Privacy Policy.Our privacy notice sets out how Cedarwood Trust uses and protects any personal data that we collect from you.
|
Cedarwood Trust is a company registered in England, Registered Company No. 4855747 and a Registered Charity No. 1100530.
Our registered office is: The Cedarwood Trust, The Avenue, Avon Ave, North Shields, NE29 7QT.
The purpose of our privacy notice
Personal data is information about a living, identifiable individual and includes any information that can be attributed to you personally, including your name and contact information. There are more sensitive types of personal data which are known as ‘special categories’ which includes information about your health. You can find out more about categories of personal data on the Information Commissioner’s Office website.
Cedarwood Trust is committed to ensuring that your privacy is protected.
Our specialist services include employment training and education, health and well-being, young people and families services.
You can also read How we use your data below in appendix 1.
Privacy notice review period
This notice was last reviewed December 2022 and will next be reviewed December 2024.
Subject access request statement
In compliance with the General Data Protection Regulation (GDPR) Cedarwood Trust are obliged, upon request, to disclose any information we hold about you.
This includes people who have accessed our services or support, staff, volunteers, students, placements apprentices, temporary staff and any other person working on behalf of Cedarwood Trust.
If you would like to view the records we hold on you, please contact us at caldicott.guardian@cedarwoodtrust.com or call us on 0330 094 8454
We also have a Staff Privacy Notice and Volunteer Privacy Notice, which you can access by reading appendix 2 below:
How your data is used when you use our website
We only collect personal data through our web forms and should you choose to share your data with us, you can be sure that we will only use it for the purpose which is specified through the form.
What we collect
When someone visits our website, we collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. We collect this information in a way which does not identify anyone. We do not make any attempt to find out the identities of those visiting. We will not associate any data gathered from this site with any personally identifying information from any source.
We only collect personal data through our web forms and should you choose to share your data with us, you can be sure that we will only use it for the purpose which is specified through the form.
Lawful basis
The lawful bases for processing are set out in General Data Protection Regulation (GDPR).
We mainly process your data using consent as the lawful basis for processing. This means you have given clear consent for us to process your personal data for a specific purpose.
You can find out more about the lawful bases on the Information Commissioner’s Office website.
What we do with the information we gather
Your data is emailed to a secure email address and is only accessible by Cedarwood Trust staff, who require access to process your data on the basis of the consent you have given.
How we keep your information safe
The website is protected with standard security measures such as a firewall (this is part of a computer system or network which is designed to block unauthorised access).
We use a third party service to help maintain the security and performance of the Cedarwood Trust website. To deliver this service, it processes the IP addresses of visitors to the website.
The IP address (Internet Protocol address) is a numerical label that computers, tablets, smartphones, and other computing devices, used to identify themselves and communicate with other devices.
We also use Hypertext Transfer Protocol Secure (HTTPS) which provides a reasonable level of assurance of protection against computer hackers.
How long do we keep your data for
The data you send us through our web forms and emails are retained in line with our Records and Retention Policy.
Your data rights
Under the Data Protection Act 2018 and GDPR, you have the following rights:
Please note that some of these rights only apply in certain circumstances, and we may not be able to fulfil every request. Where a request is declined, we will always explain our decision in full.
To request access to your data or to contact us about any of the rights we have listed, you can at caldicott.guardian@cedarwoodtrust.com
Withdrawing your consent
You can withdraw consent for us to hold the data that we have collected from you by sending a signed letter stating your name and the information you wish us to erase to:
Consent Withdrawal, Caldicott Guardian, The Cedarwood Trust, The Avenue, Avon Ave, North Shields, NE29 7QT.
You can email us at caldicott.guardian@cedarwoodtrust.com with your full name in block capitals in the subject line, or complete our online contact form.
How to complain
If you are unhappy about an issue relating to your data you can complain to us through the service you attend or if you would feel more comfortable, you can contact Cedarwood Trust Caldicott Guardian at:
Caldicot Guardian, The Cedarwood Trust, The Avenue, Avon Ave, North Shields, NE29 7QT.
Appendix 1. Volunteer Privacy Notice V01
Introduction
Cedarwood Trust processes the personal data of volunteers to offer volunteering opportunities.
As an organisation, Cedarwood Trust must be clear about what it does with personal data; and this must be presented in an honest, transparent, and easy to read way.
Under the Data Protection Act 2018 and UK GDPR, individuals have rights which must be upheld when personal data is processed. This includes a right to know why we need the information, what we are doing with it and who we are sharing it with.
It is good practice to ensure that this information is written down in a document called a Privacy Notice. This document is Cedarwood Trust’s volunteer privacy notice.
Guidance to the privacy notice
This privacy notice should be available and accessible to all volunteers and those applying to volunteer for us. Copies should be freely available and included as part of the recruitment and induction process.
You may use this notice to provide information to potential and existing volunteers who are asking about their data rights and if you have any further questions, please contact your Data Protection Officer at dpo@cedarwoodtrust.com
Relevant Documentation
• Data Protection Act 2018
• UK GDPR
Websites
http://www.ico.org.uk
Our registered office is: The Cedarwood Trust, The Avenue, Avon Ave, North Shields, NE29 7QT.
