Privacy Policy: 17.04.18
We are IVE Ltd (Company No 03345236 Charity No 2074583 and all our subsidiary companies are committed to safeguarding your privacy. At all times we aim to respect any personal data you share with us, or that we receive from other organisations, and keep it safe. This Privacy Policy sets out our data collection and processing practices and your options regarding the ways in which your personal information is used.
Should you need to contact anyone at IVE regarding this policy please address your query to:
Write to: The Half Roundhouse, Roundhouse Business Park, Graingers Way, Leeds LS12 1AH
Email: Hello@weareive.org
Phone: 0113 322 3050
This Policy contains important information about your personal rights to privacy. Please read it carefully to understand how we use your personal data. Our privacy policy is reviewed regularly to ensure that it reflects how we use your information. Any changes will be notified to you by updating this policy so please check back to see if any changes have been made that are important to you. Where appropriate changes will be notified to you by email.
This privacy policy was last updated on 17/04/2018
The provision of your personal data to us is voluntary. Providing us with your personal data means you will be able to receive our expert resources, participate in our programmes, access our training, attend our meetings, make a donation, participate in our programmes, apply for employment, volunteering or other work with us and promote your offers or case studies more widely.
How we collect personal information about you:
We may collect personal information from you when you interact with IVE. There are lots of different examples of interaction which include: If you enquire about our work, or our events, if you make a donation, or apply for a job or volunteer with us or otherwise provide us with personal information. This may be when you phone us, email us, visit our website, sign up to attend an event or training session, through the post or in person.
You may give us personal information DIRECTLY
You may also give us personal information INDIRECTLY:
You may give permission to OTHER ORGANISATIONS to share it or it is PUBLICLY AVAILABLE INFORMATION
We use this information to gain a better understanding of you and to improve our communications, our business offer and fundraising activities.
These activities may include measures of wealth when it is available from public registers or other external sources. We may, from time to time, use third party suppliers to undertake these activities on our behalf. This helps us to understand a bit more about the people who support us so that we can make appropriate requests to those who may be able and willing to give more than they already do, enabling us to raise funds sooner and in a more tailored way than we otherwise would.
What information do we collect?
We may collect, store and use the following kinds of personal data:
However, we may request other information where it is appropriate and relevant, for example
Do we process sensitive personal information?
Applicable law recognises certain categories of personal information as sensitive and therefore require more protection including information for equal opportunities monitoring (where appropriate). We may also collect and store sensitive personal data if there is a clear reason for doing so; and will only do so with your explicit consent or where the law requires us to do this.
How and why will we use your personal data?
Personal data, however it has been provided to us, will be used for the purposes specified in this Policy or in relevant parts of the website.
We may use your personal information to:
Supporter and Stakeholder research/profiling
We may use your personal information to undertake research to gather further information about you from publicly accessible sources. This helps us to get a better understanding of your background, interests and preferences in order to improve our communications and/or interactions with you, to help ensure they are targeted to be relevant and appropriate, and to provide information (sometimes through third parties) about our services which we consider may be of interest to you.
Facebook & Instagram marketing
We may use some of your personal information to participate in Facebook’s Custom Audience , Lookalike Audience and programs, which enable us to display adverts to both existing and prospective supporters when they visit Facebook or Instagram. We may provide your email address to Facebook so they can determine whether you are a registered Facebook or Instagram account holder with them. Our adverts may then appear when you access Facebook or Instagram. Some of your data is sent in an encrypted format that is deleted by Facebook (a) if it does not match with a Facebook or Instagram account or (b) after they confirm you are a registered account holder.
For more detailed information please see
and Facebook’s data policy at https://en-gb.facebook.com/policy.php.
Twitter marketing
We may use some of your personal information to participate in Twitter’s Tailored Audience programs, which enable us to display adverts to both existing and prospective supporters when they visit Twitter. We may provide your email address, and mobile phone number to Twitter so they can determine whether you are a registered account holder with them. Our adverts may then appear when you access Twitter. Some of your data is sent in an encrypted format that is deleted by Twitter (a) if it does not match with a Twitter account or (b) after they confirm you are a registered account holder.
