the web pages accessed on a computer. We collect this information so that we can help tailor future content and provide insight into problems in current implementations.
We seek your consent if consent is necessary. To assess whether consent is necessary we carry out a balancing exercise between your rights and expectations, and our legitimate interests to carry out the data processing activity, consistent with the law. Confidentiality will normally be assured to anyone seeking advice or advocacy or with whom we have contact.
Workers who are employed in any capacity by Cornerstone Community Alliance Ltd will not pass on information to other agencies without the direct permission of the client. In most situations this permission will be requested in writing, unless it is agreed that there is a matter of urgency and then verbal permission will suffice in which case written confirmation will be sought as soon as possible.
We will never sell your data to any individual or organisation.
We keep the information we hold about you accurate and up-to-date so far as we are able.
If you ask us to remove your personal information from our records, we will make efforts to ensure we have identified the correct record on our system, and we will review the data to ensure that we are not required to hold it for legal reasons. If, once these actions have been taken, we determine that we have no legal obligation to keep your data, we will retain your key details – ie your name, home address and email address – on a suppression list to make sure that we do not contact you again, and we will destroy all other information we hold about you. (If we were to remove your details completely we would have no record of your wishes, and therefore someone from Cornerstone Community Alliance Ltd might inadvertently contact you again.) The only exception to this will be if we are required to keep a record of your gifts for Gift Aid and financial audit purposes, in which case we will anonymise your record and retain the relevant data in a locked note which can only be accessed by a relevant employee.
We use a secure server for all areas of our website which collect personal information.
We review and update our application of this policy at least every four years.