{"id":3,"date":"2020-11-27T11:02:29","date_gmt":"2020-11-27T11:02:29","guid":{"rendered":"https:\/\/www.ahag.org.uk\/?page_id=3"},"modified":"2024-10-14T19:35:28","modified_gmt":"2024-10-14T19:35:28","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.ahag.org.uk\/index.php\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h2><strong>1. Aims of the policy<\/strong><\/h2>\r\n<p>The primary aims of this policy are:<\/p>\r\n<ul>\r\n<li>To explain what personal data are collected by AHAG and how these data are used<\/li>\r\n<li>To specify how AHAG respects privacy when dealing with personal data collected by the organisation<\/li>\r\n<\/ul>\r\n<p>Employees, Trustees and volunteers must ensure that they respect privacy when dealing with personal data.<br \/><br \/><\/p>\r\n<h2><strong>2. Reasons for collecting personal data<\/strong><\/h2>\r\n<p>AHAG collects personal data for many reasons, including to provide clients with advice or support, to communicate with clients, to send clients information they have requested and to administer fundraising campaigns and donations.\u00a0 Depending on how individuals interact with AHAG, personal data may be processed for the following reasons:<\/p>\r\n<ul>\r\n<li>To provide advice or support that has been referred to or requested<\/li>\r\n<li>To record personal details shared during telephone conversations with staff or volunteers<\/li>\r\n<li>To administer housing support services provided to clients<\/li>\r\n<li>To communicate AHAG\u2019s work and fundraising activities<\/li>\r\n<li>To process donations and administer Gift Aid information<\/li>\r\n<li>To manage an individual\u2019s communication preferences<\/li>\r\n<li>To process job applications\/volunteer applications<\/li>\r\n<li>To comply with applicable laws and regulations, and requests from statutory agencies.<\/li>\r\n<\/ul>\r\n<p>&nbsp;<\/p>\r\n<h2><strong>3. Personal data collected and collection routes <\/strong><\/h2>\r\n<p><strong>\u00a0<\/strong><strong>3.1\u00a0\u00a0\u00a0 Personal data collected<\/strong><\/p>\r\n<p>AHAG collects the following personal data:<\/p>\r\n<ul>\r\n<li>Full name<\/li>\r\n<li>Contact details &#8211; including postal address, telephone numbers and email address<\/li>\r\n<li>Date of birth<\/li>\r\n<li>Case details when providing housing advice or services<\/li>\r\n<li>Payment details<\/li>\r\n<li>Records of correspondence and engagement with AHAG<\/li>\r\n<li>Donation history and Gift Aid details<\/li>\r\n<li>Occupation<\/li>\r\n<li>Biographical information<\/li>\r\n<li>Photos, videos and audio recordings<\/li>\r\n<li>Other information shared with AHAG.<\/li>\r\n<\/ul>\r\n<p>AHAG sometimes also collects sensitive, personal data about individuals. This includes information about health, religion, sexuality, ethnicity and criminal records. \u00a0Such information will normally only be recorded where an individual has given explicit consent, unless AHAG is permitted to do so in other circumstances under data protection law.<strong>\u00a0<\/strong><\/p>\r\n<p><strong>3.2\u00a0\u00a0\u00a0 Personal data collection<\/strong><\/p>\r\n<p>Personal data may be collected via:<\/p>\r\n<ul>\r\n<li>Paper forms completed by clients or AHAG staff or volunteers<\/li>\r\n<li>Telephone conversations or face to face conversations with AHAG staff or volunteers<\/li>\r\n<li>Email communication with AHAG staff<\/li>\r\n<li>Third-party companies and websites such as Just Giving or CAF Donate<\/li>\r\n<li>Communication via social media<\/li>\r\n<li>On-line chat<\/li>\r\n<\/ul>\r\n<p>&nbsp;<\/p>\r\n<h2><strong> 4. Using personal data<\/strong><strong> <br \/><\/strong><\/h2>\r\n<p><strong>4.1\u00a0\u00a0\u00a0 AHAG support and advice services<\/strong><\/p>\r\n<p>If a client is receiving advice, guidance or support from AHAG, their personal data will have to be processed because of their specific relationship with AHAG.<\/p>\r\n<p>All case information &#8211; including notes, letters and information given to AHAG about a client &#8211; will be kept in a confidential record that is specific to the client.\u00a0 AHAG uses a spreadsheet system to support its advice and support.\u00a0 This means that AHAG can keep the information a client provides so the case history and relevant details can be seen. \u00a0This ensures that AHAG can provide appropriate and accurate advice or support. \u00a0<\/p>\r\n<p>AHAG takes data security very seriously. \u00a0No one is allowed access to AHAG systems or files unless they need this to provide the service to a client or one of the other purposes discussed in this policy.\u00a0 AHAG may use client data for statistical reports. These statistics will not include any information that could be used to identify any individual.