For more detailed information please see https://legal.twitter.com/ads-terms/us.html#twitteradsprogramt%26cs and https://legal.twitter.com/ads-terms/us.html#twitterconversiontrackingprogramt%26cs
Linkedin marketing
We may use some of your personal information to participate in Linkedin’s Contact targeting and Website Retargeting programs, which enable us to display adverts to both existing and prospective supporters when they visit Linkedin. We may provide your email address to Linkedin so they can determine whether you are a registered account holder with them. Our adverts may then appear when you access Linkedin. Some of your data is sent in an encrypted format that is deleted by Linkedin (a) if it does not match with a Linkedinaccount or (b) after they confirm you are a registered account holder.
For more detailed information please see https://www.linkedin.com/legal/sas-terms
Google Analytics
We may use some of your personal information to analyse our digital performance, for example to see how our website can be improved to help us achieve the purposes set out in section 11 below, to record how you are using our website or to assess the popularity of marketing campaigns.
For more information on how we use your personal information in relation to Google Analytics, please view our cookie policy by clicking this link. Our cookie policy also contains information about how you can opt-out of the collection of information for such purposes.
Hotjar
We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device’s IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link.
You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.
Communications, fundraising and marketing
Where you have provided us with your physical address, we will contact you by post; and where you have provided appropriate consent, also by telephone and e-mail, with targeted communications to let you know about our work, events, campaigns and other activities that we consider may be of particular interest; about the work of IVE and to ask for donations or other support.
Donations and other payments
All financial transactions carried out on our website are handled through PayPal and Eventbrite, third party payment services providers. We recommend that you read their privacy policy (available at https://www.eventbrite.com/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_US and https://www.paypal.com/gb/webapps/mpp/ua/privacy-full) prior to effecting any transactions with us We will provide your personal data to these organisations only to the extent necessary for the purposes of processing payments for transactions you enter into with us. We reserve the right to change our third party payment service providers subject to the needs of our business, without need for notice, this Privacy Policy should therefore be checked regularly for updates. We do not store your financial details for any of these web based payments.
Children’s data
We may process data of people under the age of 16 that participate in our programmes. Where we do this information will be encrypted and access to this information limited to those staff requiring it in order to run the programme and provide necessary reporting only to our funders. We will securely store this information for a reasonable period and as required by company, funder or for legal reasons.
Other disclosures
We will disclose your information to regulatory and/or government bodies and/or law enforcement agencies upon request only when required to do so in order to satisfy legal obligations which are binding on us.
Security of and access to your personal data
We take the security of your personal information extremely seriously. We’ve implemented appropriate physical, technical and organisational measures to protect the personal information we have under our control, both on and offline, from improper access, use, alteration, destruction and loss.
Your information is only accessible by appropriately trained staff, volunteers and contractors, or contracted agencies and/or suppliers who are processing data on our behalf.
We may also merge or partner with other organisations and in so doing transfer and/or acquire personal data.
We may transfer and/or store personal data collected from you to and/or at a destination outside the European Economic Area (“EEA”). Please note that some countries outside of the EEA have a lower standard of protection for personal data, including lower security requirements and fewer rights for individuals. Such personal data may be processed by agencies and/or suppliers operating outside the EEA. If we transfer and/or store your personal data outside the EEA we will take reasonable steps to ensure that the recipient implements appropriate measures to protect your personal data and will use best practice guides and recommended legal agreements to do this.
Otherwise than as set out in this Privacy Policy, we will only ever share your data with your informed consent.
