Effective: 23 October 2018
We couldn’t do any of our life changing work without supporters like you.
Whether it’s generously giving donations, getting behind campaigns, or volunteering your time, your support means everything. The information you provide helps us to carry out our work and allows us to let you know the difference you are making.
This Policy sets out when and why we collect personal information, how we use it and how we keep it secure.
If you have any queries about this policy, please contact us at;
- Unit 4, Little Ann St, Bristol BS2 9EB
- 0117 954 2220
Definitions for this policy
Who you’re talking to
‘FareShare South West’ is a trading name of Community Initiatives South West Limited; Company number 6130395, registered charity number 1125905, registered address Unit 4 Little Ann Street, St Judes, Bristol, BS2 9EB.
In this policy, any reference to “we” or “us” refers to FareShare South West.
Service is the faresharesouthwest.org.uk website and content operated by FareShare South West.
Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession). Non-personal data means data that is in no way personally identifiable.
Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Cookies are small pieces of data stored on your device (computer or mobile device).
Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.
Data Processors (or Service Providers)
Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller.
We may use the services of various Service Providers in order to process your data more effectively.
Data Subject (or User)
Data Subject is any living individual who is using our Service and is the subject of Personal Data. This term may also be used interchangeably collectively to refer to a visitor or member.
A visitor is someone who browses our website
A member is someone who has registered with us to uses our services
Collecting personal data
We will collect personal information from you when you register with us to become a volunteer, sign up to receive our newsletter, make a donation to us or otherwise provide us with personal information.
Types of Data Collected
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Cookies and Usage Data
We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us.
We may also collect information about how the Service is accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
Use of your Personal Data
We use the collected data for various purposes:
- To provide and maintain our Service
- To notify you about changes to our Service
- To allow you to participate in interactive features of our Service when you choose to do so
- To provide customer support
- To gather analysis or valuable information so that we can improve our Service
- To monitor the usage of our Service
- To detect, prevent and address technical issues
- To accept and respond to enquiries about volunteering, food delivery, events and other aspects of our charity
- To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information
Consent and Communication
We will not contact you for marketing purposes by email or phone unless you have given your prior consent, or unless this is reasonable based on our relationship and a balanced assessment of our legitimate interests. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted. To change your marketing preferences at any time please contact us using the details above.
Your personal information is kept private and stored securely. You have the right to ask for a copy of the information we hold about and to have any inaccuracies in your information corrected. Your information will never be shared with a third party without your consent.
Our email marketing campaigns may contain tracking facilities within the actual email. Subscriber activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include; the opening of emails, forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity, and other activity.
This information is used to refine future email campaigns and supply the user with more relevant content based around their activity.
Legal Bases for Processing Personal Data under General Data Protection Regulation (GDPR)
FareShare South West may process your Personal Data because:
- We need to perform a contract with you
- You have given us permission to do so
- The processing is in our legitimate interests and it’s not overridden by your rights
- To comply with the law
Retention of Data
FareShare will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, approximately 50 months, except, when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
Volunteer data collected through online forms will be held for at least three months from the last date of interaction with FareShare.
Transfer of Data
Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.
Fareshare South West may also share your data within the FareShare regional network.
If you are located outside United Kingdom and choose to provide information to us, please note that we transfer the data, including Personal Data, to United Kingdom and process it there.
Disclosure of Data
We do not sell, trade or otherwise transfer your personal date to outside third parties.
We do reserve the right to release such personal data to provide you with the product or services you have requested within our FareShare network.
Non-personal information may be provided to other parties for marketing, advertising or other FareShare use.
Disclosure for Law Enforcement
Under certain circumstances, FareShare South West may be required to disclose your Personal Data to enforce our site policies, protect your rights or the rights of others’ property or safety if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
FareShare South West may disclose your Personal Data in the good faith belief that such action is necessary to:
- To comply with a legal obligation
- To protect and defend the rights or property of FareShare South West
- To prevent or investigate possible wrongdoing in connection with the Service
- To protect the personal safety of users of the Service or the public
- To protect against legal liability
Security of Data
The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Your Data Protection Rights Under General Data Protection Regulation (GDPR)
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. FareShare aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.
If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us at firstname.lastname@example.org
In certain circumstances, you have the following data protection rights:
- The right to access, update or to delete your personal data. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
- The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete. We will do this within 30 days of your request.
- The right to object. You have the right to object to our processing of your Personal Data.
- The right of restriction. You have the right to request that we restrict the processing of your personal information.
- The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
- The right to withdraw consent. You also have the right to withdraw your consent at any time where FareShare South West relied on your consent to process your personal information.
Please note that we may ask you to verify your identity before responding to such requests.
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).
These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
‘Cookies’ are small files saved to your device that track, save and store information about your interactions and usage of the website. Cookies are useful because they allow a website to recognise a user’s device and to provide you with a tailored experience within this website. You can find more information about cookies at https://ico.org.uk/for-the-public/online/cookies
If you engage with us on social media and messaging services like Facebook, LinkedIn or Twitter, you might give us permission to process information from those accounts. The data we are given access to by social media services will vary but will always be in line with the Terms of that particular service. We will not be able to access your private messages or photos and it will include only what you specifically send to us.
Our website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
Although this website only looks to include quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website or on our social media channels. We cannot guarantee or verify the contents of any externally linked website despite our best efforts. Users should therefore note they click on external links at their own risk and we cannot be held liable for any damages or implications caused by visiting any external links mentioned.
Our Service does not address anyone under the age of 18 (“Children”).
We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.