Privacy Policy Privacy Notice for Service Users Privacy NoticeWhat we do with your personal information – for people who are/have been or apply to be a service user with our charity. Perennial Gardeners’ Royal Benevolent Society is the UK’s only charity dedicated to helping people who work in horticulture, when times get tough. We recognise and understand that privacy is very important. We want all of our service users, ex-service users and applicants to the service to be confident that we will handle your personal information with care and respect. To prevent unauthorised access to your personal and sensitive information, maintain data accuracy and ensure the correct use of information in accordance with this privacy policy, we have put in place appropriate physical, electronic and managerial procedures to safeguard and secure the information we collect. CONTROLLER’S CONTACT DETAILS Perennial is the controller for the personal information we process. Our registration number on the Data Protection Register run by the Information Commissioner’s Office is Z8659551. You can contact us by phone, email and post: Telephone:01372373962 Email:[email protected] Address:Perennial, 115-117 Kingston Road, Leatherhead, Surrey KT22 7SU HOW DO WE GET OUR INFORMATION? Most of the personal information we process is provided to us directly by you for one of the following reasons: You have made an application to receive our debt advice or casework service You have made an application for financial help Our debt advisers or caseworkers are helping you and you supply them with the information required to progress your case. When photographers give us copies of photographs/videos in which you can be identified, they also give us your personal details to confirm that you have consented to us using the image. We also receive personal information indirectly, in the following scenarios: Another person or organisation contacts us on your behalf and gives us some background information. Wewill always contact you in this case and ask if you wish to apply to become a beneficiary or use our services. We have contacted another person or organisation to verify your horticultural background and they give us your personal information in their response with your prior consent. We have contacted another person or organisation in order to carry out advice or casework e.g. we have contacted your GP for medical evidence to help with a benefit claim and they give us your personal information in their response, with your prior consent. PROCESSING YOUR INFORMATION We use your information for the following purposes: To communicate with you – by post or telephone – to provide you with information relating to your personal involvement with the charity. To communicate with you, by Email or Text – to provide you with information relating to your personal involvement with the charity when you have given us permission to do so. To provide our Casework Services to you (e.g. benefits, debt advice, grants etc.) Some personal information – such as National Insurance Numbers – may be used for security purposes so that we can verify your identity On occasion, we may also use your personal information for internal administration purposes to statistically analyse our operations of conduct service reviews. We may use photographs/videos of you in our promotional and marketing materials, if you have given us consent to do so. We will not use your information for direct marketing or to ask for donations. SHARING YOUR INFORMATION Perennial will only share your information with third parties if it is needed to progress your case, if it is in your best interests and/or when we have explicit consent from you to do so. We use data processors who are third parties who provide services for us, with whom we have contracts in place. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct. Perennial may need to disclose information, if required to do so by law. More information on this is contained in our Privacy Policy. Your personal information will never be sold or passed to any third party for any other purpose. STORING YOUR INFORMATION Personal and other information (including any information provided about your family, personal finances or health) is stored securely on a database that can only be accessed by staff of Perennial and its database managers, with whom we hold data contracts. If a third party contacts us on your behalf, and after contacting you, you tell us that you do not wish to become a beneficiary or receive our services, we will keep very brief information about you for 12 months for our own business records. When your case is closed, the database file will be closed and any paper documents that have not been scanned and destroyed, will be archived. After 15 years of no contact (or occasionally longer if necessary for business purposes), your case on the database will be archived (put out of use but still retrievable if you apply to use our service again) and the paper file will be destroyed. If you use our budgeting tool via the website and choose to register – your user name, email address and any financial information supplied will be stored in the administration area of the website. This can only be accessed by selected staff of Perennial and the website hosts (with whom we hold data contracts) and will only be accessed with your permission. The information will be retained on the website until you ask for us to delete it or after a year of inactivity – whichever is the sooner. If you use the budgeting tool without registering, your information will be deleted after 3 months. CHANGES TO THIS PRIVACY NOTICE We keep our privacy notice under regular review to ensure it is up to date and accurate. Last reviewed April 2021. FURTHER INFORMATION For further information about your rights under the UK General Data Protection Regulation, visit the Information Commissioners Office website at https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/ Your data may also be available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behavior of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply: Your data will be made available to our website provider The data that may be available to them include any of the data we collect as described in this privacy policy. Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA. They will store your data for a maximum of 7 years. This processing does not affect your rights as detailed in this privacy policy. Once you’ve added your Privacy policy content please UPDATE and APPROVE this page.