Your rights
Where we rely on your consent to use your personal information, you have the right to withdraw that consent at any time. This includes the right to ask us to stop using your personal information for direct marketing purposes or to be unsubscribed from our email list at any time. You also have the following rights:
To exercise these rights, please send a description of the personal information in question using the contact details below. We also have specific pages to unsubscribe from our email list which you can find here https://weareive.us6.list-manage.com/unsubscribe?u=a16d7eb4bcc9b34425c2f0b74&id=1c8b07e63a . Where we consider that the information with which you have provided us does not enable us to identify the personal information in question, we reserve the right to ask for personal identification and/or further information.
Please note that some of these rights only apply in limited circumstances. For more information, we suggest that you consult ICO guidance – https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/ – or please contact us using the details below.
You are further entitled to make a complaint about us or the way we have processed your data to the Information Commissioner’s Office (“ICO”). For further information on how to exercise this right, please see the guidance at https://ico.org.uk/for-the-public/personal-information. The contact details of the ICO can be found here: https://ico.org.uk/global/contact-us/.
Lawful processing
We are required to have one or more lawful grounds to process your personal information. Only 4 of these are relevant to us:
(1) Consent
We will ask for your consent to use your information to contact you by phone, send you electronic or postal communications such as newsletters and marketing and fundraising emails, for targeted advertising and profiling, and if you ever share sensitive personal information with us. Where our programmes are enhanced by the sharing of information (ie Local Cultural Education Partnerships, training) we will ask your consent to share with other relevant parties.
(2) Contractual relationships
Most of our interactions with subscribers and website users are voluntary and not contractual. However, sometimes it will be necessary to process personal information so that we can enter contractual relationships with people. For example, if you apply for employment or to volunteer with us, if you book on our events, participate in programmes or purchase something via our online shop.
(3) Legal obligations
Sometimes we will be obliged to process your personal information due to legal obligations which are binding on us. We will only ever do so when strictly necessary.
(4) Legitimate interests
Applicable law allows personal information to be collected and used if it is reasonably necessary for our legitimate activities (as long as its use is fair, balanced and does not unduly impact individuals’ rights).
We will rely on this ground to process your personal data when it is not practical or appropriate to ask for consent.
Achieving our purposes
Governance
Publicity and income generation
Operational Management
Purely administrative purposes
Financial Management and control
When we use your personal information, we will consider if it is fair and balanced to do so and if it is within your reasonable expectations. We will balance your rights and our legitimate interests to ensure that we use your personal information legally and fairly.
Data retention
In general, unless still required in connection with the purpose(s) for which it was collected and/or is processed as outlined in our Data Retention Schedule, we remove your personal information from our records. However, if before that date your personal information is no longer required in connection with such purpose(s), we are no longer lawfully entitled to process it or you validly exercise your right of erasure, we will remove it from our records at the relevant time.
In the event that you ask us to stop sending you direct marketing/fundraising/other electronic communications, we will keep your name on our internal suppression list to ensure that you are not contacted again.
Policy amendments
We keep this Privacy Policy under regular review and reserve the right to update from time-to-time by posting an updated version on our website, not least because of changes in applicable law. We recommend that you check this Privacy Policy occasionally to ensure you remain happy with it. We may also notify you of any important changes to our privacy policy by email.
Third party websites
We link our website directly to other sites. This Privacy Policy does not cover external websites and we are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external websites you visit via links on our website. Updating your information on third party websites will not be shared with us unless you give consent or there is a legal or contractual reason for processing.
Updating information
You may ask us at any time to update your details, correct or remove information you think is inaccurate or to check the information we hold about you by contacting us via post or email
Breaches
Any data breaches will be reported to the Information Commissioners Office (ICO) within 72 hours. You will also be notified any breach, the nature of this, what has happened, the likely consequences and any action being taken by us. You will also be provided with contact details of the person to refer to for more information.
Contact
We are registered with the Information Commissioners Office (ICO). The Director of Finance & Administration is our Registered Data Controller and the Management Information Officer is our Data Processing Officer. Please let us know if you have any queries or concerns whatsoever about the way in which your data is being processed by either emailing us at hello@weareive.org, telephone 0113 322 3050 or writing to us at 31 The Calls, Leeds, LS2 7EY