I CAAN (Independent Community Autism Activity Network) GDPR Privacy Notice
Effective Date: 25/01/19
I CAAN (Independent Community Autism Activity Network) takes its obligations concerning data protection seriously. We are providing this notice, so you have information about how we collect and process your personal data. We ask you to please read this Privacy Notice as it has important information you need to know.
What does our charity do?
I CAAN (Independent Community Autism Activity Network) I CAAN is a voluntary community group formed to provide activities and mutual support for people and their families affected by autism in West Cumbria. The main office and data functions are carried out at our head office at:
I CAAN
PO BOX 81
Cockermouth
Cumbria
CA13 3AQ
How do we collect information from you?
We obtain information about you when you use our website, for example, when you contact us about services, to become a member or to make a donation.
What information do we collect and process?
In order for us to help with your care we may collect from you, necessary personal data. “Personal Data” is information about you which, either on its own or when connected with other data, allows us to identify you as an individual customer to provide you with our services. The personal data we hold may include the following:
• Your full name and contact information (address, town, postcode, email and phone number)
• Your DOB and if you have any ASD diagnosis
• The information regarding members of your group, Name, DOB and details of
any ASD diagnosis
• Your credit card details and/or bank account details (if paying by cheque or bank
transfer)
• Your purchase details and history (including time, date and cost)
• Your calls and correspondence with us
• Your feedback
• Your ticket purchase details including name and email address
• Your IP Address, pages accessed and when
• Any information taken for services provided is done so under “legitimate interest” lawful bases for processing.
• Personal data will be collected from you or passed to us by a referral from the NHS or other third-party business.
• Sometimes your personal data is obtained from the following third parties (depending on your relationship with us):
• HMRC, DWP and other government departments
• local authorities
• emergency services
• suppliers
However, some personal data may, where lawful to do so, or with your consent, be collected by us from third parties.
Please note that you are under no obligation to provide us with your personal data, but not providing certain data could prevent us from serving you.
How is your information used?
• We may use your information to:
• process a donation that you have made;
• process payments for services that you have submitted;
• process payments via Paypal;
• Process ticket purchase information;
• process membership payments;
• to carry out our obligations arising from any contracts entered into by you and
us;
• seek your views or comments on the services we provide;
• notify you of changes to our services;
• book children onto activities;
send you communications which you have requested and that may be of interest to you. These may include information about activities, campaigns, appeals, other fundraising activities, promotions of our associated companies goods and services;
This list is not exhaustive and may be updated from time to time. We do not ‘trade’ in your personal data and will not sell or rent your details.
Who will your personal data be shared with?
I CAAN (Independent Community Autism Activity Network) may share information with third party suppliers as required for external services and materials, however this will only be for the contract we are carrying out at that time.
Service Users – as a health related charity, we must collect some personal information on our service users, including personal health information, which is essential to our being able to provide effective care and support. The information is contained in individual files (manual and electronic) and other record systems, all of which are subject to strict security and authorised access policies.
Members – the service operates a recruitment policy to comply with the regulations in which all personal information obtained will be securely kept, retained and disposed of in line with the GDPR. All members are aware of their right to access any information about them.
We may disclose specific information upon lawful request by government authorities, law enforcement and regulatory authorities where required or permitted by law.
Your personal information will not be transferred to, stored or otherwise processed outside the UK.
How you can access and update your information
The accuracy of your information is important to us. We’re working on ways to make it easier for you to review and correct the information that we hold about you. In the meantime, if you change email address, or any of the other information we hold is inaccurate or out of date, please email us at: info@icaan.org.uk,.
You have the right to ask for a copy of the information I CAAN (Independent Community Autism Activity Network) hold about you.
Security precautions in place to protect the loss, misuse or alteration of your information
When you give us personal information, we take steps to ensure that it’s treated securely. Any sensitive information (such as credit or debit card details) is encrypted and protected with the following software 128 Bit encryption on SSL. When you are on a secure page, a lock icon will appear on the bottom of web browsers such as Microsoft Internet Explorer.
Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Use of ‘cookies’
Like many other websites, the I CAAN (Independent Community Autism Activity Network) website uses cookies. ‘Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. For example, we use cookies to store your country preference. This helps us to improve our website and deliver a better more personalised service.
It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer, visit our full cookies policy. Turning cookies of may result in a loss of functionality when using our website.
Links to other websites
Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.
We use PayPal to process payment information. We do not have access to the information given to PayPal and you must refer to their Privacy Policy for information regarding how your personal data will be used.
In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site. Please refer to the Privacy Policy for PayPal at https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
16 or Under
We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.
Information about children, including their personal information is stored on our database. Such information is normally supplied by the child’s parent(s) or legal guardian(s). It is not the policy of I CAAN to contact children under the age of 18 directly.
Do we get involved in direct marketing?
We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted. You can change your marketing preferences at any time by contacting us by email:
info@icaan.org.uk
What rights do you have to amend personal data?
You have the right to review the personal data held by us and have inaccurate information about you corrected. To understand more about our data processing activities or to request access to your personal information please email info@icaan.org.uk
How long do we keep your personal data?
I CAAN (Independent Community Autism Activity Network) may keep your details on record for as long as it is necessary to meet record keeping requirements. We hold all legal, and financial records for seven years.
Changes to this Privacy Notice
I CAAN (Independent Community Autism Activity Network) may change this Privacy Notice from time to time in order to reflect changes in the law.