Disability Action Haringey is committed to protecting the privacy of personal information which the organisation collects, holds and administers. Personal information is information relating to an identified or identifiable person. 

Disability Action Haringey fully endorses and adheres to the following six Principles of Data Protection set out in the General Data Protection Regulations (GDPR). Any personal information that you share with us will be: 

• processed lawfully, fairly and in a transparent manner. 

• collected for specified purposes which we explain to you. 

• necessary to achieve our stated purpose. We will not collect personal information that is not essential to our purpose. 

• kept as accurate as possible and, where necessary, kept up to date. 

• kept for no longer than is necessary. 

• processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage. 

Responsibilities 

Disability Action Haringey Board is responsible for adopting and reviewing this policy. 
Disability Action Haringey‘s Director is responsible for the implementation of this policy and for advising the Board on changes in data protection law. 
Why we collect personal information  

We collect personal information for the following reasons: 

Service provision 
To provide our Advice service, Housing Disability Panel, and other community related services ( including community based research and grant administration ) 

Keeping in touch 
To keep people at other organisations, supporters and people interested in our work and services in touch with what we are doing, how they can support us and to make them aware of other services and opportunities  

Fundraising/donations 
To raise money for Disability Action Haringey through our website or other fundraising platforms. 

As an employer and provider of voluntary opportunities. 
As an employer or potential employer and in order to offer volunteering opportunities. 

How we collect personal info 

Service provision 
Advice service, Housing Disability Panel, and other community related services we will collect information from you in person, over the phone and by email. When we collect personal data in relation to our services we will explain why we are recording personal data, how it will be used and processed and ask you for consent. 

Keeping in touch 
We collect information in a number of ways in order to keep you in touch with our services and those of other local organisations. 

• Directly from you at events and meetings 

• Indirectly, if you give via a fundraising platform such as Just Giving, Give As You Live,etc. where you have given them permission to pass your details to us. 

• Social media – where you share information with us. 

• Via emails from partner organisations. 

• Via automated processes on our websites – see website section below. 

Fundraising/donations 
We collect information via our website and other fundraising platforms including Just Giving and Give as You Live. 

What personal information we collect and how we use it 

Service provision 
For the provision of our Advice service, Housing Disability Panel, and other community related services the personal information we collect can include, name, address, email address, phone numbers, health information, details about your personal circumstances and equality monitoring information. You will be asked to give your consent to us holding such personal information when you access our services. If we are recording personal data about a person under the age of 16 we will always request the consent of a parent or guardian. We will use the information you provide only for the purposes of the service(s) you are using. 

​Using some of our services, for example grant services, may involve us sharing your personal information with other organisations such as a referral partner organisation or funder. We will always ask your consent before we do this. 

In order to provide our Advice Service we collect information about referral partner organisations who we refer clients to. This information contains some personal information in terms of name and email address of the main contacts for referrals at each organisation. 

Keeping in touch 
To keep you in touch with our work and other local services the personal information we collect can include name, address, email address and phone number. If you are a service user we will always ask your consent to contact you with information and you can withdraw your consent at any time by writing to us. 

Fundraising/donations 
In order to manage donations or enable you to fundraise for us we will need personal information including your name, address and email address. For donations we will also ask whether you are a UK tax payer. We will also ask for payment information and will always use a secure payment service to process your payment. 

As an employer and provider of voluntary opportunities 
We will collect a range of information in order to process your application and assess your suitability for the opportunity that you are applying for. This will include name, address, email address, phone number, education details, employment background and details of your experience. If you become a member or volunteer at Disability Action Haringey we will collect further personal information necessary for payroll and health and safety, including bank details, national insurance number and emergency contact information. 

​How long we will keep your data 

Service Provision 
We will not keep personal information for longer than necessary and will destroy information securely according to our data retention policy. Personal information provided to our Advice service may be kept up to 10 years after your last date of contact with our Advice Service. Personal information provided to our Housing Disability Panel (HDP) and community services (including surveys) may be kept up to 5 years after your last date of contact with our HDP scheme or community development initiative. 

​However, you can withdraw your consent at any time by writing to us and we will remove your personal data from our records within one month of your request, as long as there are no legal requirements for us to keep it. If we have shared your personal data with other organisations, for example when making an Advice referral, we will inform the relevant organisations to tell them that you have requested that we remove your personal data. We may then keep the minimum necessary information in a file for monitoring purposes. 

​Keeping you in touch 
We will keep your contact details on our distribution lists until you tell us that you want to be removed.  

Fundraising and donations 
​We retain information about donations as required by HMRC and for audit purposes. Information about supporters and donors is retained for 5 years after the last interaction, to help us communicate with you appropriately, to identify trends, and to fundraise more effectively. You may ask us to stop using your data at any time, and subject to our audit and HMRC responsibilities, you may ask us to delete your data. We may then keep the minimum necessary information in a file for monitoring purposes. 

