The Cyber Helpline Privacy Policy
Published: 21st November 2022
Previous notices: Can be found here.
This Privacy Policy explains how we handle your personal information across our website, chatbot, volunteer helpdesk, donations platforms and social media. If you are between the ages of 13 and 18 you can read our Young Persons Privacy Policy.
How do we use your data in practice?
Donation processing or transactional purposes: to process your donations or other payments, to claim Gift Aid on your donations and verify any financial transactions. We will need to use your personal information in order to carry out our obligations arising from any contracts entered into between you and us for goods or services, for example, training that we have delivered;
Responding to a request: to provide the services or information that you have requested, for example, in response to a query or complaint;
Administration: to update you with important administrative messages about your donation, a campaign or services, or to record and deal with a complaint, record a request not to receive further marking information, record what our volunteers have done for us, and for other essential internal record keeping purposes;
Monitoring and evaluating our services: we may use your information in order to improve current and future delivery of our services;
Processing an application to work with us: we may process your information if you send or fill in an application form or send us your CV or details in respect of an opportunity to work with us in order to evaluate your suitability and respond to you or, where you volunteer with us, to administer the volunteering arrangement;
Employment & volunteering: we need to ensure that we meet our obligations as an employer and manage people effectively in the organisation;
Working with vulnerable adults: we collect essential information to enable us to safeguard vulnerable adults we work with, for example, in campaigns or events;
Fundraising, direct marketing or campaigning: we will only send you marketing information by email, SMS, or telephone you if you have given us specific consent. If you withdraw your consent and then subsequently opt in to receive marketing information again, then your most recent preference will supersede your earlier one. You can opt out of at any time by contacting us or by opting out where asked on specific platforms;
Providing and developing our website: we may use your personal information to help provide you with access to our website, personalise your experience, and improve and develop it further;
Protecting your vital interests: we may process your personal information where we reasonably think that there is a risk of serious harm or abuse to you or someone else;
Market research and surveys: we may invite you to participate in surveys or market research to help us improve our website, fundraising, services and strategic development. Participation is always voluntary and no individuals will be identified as a result of this research, unless you consent to us publishing your feedback;
Legal, regulatory and tax compliance: where we are subject to a legal obligation, we may process your personal information to fulfil that obligation;
Profiling and analysis: we want to improve how we talk to you and the information we provide through our website, services, products and information. We may occasionally for the purposes of our legitimate interests use your personal information to conduct profiling of our supporters or potential supporters. To do this we sometimes use profiling and screening methods so that we can better understand our supporters, your preferences and needs to provide a better experience for you.
Risk management: to provide you will the best possible advice about your situation, including understanding risk and possible measures to reduce risk;
Case management: so that if you contact us again you do not need to repeat the history of your situation;
Anonymised research and monitoring: the collated data produced may be shared, including with funders, but there will be no identifiable information within these reports;
Contact you have consented to: we will ask for your explicit consent to contact you for evaluation, research, case study, or policy and campaign work. We will only contact you if you have given consent and this can be withdrawn at any time.
What personal information do we collect from you?
We collect the following data depending on how you interact with us.
Using, and contacting us through, our website
-
Why? - To understand the habits of visitors and improve our services.
Based on? - Your consent, using a cookie banner, and legitimate interests to optimise our services.
For how long? - Three years
-
Why? - To understand the habits of visitors and improve our services.
Based on? - Your consent, using a cookie banner, and legitimate interests to optimise our services.
For how long? - Three years
-
Why? - To contact you.
Based on? - In order to offer you personal support with your case.
For how long? - 15 years, then anonymised
-
Why? - To understand your case.
Based on? - In order to offer you personal support with your case.
For how long? - 15 years, then anonymised
-
Why? - To understand your case, so we can contact you and so we can understand the case to date.
Based on? - Consent.
For how long? - 15 years, then anonymised
Using, and contacting us through, the chatbot
-
Why? - So we can track who is using our chatbot and connect with correct advice.
Based on? - So we can provide the chatbot service.
For how long? - 15 years.
-
Why? - So we can contact you.
Based on? - In order to offer you personal support with your case.
For how long? 15 years.
-
Why? - So we can understand how best to help you and understand who is using our service.
Based on? - Consent.
For how long? - Indefinitely.
Working with one of our volunteers
-
Why? - So we can understand how best to help you and understand who is using our service.
Based on? - Consent.
For how long? - Indefinitely.
-
Why? - So we can help you with your case.
Based on? - Consent & legitimate interest.
For how long? - Indefinitely.
If you donate
-
Why? - So we can understand who our donors are and process your donation inc. processing Gift Aid. So we can contact you about future donations & update you on our charity.
Based on? - Consent.
For how long? - Transaction period plus 10 years.
-
Why? - So we can process your donation.
Based on? - Consent.
For how long? - Transaction period plus 10 years.
If you apply for a role
-
Why? - So we can contact you and continue to discuss your application.
Based on? - Consent.
For how long? - For six months after your application is closed and you have been unsuccessful or you have withdrawn.
-
Why? - So we can review your skills and experience to assess your suitability for the role.
Based on? - Consent.
For how long? - For six months after your application is closed due to you being unsuccessful or withdrawing.
If you volunteer or work for us
-
Why? To enable us to contact you, perform vetting and checks and to enable you to carry out your role.
Based on? - Consent.
For how long? We hold all volunteer and staff data for 15 years from your last day.
Contacting us on social media
We operate several social media pages (including Facebook, Instagram, Twitter, YouTube and LinkedIn). Although this notice covers how we will use any data collected from those pages, it does not cover how the providers of social media websites will use your information. Please ensure you read the privacy policy of the social media website before sharing data and make use of the privacy settings and reporting mechanisms to control how your data is used.
When you interact with us on social media platforms such as Facebook, Instagram, Twitter or LinkedIn we may also obtain some personal information about you. The information we receive will depend on the privacy preferences you have set on each platform and the privacy policies of each platform. To change your settings on these platforms, please refer to their privacy notices.
We may obtain information about your visit to our site, for example the pages you visit and how you navigate the site, by using cookies.
Where is it stored & processed?
Personal data you share with us will be stored in our online databases or in ‘Software as a Service’ solutions that help us use, store and process your data. Where possible we will restrict geographic storage of your personal data to the UK, the European Union or the USA (in that order of preference).
Who do we share it with?
We do not share or sell your personal data with any organisation unless required to do so by law.
Other organisations may have partial access to your data - or be hosting encrypted versions of your data - as we use their tools and technologies to store, process and use the data you provide.
We may be obliged to share your information with a statutory body – such as the police or safeguarding services – where we have a clear reason to believe that you or another individual (whether a child or adult) is at imminent risk of serious harm. The legal basis for this is our vital interest, namely that this processing is necessary to protect someone’s life.
We may share anonymised case data and statistics about the issues we support our users with to 3rd parties. All of your personal data will have been removed from the data before sharing.
What are your rights?
You can read about your rights on the Information Commissioner’s Office here - https://ico.org.uk/global/privacy-notice/your-data-protection-rights/. You also have the right to make a complaint to the UK Information Commissioner’s Office.
You can contact our Data Protection Team using the form below:
have all of the personal data we hold on you erased
be provided with a copy of your personal data we are processing
if any of the data we hold is inaccurate or incomplete
If you are not happy about the way in which we are processing your personal data