Privacy

Privacy Notice

Maundy Relief is registered with the Information Commissioners Office and all information kept and used by us is in accordance with the General Data Protection Regulations.

What does this mean?

At Maundy Relief, we collect information from our service users. Some of this data may be personal information people give us such as names, dates of births and address as well as details of issues affecting our service users. We have a duty to ensure that we protect this data.

Why do we collect information?

We collect information from our service users for several reasons:

• so we can provide a well-coordinated service to our service users and avoid the need for service users to give us their information several times
• so we can gather information about who uses our services to help us ensure we deliver our services to those who need them
• so we can share information with other services where our service users give us consent
• so we can track what we do for reports to funders and other stakeholders
• so that we can see where services are working well and where they need to improve.

How do we keep this information safe?

Where we have information on services and people’s personal details, these need to be confidential and kept secure. With this in mind, we take precautions to keep this data safe.

Any sensitive or personally identifiable information that is in paper form is kept locked away where only staff members have access to the key.

For electronic information, this is encrypted and kept on an external server (Lamplight) which is secured 24 hours a day. Staff from Lamplight do not have access to personal data.

Will we share this information?

When data is to be shared with anyone outside the organisation, whether it be made public, with partners and stakeholders or whoever, it is always anonymised unless we have been given explicit permission to share by the person that gave us it.

The only exception to this is where we have grounds to believe that a service user or another person is at substantial risk of harm if we withhold relevant information. This is further explained in on our data consent and information sharing forms

This means that we strip all information that could identify a person from the information. We do this to protect the identity and privacy of service users and we would never pass any of this information unless we are authorised to do so. This includes names, contact details, date of birth or any equalities information that may have been supplied.

 

What information do we need from you and why?

We are happy for people to come to us anonymously.

However, in order to provide you with the best service and to best ensure your safety, and to help us develop and improve our services we will ask you for permission to record your name, address, date of birth and other information such as household type, income, disability where relevant to your enquiry.  

We will also make a record of our contact with you so we can ensure that we can keep track of casework and provide correct information internally and to third parties where relevant and with consent.

You do not have to supply any of this information if you do not feel comfortable doing so.

What is the legal basis for processing your personal data?

    We will process your data for one or more of the following reasons:

• you have given us explicit consent
• we are legally obliged to process the data
• we have to process the data under the terms and conditions of a service level agreement, contract or grant requirement.

 

How long do we keep your personal data?

We keep data only as long as you have a relationship with Maundy Relief or for as long as we need to legally keep records in accordance with charity, company law and funder’s terms and conditions. Once this period has passed we will then securely dispose of all data relating to you, and/or your group.

Your rights and your personal data.

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:-

• The right to request a copy of personal data which Maundy Relief holds about you.
• The right to request that Maundy Relief corrects any personal data if it is found to be inaccurate or out of date.
• The right to request your personal data is erased where it is no longer necessary for Maundy Relief to retain such data.
• The right to withdraw your consent to the processing at any time
• The right to request that the data controller provide you with your personal data
• The right to lodge a complaint with the Information Commissioner’s Office (ICO)

Further processing

If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent you the new processing.

   Contact Details

To exercise all relevant rights, queries or complaints please in the first instance contact the Manager at Maundy Relief, Email lucyhardwick@maundyrelief.org.uk

You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email or at the Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

    May 2023

    Reviewed October 2024