<\/p>\r\n<p><strong>4.2\u00a0\u00a0\u00a0 Fundraising and marketing<\/strong><\/p>\r\n<p>AHAG would like to keep people up to date with fundraising and marketing activities.\u00a0 A variety of channels are used to contact supporters, including the AHAG website, face to face fundraising, social media and email.\u00a0 Consent is obtained before individuals are contacted by email for marketing purposes.<\/p>\r\n<p>The following marketing materials may be sent out:<\/p>\r\n<ul>\r\n<li>Updates and newsletters about AHAG\u2019s work<\/li>\r\n<li>Appeals and fundraising activities &#8211; including requests for monetary donations or donations of goods<\/li>\r\n<li>Events<\/li>\r\n<li>Volunteering opportunities.<\/li>\r\n<\/ul>\r\n<p>Personal data will never be shared or sold to a third-party organisation.\u00a0\u00a0 Consent can be withdrawn or communication preferences updated at any point by contacting AHAG at <a href=\"mailto:info@ahag.org.uk\">info@ahag.org.uk<\/a> or by calling AHAG on 01296 435026.<\/p>\r\n<p><strong>4.3\u00a0\u00a0\u00a0 Administrative communications<\/strong><\/p>\r\n<p>In addition to fundraising and marketing communications, AHAG may also communicate by post, telephone, and email in relation to administrative and transactional matters. \u00a0For example, there may be occasions where AHAG needs to contact an individual about their donation e.g. if there is a problem with a payment or in relation to a Gift Aid declaration.<\/p>\r\n<p><strong>4.4\u00a0\u00a0\u00a0 Applying for a job\/volunteering opportunity with AHAG<\/strong><\/p>\r\n<p>When applying for a job with AHAG, personal data will be collated to monitor the progression of the application, and the effectiveness of the recruitment process through the statistics collected. \u00a0Where the data need to be shared &#8211; such as for gathering references or obtaining a Disclosure and Barring Services check (depending on the role) &#8211; the applicant will be informed beforehand, unless the disclosure is required by law.\u00a0 These checks\/reference requests are only done after a position has been offered to the successful candidate.<\/p>\r\n<p>Personal data about unsuccessful applicants are held for 12 months after the recruitment exercise is complete for that vacancy. \u00a0An applicant, can ask AHAG to remove their data before this time if they do not want them to be held.<\/p>\r\n<p>Once a successful applicant has taken up employment, a file relating to their employment is compiled.\u00a0 The information contained in this file is kept secure and is only used for purposes directly relevant to employment. \u00a0Once employment with AHAG has ended the file is retained in accordance with the requirements of AHAG\u2019s Data Retention Policy and then deleted.<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2><strong> 5. Website and social media &#8211; Cookies and links to other sites<\/strong><\/h2>\r\n<p>Our website and social media may include links to other websites.\u00a0 We are not responsible for the privacy policy and practices of these sites.<\/p>\r\n<p>A \u2018cookie\u2019 consists of a small piece of information downloaded onto a computer and stored in the user&#8217;s web browser. \u00a0These data are sent back to the website every time the user accesses the website. \u00a0Users may disable cookies or delete any individual cookie through controls in their web browser. \u00a0In these circumstances the site may not work as intended.<\/p>\r\n<p>AHAG\u2019S website uses cookies in order to provide a good experience for users of the site.<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2><strong> 6. Legal basis for processing personal data<\/strong><\/h2>\r\n<p><strong>\u00a0<\/strong>AHAG is required to have a lawful basis to collect and use personal data under data protection law. \u00a0The law allows for 6 ways to process personal data (and additional ways for sensitive personal data). \u00a0Four of these are relevant to the types of processing that AHAG carries out. \u00a0This includes data that are processed on the basis of:<\/p>\r\n<ul>\r\n<li>A person\u2019s consent (for example, to send direct marketing by email)<\/li>\r\n<li>Processing that is necessary for compliance with a legal obligation (for example to process a Gift Aid declaration)<\/li>\r\n<li>Legitimate interests (please see below for more information).<\/li>\r\n<\/ul>\r\n<p>Personal data may be legally collected and used if it is necessary for a legitimate interest of the organisation using the data, if their use is fair and does not adversely impact the rights of the individual concerned.