Protecting your privacy is important to us. At all times, we aim to respect and safeguard any personal information that you may share with us and to process this data fairly and lawfully in accordance with the Data Protection Act 2018 and the General Data Protection Regulations (GDPR) which came into force at the end of May 2018.
This Privacy Notice (Notice) explains what information we collect from you, how we use that information and our legal basis for doing so. It also covers whether and how that information may be shared and your rights and choices regarding the information you provide to us. By choosing to share your personal data with us, you are acknowledging that you have understood and agreed to the terms of this Notice.
If you have any questions regarding our management of your personal data please contact:
The Autism Centre of Excellence
18B Trumpington Road
Cambridge, CB2 8AH, UK
Or email: firstname.lastname@example.org
- How do we collect information?
We collect personal information from you when you submit a form, register with the website, make a donation to us or otherwise provide us with personal information.
- What information do we collect?
The types of information collected might include: names, date of birth, e-mail address, postal address, telephone number.
- How do we use this information?
We will use your personal information to provide you with the services, products or information you have requested, for administration purposes and to further our charitable aims, including for fundraising activities. We may need to share your information with our service providers, associated organisations and agents for these purposes.
We only use your personal information for direct marketing purposes if we are allowed to do this by law or if we have your consent.
Your data may also be available to our website provider to enable us and them to carry out analysis and research on demographics, interests and behaviour of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:
- Your data will be made available to our website provider
- The data that may be available to them include any of the data we collect as described above.
- Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.
- They will store your data for a maximum of 7 years.
- How do we protect personal information?
We take your privacy very seriously and we are committed to ensuring that your information is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used. To prevent unauthorised access of disclosure we have put in place suitable procedures to safeguard and secure the information we collect. The transmission of information via the internet (including e-mail) is never completely secure, however, although we do our best to protect it, we cannot guarantee the security of personal information transmitted via the internet.
- Will we disclose the information we collect to outside parties?
We will never pass on your information to third party organisations without your express permission other than for the purposes as described above.
We reserve the right to share your personal information if we are legally obliged to and to enable us to apply our terms and conditions and other agreements. This includes exchanging information with other organisations for fraud and credit risk reduction and for police investigations.
- Your consent
By providing us with your personal data, including sensitive personal data such as on your health, you consent to the collection and use of any information you provide in accordance with the above purposes and this privacy statement.
You also consent to our transferring your information to countries or jurisdictions which do not provide the same level of data protection as the UK, if necessary for the above purposes. If we do make such a transfer, we will, if appropriate, put a contract in place to ensure your information is protected.
- Withdrawing consent
You can change or withdraw your consent for us hold or to use your personal data for the purposes set out above by contacting us at the address above.
- Your rights to your personal information
Under certain circumstances, you have rights under data protection laws in relation to your personal information:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information in certain circumstances e.g. where it is no longer necessary for us to retain it.
- Object to processing of your personal information where we are relying on the legitimate interest basis (or those of a third party) or where we are processing your personal information for direct marketing purposes.
- Request restriction of processing of your personal information in certain circumstances.
- Request the portability of your personal information to you or to a third party. We will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format.
- Withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
If you are not happy with the way your information is being handled, or with the response received from us, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at Wycliffe House, Water Lane, Wilmslow, SK9 5AF. We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO so please contact us in the first instance.
If your personal details change, please help us to keep your information up to date by notifying us.
You can do this by:
– emailing email@example.com
– posting your changes to us at the address above
Please note that we may update this privacy notice from time to time and will publish any update on our websites. If we make significant changes to this notice, we will directly inform you of these changes where reasonably practicable (for example, if we have your email address, we will email you).