There are six data protection principles that Southall Black Sisters must, and does, comply with. The personal information we hold about you must be:
- Processed lawfully, fairly and in a transparent manner.
- Collected only for legitimate purposes that have been clearly explained to you and not further processed in a way that is incompatible with those purposes.
- Adequate, relevant and limited to what is necessary in relation to those purposes.
- Accurate and, where necessary, kept up to date.
- Kept in a form that permits your identification for no longer than is necessary for those purposes.
- Processed in a way that ensures appropriate security of the data.
- How we collect information from your use of the Southall Black Sisters website
- What we do with that information
- Your rights in relation to the information we collect
- Who we are
For the purposes of data protection law in the UK, Southall Black Sisters of 21 Avenue Road, Southall, UB1 3BL, is the data controller in relation to the collection and use of your personal information in the United Kingdom. In this policy, “we”, “us” and “our” refer to Southall Black Sisters.
As a non-profit human rights organisation, Southall Black Sisters is committed to protecting and promoting individual privacy.
If you require further information about our privacy practices, please contact our Data Protection Officer by:
- Post: Southall Black Sisters, 21 Avenue Road, Southall, UB1 3BL
- Email: [email protected]
Phone: 0208 571 9595
- How we collect information about you
We collect information in two ways from your use of the website:
- Anonymous data that is automatically collected from all visitors to the website
- Personal data that you voluntarily submit when you interact with us directly. This could be if you ask us a question about domestic abuse or the support services we provide, register for one of our events, make a donation to us, subscribe to our email communications such as a newsletter, apply for a job or volunteering opportunity, purchase something from our online store, or otherwise provide us with your personal information.
The type and amount of personal information we collect depends on how you use the website.
3. How we use your personal data
In this Section we set out:
(a) the general categories of personal data that we may process;
(b) in the case of personal data that we did not obtain directly from you, the source and specific categories of that data;
(c) the purposes for which we may process personal data; and
(d) the legal bases of the processing.
We may process data about your use of our website and services (“usage data”).
The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics. This usage data may be processed for the purposes of analysing the use of the website, evaluating the website and working to improve it. The legal basis for this processing is consent.
We may process information relating to transactions, including purchases of goods services, and donations, that you enter into with us and/or through our website (“transaction data”).
The transaction data may include your contact details and the transaction details. We do not store or have access to your card details as we use Paypal, a third-party payment service. The card details for purchases will be dealt with by Paypal and for donations by Giveall2Charity. The transaction data may be processed for the purpose of supplying the purchased goods and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely the proper and legal administration of our website and business.
We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (“notification data”).
The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is consent given at the point of sign-up to our newsletter and e-mail notifications.
We may process information contained in or relating to any communication that you send to us (“correspondence data”). The correspondence data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using the website contact forms. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.
We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks.
In addition to the specific purposes for which we may process your personal data set out in this section, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Please do not supply any other person’s personal data to us, unless we prompt you to do so
4. Who your information is shared with
In addition to the specific disclosures of personal data set out above, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
5. International transfers of your personal data
In this section, we provide information about the circumstances in which your personal data may be transferred to countries outside of the European Economic Area (EEA).
By using the website, you acknowledge that personal data you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
6. Storing and retaining your personal data
Southall Black Sisters takes the security of your personal data very seriously. When you share your personal information, we do all we can to ensure that it is treated securely and we have appropriate measures in place to prevent unauthorised access to, loss, or misuse of your personal data. These measures include security measures on our servers, restricted access controls and disaster recovery plans.
We will not keep your personal information for longer than is necessary for the purposes for which we collect it unless we believe that the law or other regulation requires us to preserve it.
Personal information that we no longer need is securely disposed of and/or anonymised so you can no longer be identified from it. When it is no longer necessary to retain your data, we will delete the personal information that we hold about you from our systems.
Some personal information may be retained by us in archives for statistical or historical research purposes although we will only do this in a manner that complies with applicable data protection law.
7. Your rights
You have the right to withdraw consent or object to our processing of your data. You also have the right to seek information on which of your personal information we hold, and you can, in certain circumstances, implement your rights to erasure, rectification or restriction of our processing.
If you have comments, questions or requests regarding the processing of your personal data, please contact [email protected] or write to us at Southall Black Sisters, 21 Avenue Road, UB1 3BL.
Cookies are small pieces of data sent from a website and stored on your computer by your web browser while you are browsing the website.
We may update this policy from time to time by publishing an updated version on the website. If we do, we will post a notice of the change on the website.