Small Charities Coalition Privacy Statement
Overview: What you need to know in brief
smallcharities.org.uk is the website of the Small Charities Coalition (SCC). This means that SCC are the “Data Controllers” of this website. We operate this website to communicate with our members and raise the profile of the incredible and invaluable work of Small Charities in the UK. We use the lawful basis of consent, legitimate interests and compliance with a legal obligation for processing personal data. We use a limited amount of third parties that process personal data either directly on our website or indirectly through external lines to the service providers own webpage.
Preservation of your privacy is important to the Small Charities Coalition and we are committed to letting you know how we use your personal information, keeping personal data safe and secure and to making only responsible use of your data. We ask you to read this Privacy Notice and Cookie Notice in full prior to your engagement and if you have any questions or concerns to contact us at [email]
This notice may be updated from time to time: Last updated November 2020
Full Notice
1.Who we are
www.smallcharities.org.uk is the website of the Small Charities Coalition (SCC). This means that SCC are the “Data Controllers” of this website. References to “we”, “us”, “you” or “our” in this privacy statement are references to the Small Charities Coalition.
SCC is a company limited by guarantee registered in England and Wales, registered company number: 06462220; and a charity registered in England and Wales, registered charity number: 1122297.
​
This statement relates to the various contact types associated with the Small Charities Coalition, including members, individual contacts of members, supporters, mentors and mentees.
2. Why we have a website
We have two main purposes for operating this website: Communication and Awareness Raising
Communication
We use this website to communicate information about our organisation, services, events and about information that may be of interest to our members and the wider public. We also operate this website to enable our users to communicate with us. In addition, we maintain a presence on social media platforms such as Facebook and Twitter.
Awareness Raising
​We use this website to further our mission in providing small not for profit organisations with the relevant information, advice and support to help them deliver what they want and to also make sure their voices are heard.
3.What personal data we collect
In order to operate our services and this website, we must process personal data. In all instances, we endeavour to collect the minimal amount of information necessary to achieve our purposes. We use the lawful basis of consent, legitimate interests and compliance with a legal obligation for processing personal data.
Membership
The Small Charities Coalition is a membership organisation and as a result, we collect details about your charity when it registers as a member. In addition, we also ask for some basic personal information from you as an individual, in the following situations:
​
-
As the contact of the small charity you are registering as a member.
-
If you sign up as a supporter of the Small Charities Coalition.
-
If you sign up to become a mentor for the Small Charities Coalition.
​
This information will include your full name, job title, email address and phone number. We also may ask for some non-personal data (e.g. how you heard about the Small Charities Coalition or the services you are interested in). You are responsible for making sure you give us accurate and up to date information.
Please note: If you provide information on behalf of another person, you will need to tell them how to find this privacy statement and make sure they agree to us using their information for the purposes set out in it.
​
Services
We will also collect personal data when you access the services we offer. Depending on the service you use, the way we collect data is including but not limited to the following:
​
-
Downloadable resources – name and email address.
-
Support line – name, email address, organisation, job title and query details.
-
Events sign up – name, email address, job title, organisation, location, photograph consent for all events and payment details for paid events only.
-
Mentee and Mentor sign-up – name, email address, job title, organisation and query details.
-
Online feedback or research surveys – name, organisation and email address.
​
In all instances where we collect personal data from individuals it is to deliver our charitable services.
4. How we use your personal data
​
We use your personal information to manage your membership account on our customer relationship management system and/or to provide the services you have requested from us.
​Marketing
Marketing our events and services is important for our work. When you become a member, and at other times, you are invited to opt-in to our marketing communications. You can unsubscribe at any time from these communications without affecting your membership status (see section 5 below). If in any case, your specific, unambiguous consent is not received, we will not send you marketing information.
Our email marketing (which includes some but not all member communications) may be trackable at an individual level, allowing us to determine, for example, opens and link clicks. This information is generally used to help assess the effectiveness of communications so that – for example – we can send you more of what you like.
We never share your information with third parties for marketing purposes without asking for specific, unambiguous consent. For example, some of our events are delivered alongside a relevant partner (e.g. community voluntary service organisations). On some occasions, we might ask you if we can share those details with the partner. This will be very clear on the event sign up form. If in any case, this consent is not received then your data will not be shared.
​
From time-to-time, we may use your feedback and attribute it to you (e.g. by quoting a name and organisation alongside the feedback). We take this information from the surveys you are asked to complete and we do so to talk about our services publicly or demonstrate the impact of the charity to key stakeholders e.g. funders. We never share your information without asking for specific, unambiguous consent. This will be very clear on the relevant forms you complete. If in any case, this consent is not received then your data will not be shared.
Member communications
​As a member of the Small Charities Coalition, you will receive regular, relevant communications from us (e.g. a monthly digest and an events bulletin). Signing up as a member, supporter or mentor includes automatic subscription to these communication channels. From time to time, we may also contact you to ask you to engage with various campaigns we run on behalf of small charities.
You have the right to withdraw your consent from receiving our communications at any time. For more information, see section 5 below. You can unsubscribe from communication channels without affecting your membership status with the Small Charities Coalition.
Sharing personal data
We never share your information with third parties, unless it is necessary to deliver the service you have requested from us. Primary examples of this include, but are not limited, to:
-
Sharing data with our event venues for security and safety purposes, or to ensure our accessibility obligations are met. ​
-
Sharing data with our external event staff or volunteers, including our trainers.
