This Privacy Notice tells you what to expect when Emmaus Hull & East Riding collects and uses your personal data in accordance with the General Data Protection Regulation.    We only retain your information to the extent that we are required to do so by law.  We do NOT use your information other than to conduct business with you or support you.  However, we are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using our website, on the phone or in person, then you can be assured that it will only be used in accordance with this privacy statement.

We will only use your contact information to provide you with information about Emmaus Hull & East Riding or homelessness or in the process of conducting legitimate business with you.

Emmaus Hull & East Rdiing may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 25/5/2018.

Data Controller: Kelly Thompson  Contact Details

The purpose we are processing your personal data for is: To enable us to provide you with goods and services and to process payments and donations from you.

Using your personal information for other purposes: We will not process your personal data for any other purpose than that for which it was collected, without first providing you with information on that other purpose and seeking your consent if applicable; except were we are required to disclose your personal data in accordance with legislation for example in relation to the prevention and detection of crime, counter terrorism, safeguarding, legal proceedings or to protect interests of you or another.

The fair and lawful basis we are processing your personal data on is Article 6 (a).  Consent: we need to process your data to supply you with goods &  deliver services to you, to receive donations from you and to answer your queries.

Am I required to provide Emmaus Hull & East Riding with my personal data: We only collect the information you willingly consent give us in order to keep records of transactions, answer any queries, accept donations and make comments.  We work with a number of donation and payment providers to accept donations from you.  We do not hold financial information on you as all processing is done through those providers.

Does processing of my personal data involve automated decision-making, including profiling? No, however, if you have expressed a particular interest when signing up to receive information from us we may contact you with information on that basis (e.g. homelessness/outreach information)

Can I withdraw my consent for processing:  Yes but we need it if you are buying from us or have signed up for Gift Aid.

Who we will share your personal data with: Your information may be shared with staff and our bank and PayPal (if purchasing online) and service providers where you have given consent.  Your information (anonymised) may also be shared where there is good (legitimate) reason with our funders

Transfers of personal data to a third country: No personal information is transferred by ourselves to a third country.

Where is the data held: All data is held locally in the UK on our secure servers.  Information provided through our website is held securely in the UK on our website server provided by our data processor.  We do not hold financial information on our website, using PayPal (based in Luxembourg) as our data processor for online transactions.

Websites: we have one website, emmaushull.org and a microsite connected to the the Emmaus UK federation.  The microsite is covered by the statements on that site.  Emmaus Hull & East Riding has a number of data processors which take information from you in order to carry out services.  We also allow you to contact us on our website, offer goods for donation, report a rough sleeper, become a volunteer, register for Gift Aid and make comments.  In each case, the information we collect is specific for that purpose.  That information is held on secure servers in the UK and consolidated on an ultra secure GDPR server to generate a contact list so that we can keep you informed within the contect to which you initially contacted us.  We have a number of data processors who take your information on our behalf in order to complete transactions, make donations or manage mailshots.  The include: Mailchimp, Virgin Giving, PayPal, eBay, Just Giving.  We communicate with you through Twitter and PayPal but we do not pass any information about you to them.

How long we will retain your personal data for:

Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.  We will retain documents (including electronic documents) containing personal data:

• to the extent that we are required to do so by law;
• if we believe that the documents may be relevant to any ongoing or prospective legal proceedings; and
• in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).

What are my rights in relation to my personal data? You have the right to access the personal data we hold about you; to request we rectify or erase your personal data; to object to or restrict processing in certain circumstances; and a right of data portability in certain circumstances. 

Who can I complain to? If you are dissatisfied with how we have processed your personal data you can contact the Data Privacy Office to request an internal review.  If you are dissatisfied with the outcome of the internal review, you have the right to appeal directly to the Information Commissioner for an independent review. https://ico.org.uk/concerns/

Contact: kelly@emmaushull.org.uk 32 Lockwood St, Hull HU2 0HN