This privacy notice sets out how Wyre Forest and South Worcestershire Nightstop and Mediation Service (hereafter referred to as Nightstop) uses and protects any information that you give us when you use this website.
Nightstop is committed to ensuring that your privacy is protected. Should we ask you to provide any information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
Nightstop may change this notice from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This notice is effective from 17th February 2022.
Introduction
As the ‘controller’ of the information (‘personal data’) that we collect and hold about you – our ‘data subjects’ – we are responsible for how that data is processed. The word ‘process’ covers the things that can be done with personal data, including collection, storage, use and destruction of data. This privacy notice explains why and how we process your personal data, and explains the rights you have, including amongst others, the right to request access to your data, and to object to the way it is processed.
We process your data so we can manage and support our relationship with you, comply with legal obligations, improve our services, and achieve our legitimate business aims.
If you have any queries about this notice or anything related to data protection, you can contact our Data Protection Officer at info@wfnightstop.org or on 01562 743111
Personal Data
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
‘Personal data’ is any information that relates to a living, identifiable person. This will usually include your name, address, contact details, and other information we collect as part of our relationship with you, whether you are a service user or anyone else we are in contact with through our work.
Some especially sensitive information is known as ‘special categories’ of data and includes information about a person’s race or ethnic origin, religious or other beliefs, physical or mental health, sex life or sexual orientation. The use of this type of data, and of information about criminal convictions and offences, is subject to strict legal controls.
We only process data if we need to for a specific purpose, as explained below. Most often, we collect your personal data directly from you, through our contact with you.
Your data and how and why we process it
Service Users
We process your name, contact details, and other information that we collect through our interactions with you, on the basis that it is necessary for us to fulfil our contract with you, and on the basis of our business’s legitimate interests of providing and improving our services. If we send electronic marketing messages to you as an individual (rather than a business representative), we will do so only on the basis of your freely given consent and you can opt-out at any time. If we send hard copy marketing messages to you, we will do so for the purposes of our legitimate interests to increase awareness of our business, and you can opt-out at any time. We may collect special categories of data relating to you – namely race or ethnic origin, religious, physical or mental health, or sexual orientation.
We do so on the basis that the data is necessary for reasons of substantial public interest, on the basis of the Data Protection Act 2018, which includes safeguarding, crime prevention, and regulatory work, amongst others.
Other business contacts:
We process your name, contact details, and other information produced through our interactions, to enable us to manage our working relationship with you, on the basis of our business’s legitimate interests to be able to provide our services to those who need them, in the most effective way.
You have the right to object to any of this processing and we will assess any objection sensitively.
Why we share your data
We share the data we process with other organisations, only when we have a lawful basis to do so, or when we are engaging a supplier who will act as a ‘Data Processor’ on our behalf. ‘Processors’ are businesses or organisations who handle, or could potentially handle, personal data as part of providing a service to us, and include our IT system providers, our email providers, our website hosts and our major grant funders as part of their fund reporting requirement.
We will co-operate with police and other authorities as appropriate, to investigate or prevent crime, including fraud, and other unwanted behaviours such as incompetence in public roles, in accordance with our Confidentiality Policy.
How we store your data
Your personal data is held in both hard copy and electronic formats. Were we to store or transfer your data outside of the UK we would do so only where we have judged there to be appropriate safeguards in place to control the protection of your data, including the data being in a country that has been assessed as ‘adequate’ or we have entered into Standard Contractual Clauses.
How long we keep your data
Your data is only kept for as long as there is a lawful reason to retain it. Some of our retention periods are based on legal requirements, and others are based on the practical reasons we need to keep the data for a certain period.
Once we reach the retention period, we will securely delete the relevant data, unless we are legally required to keep it longer, or there are legal reasons why we should keep it longer.
Your rights as a data subject
As a data subject, you have the following rights in relation to your personal data:
• To be informed about how and why your data is handled, which we do in a large part through this Privacy Notice;
• To gain access to copies of your personal data (sometimes known as making a Subject Access Request or SAR);
• To have errors or inaccuracies in your data changed;
• To have your personal data erased, in limited circumstances (sometimes known as the ‘right to be forgotten’);
• To object to the processing of your personal data for marketing purposes or when the processing is based on the public interest or other legitimate interests;
• To restrict the processing of your personal data, in limited circumstances;
• To obtain a copy of some of your data in a commonly used electronic form, in limited circumstances (known as the right to data portability);
• Rights that ensure you are not unfairly affected by any profiling or automated decisions.
If you wish to make a Subject Access Request or exercise any of the other rights, please contact us. We will respond to you as soon as possible, and within one month for a request to access, rectify, erase, restrict or object to processing of, your data, or a request for data portability.
For more information about these rights, please see the ICO’s website https://ico.org.uk/ or contact us.
Withdrawing consent
If we are relying on your consent to process your data, you may withdraw your consent at any time by contacting us.
Complaints to the Information Commissioner
You have a right to complain to the Information Commissioner's Office (ICO) about the way in which we process your personal data, although please allow us the opportunity to sort out the issue first. You can make a complaint on the ICO’s website https://ico.org.uk/.
Website Cookies
Our website uses essential cookies which are necessary for the proper operation of the website, we do not use non-essential cookies such as Google Analytics.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.