​As an employer and provider of voluntary opportunities 
We will keep records of past employees for up to 7 years after the date they left our employment. We will keep records of unsuccessful applicants for either paid or voluntary roles for up to 1 year after the date of their application. We will keep details of volunteers for up to 2 years after the date they stop volunteering for the organisation. 

Security of your data 
Unless required to do so by law, we will never share your information with third parties unless we have your explicit permission to do so. This may be necessary for some of our services, for example if one of our Advice Advisers is referring you to a referral partner or other organisation that can offer you further support, but we will always explain this to you and seek your permission before sharing. Once we have referred you to another service your personal information will be stored by that organisation and you should refer to their Privacy Policy for information about how they will handle it. 

We are committed to ensuring your personal information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. All data we collect electronically is securely backed up and hosted within the UK. We use a number of companies to help us provide our services. Any of your personal data that is processed via these companies is kept secure and remains the property of Disability Action Haringey. We will ensure that the companies that we use have up to date Privacy Policies and work to data protection legislation requirements. 

Personal information given via website 
Our website uses cookies to collect information on how visitors use it. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Cookies do not usually contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies. 

​We use Google Analytics on our websites to monitor visitor activity and make changes to improve functionality. Google Analytics generates statistical and other information about websites use by means of cookies, which are stored on your devices. The information generated relating to the Disability Action Haringey website can be used to create reports about the use of the sites. Details captured during your visit could include, but are not limited to, the pages you visit, how long you spend on each page, how you got to the site (e.g. via a search engine), and what you click on while you’re visiting the site. 

All data collected by Google Analytics is anonymous and will not identify you as an individual. Google, not Disability Action Haringey, stores activity information, and you can view Google’s privacy policy on their website, where you can also opt out of being tracked by Google Analytics across all websites. 

​Our company is hosted on the Layer3.co.uk platform. Layer3.co.uk provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Layer3.co.uk's data storage, databases and the general Layer3.co.uk applications. They store your data on secure servers behind a firewall.  

Cookies that our website may use 

Our website contains links to other websites of interest. You should be aware that we do not have any control over the content or security of external sites and therefore we cannot be held responsible for the protection and privacy of any information which you provide whilst visiting these sites. You should exercise caution when disclosing personal information on any website and should read the website’s privacy statement to understand how your personal data will be used. 

Legal Basis for processing 

Data Protection regulations permit the processing of your data under 6 different legal bases. 

When processing your data, we rely on the following bases, depending on the purpose of the processing, and how we use it to communicate with you: 

Consent basis - We rely on your consent when we record your personal information because you are using our Connect, Good Neighbours Schemes or other community development services. We also rely on consent basis when sending service users information about our services or other local services either by email, SMS/ text or post. 

Vital interests – We rely on vital interest in safeguarding situations where the processing of personal data is necessary to protect someone’s life.  

Legitimate interest basis - We rely on legitimate interests when sending staff connected to other organisations information by email about our work or the work of other local organisations. When we do this, we will always provide you with easy ways to ask us not to send such information in the future. We also rely on legitimate interests when processing 

personal data in relation to volunteers or people applying for voluntary positions. 

Contractual basis – We rely on a contractual basis if you work for us, or apply to do so, in order to process your application and provide support for employees/ monitor performance. 

Legal obligation basis - We utilise this basis for processing data for gift aid, in our role as employer, and where necessary for regulatory matters. 

​Your rights 

Under the Data Protection Act 1998 and the General Data Protection Regulations you have certain rights about the personal information we hold about you: 

You have the right to receive copies of the information we hold on you. 

If you are a service user you have a right to withdraw your consent to us holding your personal information and ask for it to be removed. 

​You have a right to object to processing that is likely to cause, or is causing you damage or distress. 
You have a right to prevent processing for direct marketing. 
You have a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed. 
You have a right to claim compensation for damages caused by a breach of data protection legislation. 

Applications for any of the above can be made in writing by email to the secretary via recruitment@d-a-h.org or by post to The Secretary, Disability Action Haringey, Winkfield Resource Centre, 33 Winkfield Road, Wood Green Haringey, N22 5RP. If you are unable to put your request in writing. please phone and leave a message for The Secretary on 0203 355 0071

If you have any queries relating to how Disability Action Haringey has processed your personal information you can contact us at recruitment@d-a-h.org

If you are unhappy with our response to your enquiry about how we have processed your personal information, you have the right to lodge a complaint with the Office of the Information Commissioner. 

Information commissioner’s office 

If you would like more information about the Data Protection Act and the General Data Protection Regulations you can contact the Information Commissioner’s Officer at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF 

​Helpline: 0303 123 1113 

Website: https://ico.org.uk/ 

​Disability Action Haringey will review and may update this policy from time to time. You should check this page periodically to ensure that you are aware of any changes. 

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.