1.2 This site is owned by Worcestershire Animal Rescue Shelter whose Registered office is situated at Hawthorn Lane Newland Malvern Worcestershire WR13 5BD
1.3 Our Charity registration number is 514872. We are the ‘data controller’ of any personal information you provide to us.
1.4 We are registered as a Data controller with the Information Commissioners Office our registration number is: ZA709204
1.5 We have appointed a Data Protection Contact who is Mrs Claire Tregunna.
1.6 You can reach our Data Protection Contact at our postal address given above or via email at email@example.com if you have any queries regarding this policy.
1.7 As a Data Controller, we will take all the necessary steps to comply with the GDPR and Data Protection Act 2018 and relevant subordinate legislation when handling any personal data which you may provide to us. This includes ensuring that data is:
i) Fairly and lawfully processed
ii) Processed for limited purposes
iii) Adequate, relevant and not excessive
iv) Accurate and Secure;
v) Not kept longer than necessary
vi) Processed in accordance with your rights
vii) Not transferred to countries outside the UK without safeguards.
1.9 Use of Third Party Computer Applications for Video conferencing: Where we engage with you Online using a Video Conferencing Application the following will apply: i) All participants in Video conferencing will be given specific log in details.
iii) We as Data Controller will manage the Personal Data shared by participants and restrict or control access as necessary for the security of other participants and to prevent cyber security issues such as Phishing.
iv) Password access will be controlled by the Moderator and individual passwords issued where an increased risk is perceived such as large groups or public access.
1.10 Please Note: This Online Privacy information is a precis of our detailed written policies which are held at our business premises. Please contact our Data Manager if you require further information regarding our data protection compliance procedures.
2.1 We are committed to protecting your personal privacy and, in accordance with relevant data protection laws, we uphold strict security procedures for the collection, storage, use and disclosure of your personal information.
2.2 We have described below the personal information we may gather about you, the purposes we will hold it for and the limited categories of people to whom we may disclose it.
3. What information do we collect and how may we use it?
3.1 All visitors to the site:
(a) During your visit to our site, we will only collect personal information that you choose to provide, if for example you: contact us with an enquiry or request us to provide you with further information
(b) If you share other people’s data with us, for example if you order on behalf of another company, you will need to check that company consents to you providing their information to us.
(c) We may process data about you from various sources and use it to contact you if it is in our Legitimate Interests to do so and we have completed the necessary formalities required under the data protection legislation and guidelines. In all cases the purpose of our contacting you will be made clear and you will be provided with information with which to contact us if you would like us to stop processing your data.
4. We may use the information held about you in the following ways:
4.1 To administer any account you have with us
4.2 To perform our contractual obligations to you
4.3 To respond to your queries and requests
4.4 To communicate with you
4.5 To ensure that the content of our site is presented in the most effective manner
4.6 To provide you with the information, products and services requested from us
4.7 To provide you with helpful information about our products or services
4.8 To make improvements to the service we provide you
4.9 To communicate with you about lost or abandoned animals
4.9 We also reserve the right to disclose your personal information where we are required to do so by law, such as to assist in any disputes, claims or investigations relating to your account or contract with us, and to detect and prevent fraudulent transactions.
4.10 E-mail correspondence with us via our website and email addresses accessible through, or obtained from, this site may be recorded and/or monitored.
5. How do we store and protect your data?
5.1 We take the security of your information seriously and we will endeavour to ensure that the personal information you submit to us is kept private and secure.
5.2 Data we receive and process is held by us in secure electronic devices and separate back up devices and servers.
5.3 Personal Data may also be held in encrypted 3rd party ‘Cloud’ Servers.
5.4 Further encrypted back ups of data may be held securely in offsite locations which are also subject to physical security at their location.
5.5 We will not sell, rent or otherwise disclose the personal information you provide to us through the site to third parties (other than as listed below) unless we are required to do so by law.
