This privacy statement sets out how Islington People’s Rights uses and protects any personal information that you share with us.
Islington People’s Rights is a registered charity number 1077688 and a company limited by guarantee number 1753440.
Islington People’s Rights is committed to protecting the privacy of personal information which the organisation collects, holds and administers. Personal
information is information relating to an identified or identifiable person.
Islington People’s Rights fully endorses and adheres to the following six Principles of Data Protection set out in the General Data Protection Regulations (GDPR). Any
personal information that you share with us will be:
- processed lawfully, fairly and in a transparent manner.
- collected for specified purposes which we explain to you.
- necessary to achieve our stated purpose. We will not collect personal
information that is not essential to our purpose. - kept as accurate as possible and, where necessary, kept up to date.
- kept for no longer than is necessary.
- processed in a manner that ensures appropriate security of the personal data,
including protection against unauthorised or unlawful processing and against
accidental loss, destruction or damage.
Responsibilities
The Board of Islington People’s Rights is responsible for adopting and reviewing this policy. The Chief Executive of Islington People’s Rights is responsible for the
implementation of this policy and for advising the Board on changes in data protection law.
Why we collect personal information
We collect personal information primarily for the following purpose:
Service provision
To deliver our welfare benefits and debt advice, casework and representation services,
both at our offices and outreach venues.
We also collect personal information for the purposes of:
Keeping in touch
To keep individuals at other organisations, supporters and others interested in our work and services in touch with what we are doing, and events we are organising. This can
ensure they are aware of other services and opportunities provided by Islington People’s Rights or partner organisations..
Employment and provider of voluntary opportunities
As an employer or potential employer and in order to offer volunteering opportunities.
Fundraising and donations
To raise money for Islington People’s Rights through our website or other fundraising initiatives
How we collect personal information
Service provision
For our services we will collect information from you in person, over the phone, by letter, by email, by fax, by SMS/text, or other applications. When we collect personal data in relation to our services we will explain why we are recording personal data, how it will be used and processed and ask you for consent.
Keeping you in touch
We collect information in a number of ways in order to keep you in touch with our services and those of partner organisations.
- Directly from you through provision of services
- Directly from you at events and meetings
- Indirectly, if you give via a fundraising platform, where you have given them permission to pass your details to us.
- Social media – where you share information with us.
- Via emails from partner organisations.
Employment and provider of voluntary opportunities
We collect personal information from our staff and volunteers and people who are applying for opportunities at Islington People’s Rights via our application processes, our internal human resources systems, and potentially other agencies.
Fundraising and donations
We collect information via our website and other fundraising platforms, where you have provided information and permission for this to be passed on to us.
What personal information we collect and how we use it
Service provision
For the provision of our service the personal information we collect can include, name, address, email address, phone numbers, health information, national insurance number, details about your personal circumstances and equality monitoring information. You will be asked to give your consent to us holding such personal information when you access our services. If we are recording personal data about a person under the age of 16 we will always request the consent of a parent or guardian. We will use the information you provide only for the purposes of the service(s) you are using and to monitor and evaluate the service(s).
Using some of our services, may involve us sharing your personal information with other organisations such as a referral partner organisation or funder. This will generally only be shared as aggregated statistical information, which ensures anonymity. We will always ask your consent before we do this. We will only share your personal information without consent if required by law or necessary in order to protect someone’s life.
Keeping you in touch
To keep you in touch with our work and other local services the personal information we collect can include name, address, email address and phone number. If you are a service user we will always ask your consent to contact you with information and you can withdraw your consent at any time by writing to us.
Employment and provider of voluntary opportunities
We will collect a range of information in order to process your application and assess your suitability for the opportunity that you are applying for. This will include name, address, email address, phone number, education details, employment background and details of your experience. If you become a member of staff or volunteer at Islington People’s Rights we will collect further personal information necessary for payroll and health and safety, including bank details, national insurance number and emergency contact information.
Fundraising and donations
In order to manage donations or enable you to fundraise for us we will need personal information including your name, address and email address. For donations we will also ask whether you are a UK tax payer. We will also ask for payment information and will always use a secure payment service to process your payment.
How long we will keep your data
Service provision
We will not keep personal information for longer than necessary and will destroy information securely according to our data retention policy, which stipulates 6 years.
Personal information provided to our services may be kept up to 7 years after your last date of contact with our service, since we only destroy information once a year.
However, you can withdraw your consent at any time by writing to us and we will remove your personal data from our records within one month of your request, as long as there are no legal requirements for us to keep it. If we have shared your personal data with other organisations, we will inform the relevant organisations to tell them that you have requested that we remove your personal data. We may then keep the minimum necessary information on file for monitoring purposes.