<\/p>\r\n<p>When using personal data, AHAG will always consider if it is fair and balanced to do so and if it is within reasonable expectations. \u00a0Individual rights will be balanced against AHAG\u2019s legitimate interests to ensure that personal data are used in ways that are not unduly intrusive or unfair. \u00a0AHAG\u2019s legitimate interests include:<\/p>\r\n<ul>\r\n<li>Charity Governance: including delivery of charitable purposes, statutory and financial reporting and other regulatory compliance purposes<\/li>\r\n<li>Administration and operational management: including responding to solicited enquires, providing information, the administration of volunteers and employment, and recruitment requirements<\/li>\r\n<li>Fundraising and marketing: including administering fundraising campaigns and donations, sending thank you letters and maintaining communication suppressions and preferences.<\/li>\r\n<\/ul>\r\n<h3>\u00a0<\/h3>\r\n<h2><strong> 7. Disclosure of personal data<\/strong><\/h2>\r\n<p>Personal data are only passed to third parties in the following circumstances:<\/p>\r\n<ul>\r\n<li>Explicit consent has been given to pass data to a named third-party<\/li>\r\n<li>It is necessary to protect the vital interests of an individual<\/li>\r\n<li>A third-party is being used for the purposes of processing data on AHAG\u2019s behalf and a data processing agreement is in place with that third-party that fulfils AHAG\u2019s legal obligations in relation to the use of third-party data processors<\/li>\r\n<li>AHAG is required by law to share the personal data.<\/li>\r\n<\/ul>\r\n<p>In addition, AHAG will only pass personal data to third-parties outside of the EU where appropriate safeguards are in place as defined by Article 46 of the General Data Protection Regulation. \u00a0AHAG will <strong>never<\/strong> share or sell personal data to a third-party organisation for marketing, fundraising, or campaigning purposes.<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2><strong> 8. Security of personal data<\/strong><\/h2>\r\n<p>AHAG uses appropriate technical and organisational measures and precautions to protect personal data and to prevent the loss, misuse or alteration of personal data.\u00a0 Unfortunately, the transmission of information via the internet is not completely secure. \u00a0Although AHAG will do its best to protect personal data, it cannot guarantee the security of data transmitted to the AHAG website. \u00a0Once personal data has been received, AHAG will use strict procedures and security features to try to prevent unauthorised access.<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2><strong> 9. Retention of personal data<\/strong><\/h2>\r\n<p>Whatever an individual\u2019s relationship with AHAG, their personal data will only be stored for a specified amount of time, as set out in the Data Retention Policy. \u00a0The length of time that data are kept may depend on the reasons for which they are being processed and on the law, or regulations that the data fall under, such as financial regulations or any contractual obligations AHAG might have e.g. with grant funders.<\/p>\r\n<p>Subject to the above, AHAG will typically store personal data relating to donors for 7 years after their last donation or interaction, and data relating to people to whom the charity provides advice and support services for 7 years after completion of those services. \u00a0Personal data about unsuccessful applicants are held for 12 months after the recruitment exercise is complete for that vacancy.<\/p>\r\n<p>Once the retention period has expired, the data are disposed of confidentially or permanently deleted.\u00a0 If an individual requests no further contact, AHAG will keep some basic data on a suppression list to avoid sending unwanted materials in the future.<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2><strong> 10. Rights an individual has over their data<\/strong><\/h2>\r\n<p>A full summary of an individual\u2019s legal rights over their personal data can be found on the Information Commissioner\u2019s website: <a href=\"https:\/\/ico.org.uk\/\">https:\/\/ico.org.uk\/<\/a>.\u00a0 These rights include the following:<\/p>\r\n<ul>\r\n<li>\r\n<p><strong>Right of access<\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>An individual has the right know what data are held about them and to ask, in writing, to see their records.\u00a0 AHAG will supply any data requested as soon as possible, but this may take up to 30 days. \u00a0There will be no charge for this other than in exceptional circumstances. \u00a0Proof of identity will be required, as the person dealing with the request may not be a staff member met before. \u00a0AHAG needs to be sure that personal data are only released to the correct individual.