Who we are
This is the privacy statement of the Chris Mitchell Foundation, a Scottish Charitable Incorporated Organisation, Scottish Charity Number SC047221, having its principal office at 1 Munro Avenue, Causewayhead, Stirling, FK9 5RA (www.cmfoundation.org.uk) .
This privacy statement explains how we collect and use personal information about you.
What information do we collect about you?
You can access our website without giving us your personal information.
The exact information we will request from you will depend on the services or assistance you ask us to provide to you.
Personal information that we collect about you will usually be provided to us by you, for instance by completing the Contact Us form via our website.
Whether you are a donor, supporter, prospective client or applicant you may be asked to provide certain personal information about yourself including your name and contact details.
The information we may collect will comprise some or all of the following: your name, address, telephone number, e-mail address, IP number and post code.
If you do not provide this information, we may not be able to process your donation, sign you up for a particular event or provide the services you have requested.
Sensitive Personal Data
Sensitive Personal Data includes information about a person’s health, race, ethnic origin, political opinions, sex life, sexual orientation or religious beliefs.
When you contact us you may choose to provide us with Sensitive Personal Data.
We will only use this information:
- For the purposes of dealing with your enquiry, training, and quality monitoring or evaluating the services we provide.
- We will not pass on your details to anyone else without your express permission except in exceptional circumstances. Examples of this might include anyone reporting serious self-harm or posing a threat to others
- Where you have given us your express consent
How do we use your information?
We use your information in the ways set out below.
- We use your personal information to give you the information, support, services, or products you request from us.
- We use your information to gain a full understanding of your situation so we can develop and offer you the best possible personalised service.
- We use your information for internal administrative purposes (such as our accounting and records), and to let you know about changes to our services or policies.
- If you have consented to us adding your details to our database we may use your information to send you communications about our work and how you can help us to help you, for example, information about our campaigns, training sessions, volunteering and fundraising activities.
- We use your personal information to process your donations or other payments, to claim Gift Aid on your donations and verify any financial transactions.
- We may also use your personal information for other purposes which we specifically notify you about and, where appropriate, obtain your consent.
We will treat your contact with us as confidential unless there is a risk of serious harm or abuse to you or someone else. In this instance, we may have to pass this information onto a third party such as the emergency services.
Sharing your information
We will never pass your details on to any third parties for marketing or sales purposes.
There may be occasions where your details are used by companies or organisations that are providing services on our behalf, such as processing donations or the delivery of training.
For example, when you make an online donation via MyDonate, you are going through to a partner company and the information you give such as your credit card number and contact information is provided so that the transaction can take place.
Likewise, if you book a training course through us, it may be necessary to pass your details to the training course provider, Positive Mental Health Scotland and the SPFL Trust for administration purposes, or such other provider if they are delivering the training on our behalf.
Where appropriate, we ensure that any third parties comply strictly and confidentially with our instructions and they do not use your personal information for their own purposes unless you have explicitly consented to them doing so.
We may disclose your information if required to do so by law.
How long will you keep my personal data?
We will retain your personal information for no longer than is necessary for the purposes of its use, taking into consideration any regulatory record keeping requirements. We carry out periodic deletion of data the retention period of which has expired and/or when the need to continue holding such data is no longer necessary.
Transmission of Data Overseas
We will not transfer your Personal Data to a country outside the European Economic Area without your prior consent and without first having assessed the adequacy of protection for individual rights in respect of personal data available in that country.
Using our website
You can visit and browse our website without providing any personal information.
You may choose to submit your personal information by contacting us through our website Contact Form. In such instance we will only process your personal information for the purpose of responding to your request and for no other purpose, without your prior consent.
Internet and Data Storage
The Internet is inherently insecure. Personal information submitted by means of the Internet may be vulnerable to unauthorised access by third parties. Submission of personal information using the Internet is at your own risk. We will take reasonable and appropriate technical measures to ensure that your personal information is stored in a secure manner. However, we shall have no liability for disclosure of data due to errors in transmission or the fraudulent, negligent or other illegal acts of a third party, such as ‘Hacking’. Any transmission of personal information on or through the use of our website is at your own risk
What security will exist?
We are committed to protecting the privacy of your personal information. We use appropriate standards of technology and operational security to protect personal information including a Secure Server and network firewall connection. Operationally, access to personal information is restricted to authorised personnel who are under a duty to maintain the confidentiality and security of such information.
Access to your information – You have the right to request a copy of the personal information about you that we hold.
Correcting your information – We want to make sure that your personal information is accurate, complete and up to date and you may ask us to correct any personal information about you that you believe does not meet these standards.
Deletion of your information – You have the right to ask us to delete personal information about you where:
- You consider that we no longer require the information for the purposes for which it was obtained.
- We are using that information with your consent and you have withdrawn your consent – see “Withdrawing consent to using your information”
- You have validly objected to our use of your personal information – see “Objecting to how we may use your information”
- Our use of your personal information is contrary to law or our other legal obligations.
Objecting to how we may use your information – You have the right at any time to require us to stop using your personal information for direct marketing purposes. In addition, where we use your personal information to perform tasks carried out in the public interest then, if you ask us to, we will stop using that personal information unless there are overriding legitimate grounds to continue.
Restricting how we may use your information – In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. The right might also apply where this is no longer a basis for using your personal information but you don’t want us to delete the data. Where this right is validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.
Withdrawing consent using your information – Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.
Please contact us in any of the ways set out in the Contact information and further advice section if you wish to exercise any of these rights.
Changes to our privacy statement
We keep this privacy statement under regular review and will place any updates on this website.
Paper copies of the privacy statement or any further information or advice may also be obtained by e-mailing us at firstname.lastname@example.org or by writing to us at 1 Munro Avenue, Causewayhead, Stirling, FK9 5RA.
What if I have a complaint?
If you have a complaint please write to the Chris Mitchell Foundation, 1 Munro Avenue, Causewayhead, Stirling, FK9 5RA or e-mail email@example.com
We seek to resolve directly all complaints about how we handle personal information but you also have the right to lodge a complaint with the Information Commissioner’s Office, whose contact details are as follows:
Information Commissioner’s Office
Telephone – 0303 123 1113 (local rate) or 01625 545 745
Website – https://ico.org.uk/concerns