The purpose of our privacy notice
Personal data is information about a living, identifiable individual and includes any information that can be attributed to you personally, including your name and contact information. There are more sensitive types of personal data which are known as ‘special categories’ which includes information about your health. You can find out more about categories of personal data on the Information Commissioner’s Office website.
Cedarwood Trust is committed to ensuring that your privacy is protected.
Our specialist services include employment training and education, health and well-being, young people and families services.
You can also read How we use your data below in appendix 1.
Privacy notice review period
This notice was last reviewed December 2022 and will next be reviewed December 2024.
Subject access request statement
In compliance with the General Data Protection Regulation (GDPR) Cedarwood Trust are obliged, upon request, to disclose any information we hold about you.
This includes people who have accessed our services or support, staff, volunteers, students, placements apprentices, temporary staff and any other person working on behalf of Cedarwood Trust.
If you would like to view the records we hold on you, please contact us at caldicott.guardian@cedarwoodtrust.com or call us on 0330 094 8454
We also have a Staff Privacy Notice and Volunteer Privacy Notice, which you can access by reading appendix 2 below:
- Staff Privacy Notice
- Volunteer Privacy Notice
How your data is used when you use our website
We only collect personal data through our web forms and should you choose to share your data with us, you can be sure that we will only use it for the purpose which is specified through the form.
What we collect
When someone visits our website, we collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. We collect this information in a way which does not identify anyone. We do not make any attempt to find out the identities of those visiting. We will not associate any data gathered from this site with any personally identifying information from any source.
We only collect personal data through our web forms and should you choose to share your data with us, you can be sure that we will only use it for the purpose which is specified through the form.
Lawful basis
The lawful bases for processing are set out in General Data Protection Regulation (GDPR).
We mainly process your data using consent as the lawful basis for processing. This means you have given clear consent for us to process your personal data for a specific purpose.
You can find out more about the lawful bases on the Information Commissioner’s Office website.
What we do with the information we gather
Your data is emailed to a secure email address and is only accessible by Cedarwood Trust staff, who require access to process your data on the basis of the consent you have given.
How we keep your information safe
The website is protected with standard security measures such as a firewall (this is part of a computer system or network which is designed to block unauthorised access).
We use a third party service to help maintain the security and performance of the Cedarwood Trust website. To deliver this service, it processes the IP addresses of visitors to the website.
The IP address (Internet Protocol address) is a numerical label that computers, tablets, smartphones, and other computing devices, used to identify themselves and communicate with other devices.
We also use Hypertext Transfer Protocol Secure (HTTPS) which provides a reasonable level of assurance of protection against computer hackers.
How long do we keep your data for
The data you send us through our web forms and emails are retained in line with our Records and Retention Policy.
Your data rights
Under the Data Protection Act 2018 and GDPR, you have the following rights:
- to be informed about the collection and use of your personal data.
- to access your personal data (known as Subject Access Request)
- to have inaccurate personal data rectified; or completed if it is incomplete.
- to have personal data erased (known as the right to be forgotten)
- to request the restriction or suppression of your personal data
- to data portability, which allows individuals to obtain and reuse their personal data for their own purposes across different services.
- to object to the processing of your personal data in certain circumstances.
- rights in relation to automated decision-making and profiling.
Please note that some of these rights only apply in certain circumstances, and we may not be able to fulfil every request. Where a request is declined, we will always explain our decision in full.
To request access to your data or to contact us about any of the rights we have listed, you can at caldicott.guardian@cedarwoodtrust.com
Withdrawing your consent
You can withdraw consent for us to hold the data that we have collected from you by sending a signed letter stating your name and the information you wish us to erase to:
Consent Withdrawal, Caldicott Guardian, The Cedarwood Trust, The Avenue, Avon Ave, North Shields, NE29 7QT.
You can email us at caldicott.guardian@cedarwoodtrust.com with your full name in block capitals in the subject line, or complete our online contact form.
How to complain
If you are unhappy about an issue relating to your data you can complain to us through the service you attend or if you would feel more comfortable, you can contact Cedarwood Trust Caldicott Guardian at:
Caldicot Guardian, The Cedarwood Trust, The Avenue, Avon Ave, North Shields, NE29 7QT.
Appendix 1. Volunteer Privacy Notice V01
Introduction
Cedarwood Trust processes the personal data of volunteers to offer volunteering opportunities.
As an organisation, Cedarwood Trust must be clear about what it does with personal data; and this must be presented in an honest, transparent, and easy to read way.
Under the Data Protection Act 2018 and UK GDPR, individuals have rights which must be upheld when personal data is processed. This includes a right to know why we need the information, what we are doing with it and who we are sharing it with.
It is good practice to ensure that this information is written down in a document called a Privacy Notice. This document is Cedarwood Trust’s volunteer privacy notice.
Guidance to the privacy notice
This privacy notice should be available and accessible to all volunteers and those applying to volunteer for us. Copies should be freely available and included as part of the recruitment and induction process.
You may use this notice to provide information to potential and existing volunteers who are asking about their data rights and if you have any further questions, please contact your Data Protection Officer at dpo@cedarwoodtrust.com
Relevant Documentation
• Data Protection Act 2018
• UK GDPR
Websites
http://www.ico.org.uk