-
Sharing data with your mentor if you have signed up for the mentoring programme.
-
Sharing your data with an expert referral partner if you have contacted our support line.
5. Your Data Subject Rights
SCC as an organisation is committed to ensuring the rights and freedoms of our website users and members are respected and that you as a data subject are enabled to exercise your rights. Under data protection law, you have specific rights including
To update your data
If you wish to access or rectify personal data that has been collected (see section 3 for examples) or if you wish to receive any personal data we hold on you, please contact membership@smallcharities.org.uk and we will respond to your request within one calendar month.
​
To delete your data
If you wish to have your data removed entirely from our records, please contact [email protected] and we will respond to your request within one calendar month.
Please note that for legal reasons we are required to keep financial/transactional records for a minimum period of six years from the end of the financial year in which the transaction was made.
​
To move your data
If you wish to have your data transferred from the Small Charities Coalition to another organisation, please contact [email protected] and we will respond to your request within one calendar month.
To withdraw your consent
If you wish to withdraw your consent from receiving our email communications, this can be done by clicking ‘update your preferences’ or ‘unsubscribe’ at the bottom of an email you receive from us.
Please note: This does not apply to emails sent by the Small Charities Coalition services team which relate directly to the service you have requested or purchased, these emails may not have an unsubscribe function. However you can reply to these emails at any time with any concern or questions about your personal data.
To object to, or restrict data processing
If you object to the processing of your personal data, or wish to restrict the way in which it is processed by us, please contact membership@smallcharities.org.uk and we will respond as soon as possible. Please note that this may affect our ability to deliver our services to you.
6. How long we retain your data
We retain your personal data for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation, typically 6 years). In addition, personal data may be securely archived with restricted access (and other appropriate safeguards) where there is a need to continue to retain it.
​
We will ask you on a regular basis to update your membership details with the Small Charities Coalition.
Financial records, including those of event payments and refunds, will be retained for a minimum period of six years from the end of the financial year in which the booking was made in order to comply with statutory obligations.
7. How we keep personal data safe
The smallcharities.org.uk website processes a small amount of personal data. However, we take our duty to protect this data very seriously and have in place technical and organisational safeguards to do this.
Examples of technical safeguards include: regular security testing; website backups; disaster recovery systems, cryptography hash functions, autolocking, lock-outs and data restoration
Examples of organisational safeguards include: access controls to personal data; staff training; organisational policies, procedures, and handbooks.
To the best of our ability, we will keep any personal data safe. However, no system or transmission over the Internet is 100% secure. This means that we are unable to absolutely guarantee the security of personal data.
If you become aware of something that gives your concern about the security of your personal data, please contact [ ].
8. Use of Third Parties
As an organisation SCC use a small number of third-party service operators to host our website, for our CRM and to enhance the experience of our website. The table below provides information about the service, why we are using it, additional information and links to their Privacy and Cookie notices. Please be aware that when you click these links, you are leaving our website and we have no control over these third-party websites use of personal data or cookies.
Please note: Some of these companies may transfer data outside the EU/EEA. In such cases additional safeguards such as Standard Contractual Clauses and Data Processor Addendums are in place.
​
​
​
​
​
​
​
​
Additional Information
Link to Service Privacy and Cookie Policy
Eventbrite
This service enables you to book events and programmes with us
You can contact us directly by email.
Mailchimp
This service enables you to subscribe to our newsletter
You can access our newsletter on our website.
We have opted out of Mailchimp’s Data Analytics Project. You can too at https://mailchimp.com/dsar-requests/
Salesforce
This is our CRM system to enable us to properly manage our membership data
This service provides a core function and you are not able to opt out without affecting your membership status.
Salesforce have extremely robust security measure and data protection features to protect personal data.
WIX
This is the service that hosts our website
This is not an option
Wix has been audited and certified as ISO 27018 compliant. The ISO 27018 certification outlines industry best practices for handling personally Identifiable Information (PII) in a public cloud computing environment.
https://www.wix.com/about/privacy
9. Our Social Media Presence
We have a presence on social media platforms such as Facebook and Twitter. These accounts are used to post information such as notices about our events and to promote the activities of our members by reposting appropriate content. Occasionally, we may run a competition or promotion through these channels.
Please be aware that any responses to our content on these platforms is done through your own choice, at your own risk and without expectation of privacy. We say this because we are not able to control how other users on these platforms may act. We are also not able to control how these platforms may use your personal data nor do we endorse how these services use personal data.
The table below lists our social media account platforms with links to their privacy and cookie notices. We advise you to read these policies in advance of using their services. Please be aware that when you click these links, you are leaving our website and we have no control over no do we endorse these third-party websites use of personal data or cookies.
Social Media Platform
Links to Policies
YouTube
10. Questions or complaints
If you have questions or a complaint about the way your personal data has been processed by the Small Charities Coalition, please email membership@smallcharities.org.uk and we will look in to this for you as a matter of priority.
​
If you wish to take your complaint further, you can contact the Information Commissioner’s Office (ICO), which is the independent regulatory authority who exist to uphold information rights in the UK. For more information, visit their website or call their helpline on 0303 123 1113.
​
Updates to this privacy statement will appear on this website. This privacy statement was last updated on November 2020.
