Privacy Notice
This Privacy Notice sets out how Shine Youth uses and protects any personal data which you give us and which we collect and store through visiting this website.
Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). Should you provide certain information by which you can be identified when using any of our services, then you can be assured that it will only be used in accordance with this privacy statement.
If you would like further clarification of anything in this Privacy Notice, please contact our Data Administration Officer who will be happy to help. You can do so at the Shine Youth registered office or by email: admin@shineyouth.org.uk or phone: 07843 163 054.
The separate Privacy Notice regarding our Mentoring and MADE Course students, and our Staff and Volunteer Privacy Notice can also be requested from our Data Administration Officer using the contact details above.
OUR COMMITMENT TO YOU
Shine Youth is highly committed to processing, storing and handling all data with respect for the privacy of our supporters and partners and to ensuring that the personal information which they entrust to us is processed lawfully and safely. Our privacy documents, processes and systems comply fully with the UK Data Protection Act 2018 to ensure individuals’ rights to privacy and to give them control over the personal information that Shine Youth holds about them. Shine Youth complies fully with the key principles of the UK Data Protection Act 2018 to ensure that:
Individuals (“data subjects”) retain rights over their data;
Data is collected lawfully, fairly and transparently and used only in ways that the data subject would expect;
Data is collected and processed only for the legitimate purposes that Shine Youth has explicitly specified to the “data subject.”
Data held by Shine Youth will be as accurate and up-to-date as is reasonably possible;
Data is only kept for as long as is necessary for the stated purpose(s);
Data integrity and security is paramount;
Data governance is actively managed at all levels of the organisation, to minimise risks to both the individual and the organisation.
THE LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA
The data we process about supporters and visitors to the Shine Youth website is done so under the lawful bass of ‘consent’ and ‘legitimate interest.’ The personal data of supporters who provide a donation or register themselves to receive our communications is collected, processed and retained with the explicit consent of the data subject and in accordance with Shine Youth’s legitimate interest to process donations and claim Gift Aid, and provide information on the ongoing work, events and fundraising to maintain our working relationship with partners.
WHAT INFORMATION DO WE COLLECT?
In line with the Data Minimsation principle, Shine Youth will ensure that any personal data collected is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
When an individual or business/church supporter signs up (whether online, by phone or in writing) to receive further information from Shine Youth, our News and Events or to make a donation, Shine Youth may collect personal data about them which could include:
Their name and address
Their contact information (email address, landline and mobile telephone number)
Shine Youth’s contact history with them (when/how/why we have had contact)
Their financial information (if they give a one-off donation or regular donation)
Any events that they may have attended as a volunteer or supporter of Shine Youth.
Financial Data
All donations made on our website are processed through our Localgiving pages. The Localgiving Privacy Policy states:
4.1 When you make a one-time donation we collect: your first and last name and your email address.
4.2 When you make a card payment for your one-time donation your credit or debit card details (including card type, card number and expiry date) are only collected by our third party payment provider (e.g. PayPal). We always ensure any payment providers we work with have appropriate data protection policies. We do not store your credit or debit card details.
4.3 We collect the following additional information when you set up your monthly donation: your bank account name, your bank sort-code and your bank account number.
4.4 If you choose to claim Gift Aid on your donation we will also collect: your declaration of tax status and your home address.
4.5 You may choose to remain anonymous when you make a donation and we will not disclose your name on any public section of the website, or to the charity or community group you donate to. You will still need to provide us with your personal details so that we can process your donation and, if applicable, your Gift Aid claim.
You can read the Localgiving Privacy Policy in full here https://localgiving.org/privacy-policy#WhatInformationDoWeCollect
HOW DO WE COLLECT DATA?
We collect information from you every time you contact Shine Youth, such as when you give a donation, request information or to receive our News and Events, or when you attend an event. We also collect personal information when you use our website such as your Internet Protocol (IP) address, downloads or forms completed (please see our Cookies Policy for more information).
WHY DO WE COLLECT YOUR DATA?
We collect personal data in order to inform those individuals who have requested to be kept up-to-date with our news and events, or have requested communication with us by completing one of our specific sign-up/communication forms, or have set up a financial donation to Shine Youth.
Shine Youth keeps a record of individuals’ communication preferences in order that they only receive information that is appropriate and at their discretion.
