top of page

GDPR AND PRIVACY POLICY

What personal data do we collect?

We collect personal data about you in order that we can provide you with membership information, news and access to local information. We also collect information on the protected characteristics in order that we can check inclusion. We keep the protected characteristics data separate from your name and email address so you can not be identified using those characteristics. This information also helps us verify eligibility for offered services where appropriate.

 

Personal details that we collect, are:

  • your name, home and work address/postcode, contact number, email address

  • the characteristics that the Equality Act protects. These are age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, and sexual orientation

  • In relation to the latter you have the option to state – prefer not to say

.

How do we collect your data?

You directly provide us with the data we collect as part of the membership registration form and when you send us an email.

 

Why do we collect this information and what is the legal basis for handling your data?

We use personal data in order to contact you in  and to monitor and assess inclusion in the network

 

Who do we share your data with?

We do not share your data with anyone outside of account3

We share anonymised data for monitoring purposes with our funders

 

We will also share your data:

  • if we are legally required to do so (for example, by law, by a court or by the Charity Commission);

 

We will never share your data with any other organisation to use for their own purposes.

How do we protect your data?

We protect unauthorised access to your personal data and prevent it from being lost, accidentally destroyed, misused, or disclosed by:

  • storing your personal data in a shared electronic drive where only authorised individuals have access;

  • storing hard copies of your personal data in a locked cabinet where only authorised individuals have access;

Where data is shared electronically for the purpose of providing an immediate service (such as to deliver support to you), a secure encrypted messaging service is used and only data necessary for that immediate service is shared.

How long do we retain your data?

Due to funders requirements we may hold retain your personal data for up to 7 years. Where your personal data has been shared with a data processor to provide an immediate service to you, the data processor commits to deleting the personal data shared with them as soon as the immediate service has been provided.

 

Automated decision-making

We do not make any decisions about you based solely on automated decision-making.

Your rights with respect to your personal data

You have the right to:

  • request access to, amend or correct your personal data;

  • request that we delete or stop processing your personal data (for example where the data is no longer necessary for the purposes of processing); and

  • request that we transfer your personal data to another person or company.

 

If you wish to exercise any of these rights at any time or if you have any questions, comments or concerns about this privacy notice or how we handle your data, please contact us at admin@account3.org.uk  

 

If after contacting us and our response, you continue to have concerns about the way your data is handled and remain dissatisfied after raising your concern with us, you have the right to complain to the Information Commissioner Office (ICO). The ICO can be contacted at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or ico.org.uk.

 

Changes to this notice

We keep this notice under regular review. You will be notified of any changes where appropriate.

bottom of page