PRIVACY POLICY
We always recommend that our volunteers, donors and other interested parties read this privacy notice in full. It explains who we are, how and why we collect personal data from you, how and why it will be processed by us and our commitment to protecting your data.
In case you do not have time to read it in full we have summarised the key points for you in our ‘Speed Read’ section below.
In case you do not have time to read it in full we have summarised the key points for you in our ‘Speed Read’ section below.
Speed Read
Full Privacy Notice
This notice explains how we collect data, how we use and store information and what it means for you. It also explains your rights in relation to the personal data we hold about you. We are committed to protecting the privacy and security of your personal information. We welcome any feedback on our actions.
Who We Are
Myelopathy.org is a charitable incorporated organisation dedicated to Degenerative Cervical Myelopathy (DCM) by providing support, awareness and research for and into the condition.
We are a charity registered in England and Wales (number 1178673). We are not registered with the Information Commissioner as we are exempt as a not-for-profit organisation.
For the purposes of this Policy, “us”, “we” and “our” refer to Myelopathy.org.
We are a charity registered in England and Wales (number 1178673). We are not registered with the Information Commissioner as we are exempt as a not-for-profit organisation.
For the purposes of this Policy, “us”, “we” and “our” refer to Myelopathy.org.
What Information Do We Collect
We collect personal information each time you deal with us. For example, when you email us with a query, buy one of our products through social media, sign up for a newsletter, fill in forms on our website, apply to become a volunteer or for a job with us, financially support us or otherwise provide your personal details, we collect the information you provide, such as your name, contact details and IP address. Occasionally we collect information given to us by a third party (for example, details of referees) or that is publicly available (for example, details in relation to potential corporate supporters).
What Do We Do with
We may use the personal data we collect to:
Basis of Processing Your Data
Consent: We will process your personal data where you have given us consent for the specific purposes which we have told you about. For example: Sending out our newsletters; Direct marketing and raising funds for Myelopathy.org through telephone, email or SMS; Use of a case study if you are a service user (including photographic images).
Legitimate Interest: We will rely on our legitimate interests to ensure the smooth administration, running and development of Myelopathy.org’s network services to collect and process the personal data you supply us when your interests and fundamental rights do not override these legitimate interests. For example: When you purchase a product; Email us with a query; Volunteer; Apply to become a paid worker; Act as a referee; Make a gift; Are a potential or actual corporate supporter.
Contract: For the purposes of applying for a contract for a freelance or employed role with Myelopathy.org, or entering into any other contract with Myelopathy.org, we will process personal data to undertake the first steps needed before a contract can be entered into. For example, to run a recruitment process, we need to process your personal data to consider you in that process. There is a separate privacy policy for employees, paid workers and contractors. We may also process personal data to fulfil our contractual obligations with those who provide services to us.
Legal Obligation: We are required by law to keep various business, HR and charity records and certain records for health and safety purposes. We will process personal data when necessary to comply with our legal obligations. For example, to comply with HMRC regulations in relation to processing gift aid.
You are free to request access, update, change your preferences, unsubscribe, withdraw your consent, object to us processing your data at any time by contacting us.
Legitimate Interest: We will rely on our legitimate interests to ensure the smooth administration, running and development of Myelopathy.org’s network services to collect and process the personal data you supply us when your interests and fundamental rights do not override these legitimate interests. For example: When you purchase a product; Email us with a query; Volunteer; Apply to become a paid worker; Act as a referee; Make a gift; Are a potential or actual corporate supporter.
Contract: For the purposes of applying for a contract for a freelance or employed role with Myelopathy.org, or entering into any other contract with Myelopathy.org, we will process personal data to undertake the first steps needed before a contract can be entered into. For example, to run a recruitment process, we need to process your personal data to consider you in that process. There is a separate privacy policy for employees, paid workers and contractors. We may also process personal data to fulfil our contractual obligations with those who provide services to us.
Legal Obligation: We are required by law to keep various business, HR and charity records and certain records for health and safety purposes. We will process personal data when necessary to comply with our legal obligations. For example, to comply with HMRC regulations in relation to processing gift aid.
You are free to request access, update, change your preferences, unsubscribe, withdraw your consent, object to us processing your data at any time by contacting us.
Volunteering or Applying for a Paid Role with Us
When you provide us with personal data when you apply for a paid role with us, such as the information on your CV, we will process, store and disclose the personal data we collect to: Support the recruitment process; Enable you to submit your CV and application; Answer any questions you may have; Use third parties to provide services such as references, qualifications and verification of information you have provided; Provide anonymised data to monitor compliance with our equal opportunities policy.
Where you provide personal data to volunteer with us, we will store, process and disclose personal the personal information we collect to: Support the volunteer recruitment process; Answer any questions or feedback you may have; Use third parties to provide services such as references; Deliver the volunteering opportunity; Provide information and the administration of the volunteering opportunity; Monitor the quality of the volunteering opportunity.
Where you provide personal data to volunteer with us, we will store, process and disclose personal the personal information we collect to: Support the volunteer recruitment process; Answer any questions or feedback you may have; Use third parties to provide services such as references; Deliver the volunteering opportunity; Provide information and the administration of the volunteering opportunity; Monitor the quality of the volunteering opportunity.