KEEPING YOUR DATA SECURE
Shine Youth ensures that all data is stored securely – not only on the IT systems we use but also in the way we store paper copies of any data that you have provided us with. All of our staff and volunteers are required to undertake training to ensure that data is kept secure at all times. Our IT systems and file storage have granular levels of permission, and we ensure that people only see personal data if required for the operational purposes outlined in this notice. Strong passwords must be used to access electronic resources and IT systems.
We store your data on our secure systems for as long as we reasonably need to for legal or business purposes, as set out in our data retention records. For example, if you give a donation to Shine Youth, we will keep records for 7 years for tax and accounting purposes.
Where we are not required to keep your data by law, you are able to request that your data is removed from our systems at any time and we are required to ensure that all data is then permanently removed from our systems.
All companies used by Shine Youth comply with the UK Data Protection Act 2018 and are responsible for their own collection, use and secure storage of data. Their Privacy Policies can be viewed here:
This website is built using Squarespace software and the Squarespace Privacy Policy can be read here https://www.squarespace.com/privacy
The website forms are linked to Mailchimp as our marketing automation platform. The Mailchimp Privacy Policy can be read here https://mailchimp.com/legal/privacy/
Donations are made through Localgiving and their Privacy Policy can be read here https://localgiving.org/privacy-policy#WhatInformationDoWeCollect
Google Analytics help us learn how users interact with the website so that we can improve its content and layout. The Google Privacy Policy states: ‘We work hard to protect you and Google from unauthorized access, alteration, disclosure, or destruction of information we hold, including:
We use encryption to keep your data private while in transit
We offer a range of security features, like Safe Browsing, Security Checkup, and 2 Step Verification to help you protect your account
We review our information collection, storage, and processing practices, including physical security measures, to prevent unauthorized access to our systems
We restrict access to personal information to Google employees, contractors, and agents who need that information in order to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.’
All Internet Protocol (IP) addresses are anonymised in our Google Analytics account to protect users’ privacy. Please see our Cookies Policy for more details and how you can opt-out.
You can also visit the Google Privacy Checkup to review and adjust your personal Google privacy settings.
Shine Youth does not share your data with any other organisations other than for the purposes for which you have given your consent, for example with a school / church if you are volunteering or providing a workplace visit for Shine Youth.
YOUR RIGHTS
You have the right to change, alter or delete the information that we store as follows:
Right to be informed. We seek to be clear and specific when we collect information from supporters.
Right to access. You are entitled to request a copy of any of your personal information that we have stored on our systems.
Right to rectification. If any of your personal information that stored on our systems is incorrect, you have the right to have this updated.
Right to be forgotten. If you request for all of your records to be deleted from our systems, we are lawfully required to carry out this request, other than if your data is required for lawful reasons (such as if you have given a donation which we have claimed Gift Aid on).
Supporters will be contacted every two years to renew their consent to keep their data and receive our communications. You can notify Shine Youth of your instruction to withdraw your consent / ‘opt out’ / ‘unsubscribe’ at any time within the 2-year period. You can click on ‘unsubscribe’ at the bottom of all our communications and/or notify us by contacting our Data Administration Officer at the Shine Youth registered office or by email: admin@shineyouth.org.uk or phone: 07857 311 285.
SUBJECT ACCESS REQUESTS (SARS) AND COMPLAINTS
Individuals have the right to ask to see a copy of the information that Shine Youth holds about them, to request correction of inaccuracies and to complain about Shine Youth’s data processing.
If you are at all concerned about the way that we have handled or are storing your personal data we encourage you to contact our Data Administration Officer at the Shine Youth registered office or by email: admin@shineyouth.org.uk or phone: 07843 163 054. We will endeavour to respond to your concerns within 72 hours.
You are also entitled to contact the ICO (Information Commissioners Office) directly if you are not happy with the way that we handle your concern. You can contact the ICO via their helpline (0303 123 1113) or ico.org.uk/concerns or The Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.
HOW DOES THIS WEBSITE USE COOKIES?
A cookie is a small piece of data that is stored on your computer’s hard drive by your web browser. Like the majority of websites, the Shine Youth website uses cookies to provide the best user experience. By clicking ‘OK’ on the pop-up Cookie Banner on the website and continuing to use the website, you are accepting use of the website’s cookies. Please read our Cookies Policy for details of the cookies which are used to gather statistics about the visitors to the website to help us develop its content.
CHANGES TO THIS PRIVACY NOTICE
This Privacy Notice was last updated in April 2020. We update our policies regularly and change the information in this document to reflect any changes in legislation or the way in which we store, retain or use your personal data.
to receive news and updates from Shine Youth