Keeping you in touch
We will keep your contact details on our distribution lists until you tell us that you want to be removed.
Employment and provider of voluntary opportunities
We will keep records of past employees for up to 7 years after the date they left our employment. We will keep records of unsuccessful applicants for either paid or voluntary roles for up to one year after the date of their application. We will keep details of volunteers for up to 2 years after the date they stop volunteering for the organisation.
Fundraising and donations
We retain information about Gift Aided donations as required by HMRC and for audit purposes. Information about supporters and donors is retained for 6 years after the last interaction, to help us communicate with you appropriately, to identify trends, and to fundraise more effectively. You may ask us to stop using your data at any time, and subject to our audit and HMRC responsibilities, you may ask us to delete your data. We may then keep the minimum necessary information on file for monitoring purposes.
Security of your data
Unless required to do so by law, we will never share your information with third parties unless we have your explicit permission to do so. This may be necessary for some of our services, but we will always explain this to you and seek your permission before sharing. Once we have referred you to another service your personal information will be stored by that organisation and you should refer to their Privacy Policy for information about how they will handle it.
We are committed to ensuring your personal information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. All data we collect electronically is securely backed up and hosted within the UK. We use a number of companies to help us provide our services. Any of your personal data that is processed via these companies is kept secure and remains the property of Islington People’s Rights. We will ensure that the companies that we use have up to date Privacy Policies and work to data protection legislation requirements.
Personal information given via our website
Any personal information that you provide via our website may also be available to our website provider to enable us and them to carry out analysis and research on demographics, interests and behaviour of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required.
In the case of this activity the follow will apply:
- Your data will be made available to our website provider.
- The data that may be available to them include any of the data we collect as described above for keeping you in touch and fundraising and donations purposes.
- Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.
- They will store your data for a maximum of 7 years.
- This processing does not affect your rights under this privacy policy
Our website does not use tracking (advertising) or analytics cookies. For further details, please see our Cookie Policy at www.ipradvice.org.uk/cookie-policy
Our website contains links to other websites of interest. You should be aware that we do not have any control over the content or security of external sites and therefore we cannot be held responsible for the protection and privacy of any information which you provide whilst visiting these sites. You should exercise caution when disclosing personal information on any website and should read the website’s privacy statement to understand how your personal data will be used.
Legal basis of processing
Data Protection regulations permit the processing of your data under 6 different legal bases.
When processing your data, we rely on the following bases, depending on the purpose of the processing, and how we use it to communicate with you:
- Consent basis – We rely on your consent when we record your personal information because you are using our services, either at our offices or at outreach venues. We also rely on consent basis when sending service users information about our services or other local services either by email, SMS/ text or post.
- Vital interest in safeguarding situations where the processing of personal data is necessary to protect someone’s life.
- Legitimate interest basis – We rely on legitimate interests when sending staff connected to other organisations information by email about our work or the work of other local organisations. When we do this, we will always provide you with easy ways to ask us not to send such information in the future. We also rely on legitimate interests when processing personal data in relation to volunteers or people applying for voluntary positions
- Contractual basis – We rely on a contractual basis if you work for us, or apply to do so, in order to process your application and provide support for employees/ monitor performance.
- Legal obligation basis – We utilise this basis for processing data for gift aid, in our role as employer, and where necessary for regulatory matters.
Your rights
Under the Data Protection Act 1998 and the General Data Protection Regulations you have certain rights about the personal information we hold about you:
- You have the right to receive copies of the information we hold on you.
- If you are a service user you have a right to withdraw your consent to us holding your personal information and ask for it to be removed.
- You have a right to object to processing that is likely to cause, or is causing you damage or distress.
- You have a right to prevent processing for direct marketing.
- You have a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed.
- You have a right to claim compensation for damages caused by a breach of data protection legislation.
Applications for any of the above can be made in writing by email to or by post to Gerard Omasta-Milsom, Chief Executive, Islington People’s Rights, 6-9 Manor Gardens, London N7 6LA
If you are unable to put your request in writing please phone Gerard Omasta-Milsom on 020 7561 3685 x210.
If you have any queries relating to how Islington People’s Rights has processed your personal information you can contact us at . We also have a Complaints Policy, which is available on request.
If you are unhappy with our response to your enquiry about how we have processed your personal information, you have the right to lodge a complaint with the Office of the Information Commissioner.
Information Commissioner’s Office
If you would like more information about the Data Protection Act and the General Data Protection Regulations you can contact the Information Commissioner’s Officer at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk/
Islington People’s Rights will review this policy annually. This policy was adopted on the 23rd May 2018 and will be reviewed next in May 2019. Islington People’s Rights may update this policy from time to time. You should check this page periodically to ensure that you are aware of any changes.