6. Third parties who provide services on our behalf
6.1 We may share your personal information with certain third parties who provide services on our behalf.
6.2 Such 3rd Parties only have access to the personal information they need to perform those services.
6.3 Such 3rd parties are bound by contractual arrangements with Ourselves and are required to keep your personal information secure and confidential. They may only use it as permitted by us in accordance with our Privacy Policies.
6.4 If you have contracted with us we will share data only to the extent necessary for the performance of the contract, otherwise we will obtain specific consent from you before sharing your data.
6.5 The third parties who provide services on our behalf fall into the following categories:
i) Our partners providing logistics and external service support.
ii) Our business partners or advisors for the purposes of completing or investigating a transaction with you.
iii) Marketing agencies appointed to provide services to us
iv) The service providers operating this site on our behalf
v) Accountants, auditors, law firms, payment processors, information technology support providers
vi) Advertising services, analytics services, content providers
7. How long do we store your data?
7.1 We will not keep your data for longer than is necessary for the relevant purposes set out in our Company Compliance Policy.
7.2 Where you have purchased a product or service from us, we will hold your relevant personal details to enable us to provide after-sales services and to administer the contract.
8. Your rights
8.1 Under the General Data Protection Regulation (GDPR) and The Data Protection Act 2018 (DPA) you have a number of rights with regard to your personal data.
8.2 You have the right to request from us access to and rectification or erasure of your personal data; the right to restrict processing; the right to object to processing as well as in certain circumstances the right to data portability. Please note we will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
8.3 To exercise any of these rights you can reach our Data Protection Contact using the details given above.
9. Lawful bases for data processing
9.1 We hold and process your data by lawfully allowed means, these include:
i) Your Consent: Consent is usually given by yourself when you contact us via the Website or personally when we discuss products or advice with you.
ii) Contractual obligations: This occurs when you purchase products or services from us.
iii) Legal Obligation: When the processing is necessary for us to comply with the Law.
iv) Vital Interests: When the processing is necessary to protect someone’s life.
v) Public Task: When the processing is necessary for us to perform a task in the public interest or for an official function and the task or function has a clear basis in Law.
vi) Legitimate Interests: When the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
10. Children’s data
10.1 Our site is not directed at children and should not be accessed by them. We will not knowingly collect information from minors without their parent’s or guardian’s consent.
11. Third Party Websites
11.1 From time to time our site may contain links to and from the websites of our suppliers or other third party sites.
11.2 If you visit any of these sites please note they have their own privacy policies and you should check these before submitting any personal data. We cannot accept any responsibility or liability for these policies.
12 Data Access
12.1 You have rights of access to the data we hold about you. Should you wish to exercise these rights please contact our appointed Data Contact whose details are given above.
12.2 There is no charge for the Data Access service. As soon as we are satisfied as to your identity, we will send you, within one Month, confirmation of the data we hold relating to you, which we are legally obliged to provide.
12.3 Please contact us if you believe that any personal data or information which we hold about you is incorrect or incomplete. Any information or data which is found to be incorrect will be corrected as soon as practicable.
12.4 Please contact us if you wish to have your personal data removed entirely from our systems. As soon as we are satisfied as to your identity and the data is not required to be kept for any other lawful reason or purpose it will be removed from our systems forthwith. If you so wish, your Data is provided to you electronically in a commonly used format such as email.
12.5 If you are unhappy with any of the responses given to you by us you may complain about us to the regulator at the Information Commissioners Office on 0303 123 1113 or through their website www.ico.org.uk.
13. Business Transfer or Sale
13.2 It may also be necessary to transfer personal data under our control to a business or charity that is negotiating with us for the purchase of our charity but only where it is necessary to evaluate the purchase transaction.
13.3 In the case of a pre-sale transfer of personal data, the data would be kept safe during the negotiations and destroyed by the third party if the sale or merger did not go ahead.
14. Changes to this policy.
14.1 There may be developments in how we use your data according to changes in the Law.
14.3 Any revised terms shall take effect as at the date of posting.
14.4 If you don’t find your concern addressed here, feel free to contact us by e-mailing our Data Protection Contact at the contact details given above.
14.5 This policy is correct as of April 2020