PRIVACY POLICY – LENDERHAND.ORG
www.lenderhand.org is a website operated by Lenderhand. Lenderhand is a registered charity, and our registration number is 1161794.
At Lenderhand we take the privacy of our beneficiaries, supporters and volunteers very seriously and every reasonable effort is taken to ensure information is kept secure and intact. Lenderhand is required to comply with the General Data Protection Regulation (GDPR) and undertakes to do so.
This Policy explains how we collect, store, share and use personal information and how individual personal preferences can be amended.
We may amend this policy from time to time to keep up to date with legal requirements and the way we operate. Any changes we make to our privacy policy in future will be posted on this page and, where appropriate, notified to you by email.
By using our website, you are accepting and consenting to the practices described in this policy.
Lenderhand will ensure that all personal data that it holds will be:
a) processed lawfully, fairly and in a transparent manner in relation to individuals;
b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes;
c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals; and
f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
HOW DO WE COLLECT YOUR PERSONAL INFORMATION?
When you engage with us as beneficiary, supporter and/or a volunteer we may ask for personal information when you: make a donation, submit a referral, register for an event, provide services, volunteer or subscribe to a newsletter. We will collect and process the personal information that you have provided.
This personal information may include:
• Basic personal details (your name, email address, postal address, telephone or mobile number and date of birth)
• Organisation Name
• Financial details (such as bank account details provided by you, and whether donations are gift aided)
• Credit or Debit card information
• IP address
• Details of your indicated interests, opinions and/or preferences
When you provide your personal details when filling out a referral form, making a donation, communicating with us, or signing up for a service on our website, we will collect this data to enable us to fulfil your request and answer your enquiries.
We may also collect and process information about your interactions with us, including details about our communication with you through email, SMS, post, on the phone or in person, details about the donations you make to us, events or activities that you register for/attend and any other support you provide to us.
HOW DO WE USE YOUR PERSONAL INFORMATION?
We may use your information in a number of ways, including:
• To provide you with information or services that you have requested from us or that we feel may be of interest to you
• To provide you with information about our work or our activities
• To process donations we may receive from you
• To contact you where you have been identified as a contact person for an organisation
• To contact you for marketing purposes by email, SMS, post or on the phone if you have agreed to be contacted in this manner
THE LEGAL BASIS FOR USING YOUR PERSONAL INFORMATION
We will obtain, hold and process all personal information in accordance with the GDPR for the following legal basis:
Consent: when you consent or opt-in to receive information and marketing by email or mobile phone text message
Contract: when we process your data as part of an agreement you have with us. For example, if you work with/for us.
Legal Obligation: where we are under a legal obligation to process your personal data for a particular purpose. For example, obligations we have to hold information on donations or for fraud detection
Legitimate Interest: our legitimate interest is engaging with the public to further our charitable aims. When processing your personal information based on legitimate interest, we will ensure that it is not too intrusive and balanced against the privacy rights and legal rights you have as an individual. Some examples of how we will use legitimate interest are:
• To communicate with you about marketing and fundraising materials unless you have told us that you would prefer not to hear from us in this way
• To contact you as a representative of an individual through the referral process
• To conduct research to better understand supporters of Lenderhand and to improve the services we offer
HOW WE WORK WITH THIRD PARTIES
We do not sell personal details to other charities or third parties. We may disclose your personal information to third parties if we are legally obliged to. This includes exchanging information with other companies and organisations for the purpose of fraud detection and protection or with local authorities or social services. We may also share your details when you register to take part in an event, and we have to provide your details to the event organisers.
If a local authority or other agency such as social services, a school, youth or community workers, ask us to work with you we will need to gain information about you from them and share information about you with them. We will, unless there is a legal or safeguarding reason, tell you who we are sharing your information with.
HOW LONG WILL WE KEEP YOUR PERSONAL INFORMATION
Your personal information will not be retained by Lenderhand for longer than necessary in relation to the purposes for which it was originally collected.
Depending on the nature of the service and our legal obligations Lenderhand will keep your information for a period of six years. We keep records of financial donors for at least seven years, to meet requirements for any Gift Aid audit.
We may be asked to keep records for longer periods or receive statutory/legal instructions not to delete records.
YOUR RIGHTS
Right to be Forgotten: You have a right to be forgotten, this means that you can ask us to delete your personal information before the end of the time limits mentioned above. There may be some circumstances where we may need to keep your details; such as to comply with a legal obligation
Right of Portability: You have a right to obtain your personal information from us
Right to Access: You have the right to confirm whether your personal information is being processed and access the data being held on you by Lenderhand. You can request to see this information and we will respond to this request one month from the date the request was made
Right to Rectify: You are entitled to have your personal information corrected if it is inaccurate or incomplete
Right to Withdraw Consent: You have the right the withdraw consent you may have previously given Lenderhand with regarding to processing your information. If you decide that you no longer wish to receive communications from Lenderhand, you can update your contact preferences by contacting us on the details provided below
Right to Object: You have the right to object to the processing of your personal information. If you object, please explain your objection and the reason for it (note that this does not give you a blanket right but provides you with the right to raise your objections)
Right to Restrict: You can request that we restrict the processing of your personal information, as an alternative to deleting it
If you would like to discuss or exercise any of these rights, please do get in touch with us:
Email: contact@lenderhand.org
Telephone: 0208 532 5066
Post: PO Box 366, Loughton, IG10 9EW
HOW WE PROTECT AND STORE YOUR PERSONAL INFORMATION
We take the care of your personal information very seriously and use a combination of organisational and technological security measures to ensure that your personal information is protected to the highest possible standards. These measures are continually monitored.
Information is stored by us on computers in the UK, we may also store information on paper files. All of our online forms are protected by encryption, we use secure servers and maintain firewalls and security technologies to minimise the risk of external attack to our servers.
Unfortunately, the transmission of information via the internet is never 100% secure, we therefore cannot guarantee the security of your information transmitted to our website. Any transmission is at your own risk.
HOW TO COMPLAIN ABOUT THE USE OF YOUR PERSONAL INFORMATION
If you wish to raise a complaint about how we have handled your personal information you can contact us on the following details, and we will investigate your concern.
Email: contact@lenderhand.org
Telephone: 0208 532 5066
Post: PO Box 366, Loughton, IG10 9EW
You also have the right to make a complaint direct to the UK’s data protection authority, the Information Commissioner’s Office (ICO). They can be contacted at: https://ico.org.uk/make-a-complaint/ or via phone on 0303 123 1113