Table of Contents
1. Introduction
Welcome to our website, differencenortheast.org.uk (our ‘Website’). Our Website is owned and operated by Difference, a registered charity (Reg. No. 1170789) (‘Difference’, ‘we’ and ‘our’). Our registered address is 49 Wantage Road, Durham DH1 1LP. We are a charity registered in England and Wales with registered number 1170789.
Difference respects your privacy and is committed to protecting your personal data. This privacy policy explains how we will use any personal data we collect about you, the rights you have over any personal data we hold about you, and to tell you about the policies and procedures that we have in place to keep your personal data secure.
It is important that you read this privacy policy, together with our cookies policy and any other privacy notice(s) we may provide on occasion, so that you are fully aware of how and why we might use your personal data. This privacy policy supplements any other privacy notices relevant to your relationship with Difference and is not intended to override them.
2. The Data We May Collect About You
i. Personal Data
Personal Data means any information about an individual from which that person can be identified. It does not include data where all identifying information has been removed.
We may collect, use, store and transfer different kinds of Personal Data about you as follows:
- Identifying Data is the information that might identify you, such as name, username or similar identifier, and contact information (email address, address and/or telephone number(s)), as well as other personal details (e.g. marital status, title, date of birth and gender).
- Correspondence includes information you share with us by email, survey, social media or in correspondence.
- Usage Data includes information about how you use our website.
We may also collect, use and share Aggregated Data such as statistical or demographic data. Aggregated Data means data that may be derived from your Personal Data but does not directly or indirectly identify you or anyone else, and is not therefore considered Personal Data.
Updates: It is important that the personal data we hold about you is accurate and up to date. Please keep us informed if your personal data changes during your relationship with us.
ii. Sensitive Personal Data
Sensitive Personal Data means personal data concerning race, ethnicity, political opinions, religious or philosophical beliefs, sexual orientation, and data concerning physical or mental health. We only process sensitive personal data where:
- you have given your explicit consent to us processing it; or
- you have made your Sensitive Personal Data public.
Please do not provide any Sensitive Personal Data about anyone else without their permission. The Sensitive Personal Data which we collect is stored on a multi-factor authenticated password secure database, to which only a limited number of members of staff have access. It is deleted when no longer relevant, and is never shared with third parties.
We may collect data about your opinions on our website in, among other places, our ‘mystery shopper’ form and through our ‘enabling/disabling experience’ survey question on the homepage.
3. How We Collect Your Personal Data
We may collect data from and about you through:
- Direct Interactions: You may give us your personal data when you subscribe to our service or publications, request marketing to be sent to you, give us feedback or correspond with us in any other way.
4. How We Use Your Personal Data
i. Purposes
We will only use your Personal Data when the law allows us to. Most commonly, we will use your Personal Data to manage and administer our website in a safe and secure manner. This includes, among other things, your use of our ‘Experiences’ section of the Difference website. We may also use your personal data as resources in our work, such as using it in case studies.
In addition, we may use your Personal Data:
- to communicate with you by email about your use of our website or any content you upload to our website;
- to send you important information regarding the website including updates and news;
- to provide better content, services and marketing to you;
- to profile individual and demographic trends of people using or posting on our website; and
- where we need to comply with a legal or regulatory obligation.
ii. Legal Basis
We may use your Personal Data on one or more of the following legal bases:
- With your consent. Where we rely on your consent to process your Personal Data (e.g. marketing), you may withdraw your consent at any time by emailing info@differencenortheast.org.uk.
- In our Legitimate Interests. Legitimate Interests means the interests of Difference in conducting and managing our website to enable us to give you the informative content on our website and a secure experience. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
- To comply with a legal obligation.
iii. Email Communications
You may receive email communications from us if you have requested information from us or if you opted to receive our email updates when signing up to be a member of our website or subsequent emails.
Change of Purpose: We will only use your Personal Data for the purposes for which we collected it.
5. Disclosures of Your Personal Data
i. Sharing Your Data
We may share your Personal Data with the following parties for the purposes set out above:
- Professional advisers acting as data processors for Difference, including auditors and insurers.
- Service providers acting as data processors for Difference who provide IT and system administration services.
ii. Third-Party Websites
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We encourage you to read the privacy notice of every website you visit.
6. Data Security
We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
7. Data Retention
We will only retain your Personal Data for as long as is necessary to fulfil the purposes for which we collected it.
8. Your Rights
You may:
- Request access to your Personal Data.
- Request correction of the Personal Data that we hold about you.
- Request erasure of your Personal Data.
- Object to processing of your Personal Data where we are relying on a Legitimate Interest.
- Request restriction of processing of your Personal Data.
- Request the transfer of your Personal Data to you or to a third party.
- Withdraw consent at any time where we are relying on consent to process your Personal Data.
9. Contact Us
If you have any comments or queries in relation to this privacy policy, please email us at hello@differencenortheast.org.uk.
You can also contact the Information Commissioner’s Office via their website (www.ico.org.uk).