All Together Edinburgh
Privacy Policy September 2022
Why we collect data
As an employer, training provider and social enterprise All Together Edinburgh will be required to collect and store personal, professional and financial data in order to maintain its services and commitments to staff, customers, volunteers. trainees, funders and any other appropriate stakeholder.
How we collect data
All Together holds information submitted in the following circumstances.
-
As part of the recruitment process for staff, trainees and volunteers.
-
As part of the continuing administration of staff, volunteers and trainees.
-
As part of our contact with the public, partners, funders, stakeholders, staff, trainees and volunteers through our website, physical address, email addresses, social media, survey services and any phone numbers associated with the business.
-
Through our till card payment system when purchases are made
-
By registering for a service such as BoostBox or our training service.
-
Through referral forms from third parties, stakeholders or trusted partners to allow us to provide our trainee or volunteer services.
How we use data
-
To provide you with information about our work or activities that you have agreed to receive.
-
To invite you to participate in surveys or similar information gathering.
-
To maintain the administration of staff, volunteers and trainees.
-
To maintain the financial administration of our business
-
To fulfil organisational legal and regulatory obligations
-
To provide organisational development and support services
-
To respond to requests from contact forms.
-
To enable the organisation to review, develop and improve its website and any service delivered by us
-
For any other legitimate business purposes
How long we retain your data
All Together will retain any data we hold for the period we are legally required to keep it. Examples are given here:
-
Trainee data: For as long as we are required to keep it by our funders. It will then be destroyed in line with their requirements. Unsuccessful applicants for traineeships will have their information kept for 6 months before it is destroyed.
-
Employee data: For as long as we are required to keep it to maintain the requirements of UK employment law. It will then be destroyed in line with UK employment law requirements. Unsuccessful applicants for jobs will have their information kept for 6 months before it is destroyed.
-
Financial data generated by till sales: This will be kept for the period required by our card processor and then destroyed in line with their requirements
Contact either through email, the contact form on the website or mail: This may be kept indefinitely as a record of our services and will include all information you provide us such as your name, email address, contact number and the reason for or nature of your correspondence.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Cookies
Cookies are small pieces of data stored on a site visitor's browser. They are typically used to keep track of the settings users have selected and actions they have taken on a site.
In accordance with data privacy regulations we must inform our visitors that we are using cookies on our site. Our cookies are currently provided by our service provider (Wix) and are described as ‘Essential’. A banner should appear asking you if you agree to the use of essential cookies and to agree if you wish to have non-essential cookies. We do not currently have any other cookies on our site.
To find out more about cookies see here:
All About Cookies | Online Privacy and Digital Security
Your Rights
Under GDPR regulations, individuals have the right to:
• be informed about the collection and use of their personal data
• access and receive a copy of their personal data, and other supplementary information
• have inaccurate personal data rectified, or completed if it is incomplete
• have personal data erased
• request the restriction or suppression of their personal data
• obtain and reuse their personal data for their own purposes across different services
• object to the processing of their personal data in certain circumstances
• be informed about automated processing of personal data
For financial and technical reasons your information may, on occasion, be needed in order to use the services of a supplier outside the European Economic Area (EEA), however such information will be held in compliance with applicable European data protection regulations. By submitting your personal information you agree to this transfer, storing or processing at a location outside the EEA. All reasonably necessary steps will be taken to ensure that your information is kept securely and in accordance with this privacy policy, and ensuring that it is:
• Handled fairly and lawfully
• Kept for limited purposes as outlined in this policy
• Only retained to a level that is adequate, relevant and not excessive
• Accurate and up to date • Not retained for longer than necessary
• Processed in line with the data subject’s rights
• Stored securely
All Together Edinburgh
87 Leith Walk
Edinburgh
EH6 8LX
0131 553 7016