\u00a0 \u00a0This is called a data subject access, and can be done by:<\/p>\r\n<ul>\r\n<li>Emailing <u><a href=\"mailto:info@ahag.org.uk\">info@ahag.org.uk<\/a><\/u><\/li>\r\n<li>Writing to the Data Protection Manager, c\/o Aylesbury Homeless Action Group, 2, Rickfords Hill, Aylesbury, HP20 2RX<\/li>\r\n<\/ul>\r\n<ul>\r\n<li>\r\n<p><strong>Right to be informed <\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>An individual has the right to be informed how their personal data are used. \u00a0This policy, as well as any additional information or notice that is provided either at the time the personal details were provided, or otherwise, is intended to provide this information.<\/p>\r\n<ul>\r\n<li>\r\n<p><strong>Right to withdraw consent <\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Where personal data based on consent are processed (for example, to send marketing texts or emails), consent can be withdrawn at any time. \u00a0To do this, or to discuss this right further, AHAG should be contacted using the details in the \u2018Contact us\u2019 section below.<\/p>\r\n<ul>\r\n<li>\r\n<p><strong>Right to object <\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>An individual has a right to object to AHAG processing data where it is relying on the data being within AHAG\u2019s legitimate interests to do so. \u00a0To do this, or to discuss this right further, AHAG should be contacted using the details in the \u2018Contact us\u2019 section below.<\/p>\r\n<ul>\r\n<li>\r\n<p><strong>Right to restrict processing <\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>In certain situations, an individual has the right to ask for processing of their personal data to be restricted because there is some disagreement about their accuracy or legitimate usage.<\/p>\r\n<ul>\r\n<li>\r\n<p><strong>Right of erasure <\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>In some cases, an individual has the right to be forgotten (i.e. to have their personal data deleted from the AHAG database). \u00a0Where a request is made to stop sending marketing materials, some limited data has to be kept by AHAG to ensure that there is no future contact.<\/p>\r\n<ul>\r\n<li>\r\n<p><strong>Right of rectification <\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>If an individual believes their AHAG records are inaccurate, they have the right to ask for those records to be updated. \u00a0To update records, AHAG should be contacted using the details in the \u2018Contact us\u2019 section below.<\/p>\r\n<ul>\r\n<li>\r\n<p><strong>Right to data portability<\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Where AHAG is processing personal data because consent to do so has been given, an individual has the right to request that the data are transferred from one service provider to another.<\/p>\r\n<p>&nbsp;<\/p>\r\n<h2><strong> 11. Contact Us<\/strong><\/h2>\r\n<p>To access the rights listed above, or any other legal rights an individual has over their data under current legislation, they should contact AHAG. \u00a0\u00a0However, it is important note that relying on some of these rights, such as the right to delete personal data, will make it impossible for AHAG to continue to deliver some services. \u00a0However, where possible AHAG will always try to allow the maximum access to an individual\u2019s rights while continuing to deliver as many services to them as possible.<\/p>\r\n<p>If an individual has any questions about this policy or want to exercise any of the rights set out in section 10 above, they can contact AHAG in the following ways:<\/p>\r\n<ul>\r\n<li><u><a href=\"mailto:info@ahag.org.uk\">info@ahag.org.uk<\/a><\/u><\/li>\r\n<li>01296 435026<\/li>\r\n<\/ul>\r\n","protected":false},"excerpt":{"rendered":"<p>1. Aims of the policy The primary aims of this policy are: To explain what personal data are collected by AHAG and<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.ahag.org.uk\/index.php\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ahag.org.uk\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.ahag.org.uk\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.ahag.org.uk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ahag.org.uk\/index.php\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":6,"href":"https:\/\/www.ahag.org.uk\/index.php\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":2392,"href":"https:\/\/www.ahag.org.uk\/index.php\/wp-json\/wp\/v2\/pages\/3\/revisions\/2392"}],"wp:attachment":[{"href":"https:\/\/www.ahag.org.uk\/index.php\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}