Ordering a Product through Our Facebook Page or Store
When you provide us with personal data when you order one of our products online, such as your name, email address address and telephone number, we will process, store and share the personal data we collect to: Process the order; Deal with any queries; Arrange collection or delivery of the order; Monitor the quality of the service.
How and Where We Store Your Information
We will keep your personal information only for as long as we consider it necessary to carry out the purposes we collected it for, to meet any legal obligations, accounting and tax and contractual considerations as well as providing our services and running the charity. Financial information will be kept up to a period of six years, and supporter information for up to a period of three years to deal with any queries or complaints.
Any third parties that we engage will keep your data stored on their systems for as long as is necessary to provide the relevant services to you or us. If we end our relationship with any third-party providers, we will make sure that they securely delete or return your personal data to us.
If you have any questions about how long we keep your data, please contact us.
We may retain personal data about you for statistical purposes. In these instances, it will be anonymised meaning that you will not be identifiable from the data.
Any third parties that we engage will keep your data stored on their systems for as long as is necessary to provide the relevant services to you or us. If we end our relationship with any third-party providers, we will make sure that they securely delete or return your personal data to us.
If you have any questions about how long we keep your data, please contact us.
We may retain personal data about you for statistical purposes. In these instances, it will be anonymised meaning that you will not be identifiable from the data.
Security
We have in place appropriate controls to protect any personal data you provide.
We ensure that access to personal data is restricted only to those volunteers or workers whose roles require such access and that suitable training is provided for these volunteers or workers.
We may at times use external companies to process personal data on our behalf; ensuring we use those who have adequate privacy policies in place and are available on their websites to see. When we use these companies, we remain responsible for the storing and processing of the personal data you give us.
However, we need to remind you that despite our efforts, the internet cannot be guaranteed to be 100% secure and that you submit data at your own risk.
We ensure that access to personal data is restricted only to those volunteers or workers whose roles require such access and that suitable training is provided for these volunteers or workers.
We may at times use external companies to process personal data on our behalf; ensuring we use those who have adequate privacy policies in place and are available on their websites to see. When we use these companies, we remain responsible for the storing and processing of the personal data you give us.
However, we need to remind you that despite our efforts, the internet cannot be guaranteed to be 100% secure and that you submit data at your own risk.
Where We Store Your Personal Information
We use a cloud-based system — Google Drive to store and process data. Our newsletter is sent out using Mailchimp. Therefore, data may be processed outside of the UK and the European Economic Area (EEA). These companies’ privacy policies can be found at Google Privacy Policy and Intuit Global Privacy Statement, which state that they hold and process personal data in compliance with UK data protection laws. We take reasonable steps to ensure your data is stored and processed securely, following these regulations. By submitting your personal data, you agree to this transfer, storing and processing of your information.
When we share your information we do not share or swap your information with any other charities or third party marketing organisations.
When we share your information we do not share or swap your information with any other charities or third party marketing organisations.
Legal Duty
We may need to pass on information if required by law or by a regulatory body. For example, information relating to Gift Aid requested by HMRC.
Third Parties
We may employ or contract third-party service providers who assist us with administering the provision of our services. For example:
We may provide third parties (such as funders) with general information about our service users and donors, but this information is both aggregate and anonymous.
Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site. More information about how we use cookies and how you can manage them can be found in our Cookies Policy. By using our website, we assume that you consent to our use of cookies.
Your Information Rights
You have the right to be informed about how we process your personal data, the right to access your data, the right to have your personal data held by us rectified if it is inaccurate or incomplete.
You may have the right to ask us to erase your personal data, to ask us to restrict our processing or to object to our processing of your personal data. You can make these requests at any time by emailing us.
For more information about your rights under data protection legislation or if you are not satisfied with our response to any data protection issues you raise with us, you can visit the website of the UK’s Information Commissioner’s Office and make a complaint to them.
Myelopathy.org is the Data Controller for Myelopathy.org and the trustees have responsibility for data protection within the organisation. You can contact us by:
Post: C/O Lakin Rose, Pioneer House, Vision Park, Cambridge, CB24 9NL
Email: info@myelopathy.org
You may have the right to ask us to erase your personal data, to ask us to restrict our processing or to object to our processing of your personal data. You can make these requests at any time by emailing us.
For more information about your rights under data protection legislation or if you are not satisfied with our response to any data protection issues you raise with us, you can visit the website of the UK’s Information Commissioner’s Office and make a complaint to them.
Myelopathy.org is the Data Controller for Myelopathy.org and the trustees have responsibility for data protection within the organisation. You can contact us by:
Post: C/O Lakin Rose, Pioneer House, Vision Park, Cambridge, CB24 9NL
Email: info@myelopathy.org
Your Choices and Telling Us When Things Change
You can change your preferences on what you receive from us or how we contact you, at any time. You can do so by emailing us.
Updating Your Details Page
So that we can provide the best service possible to you, please advise us of any changes in your details. You can update us by emailing us.