1.1 We are committed to safeguarding the privacy of our website visitors and in-store customers; in this policy we explain how we will treat your personal information.
1.2 We will ask you to consent to the storage and use of your personal information in accordance with the terms of this policy when submitting any forms on our website or providing personal information in store.
Collecting Personal Information
2.1 We may collect, store and use the following kinds of personal information:
2.2 Before you disclose to us the personal information of another person, you must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with this policy.
Personal Data of Children
3.1 Our website and services are expected to be targeted by persons over the age of 13.
3.2 If we have reason to believe that we hold personal data of a person under that age, such data will be deleted.
Using Personal Information
4.1 Personal information submitted to us through our website will be used for the purposes specified in this policy or on the relevant pages of the website.
4.2 We may use your personal information to:(a) administer our website and business;
4.3 We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing unless you have specifically chosen to.
Disclosing Personal Information
5.1 We may disclose your personal information to any relevant staff members, officers, insurers, professional advisers, agents, suppliers or subcontractors in so far as reasonable necessary for the purposes set out in this policy. Your personal information stored on our website is also accessible to Raising IT.
5.2 We may disclose your personal information:
5.3 Except as provided in this policy, we will not provide your personal information to third parties.
Retaining Personal Information
6.1 This Section 6 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal information.
6.2 Personal Information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
6.3 Notwithstanding the other provisions of this Section 6, we will retain documents (including electronic documents) containing personal data:
6.5 If providing a profile image for fundraising or for your account on our website, such image will be kept in our database for up to 12 months before being manually deleted.
Security of Personal Information
7.1 We will take technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
7.4 We have taken all steps necessary to ensure that any information transmitted through our website is encrypted and fully protected by using a SSL certificate on all areas of our website.
7.5 You are responsible for keeping the password you use for accessing our website confidential; we will not ask you for your password (except when you log in to our website).
7.6 Information submitted to us in store or via telephone for the purposes of Volunteering or Business Interests is likely to be held on Emmaus South Wales’ server. This server is firewalled, encrypted. The server is also Cloud Backed-up, this is also firewalled and encrypted.
7.8 Information submitted to us in store or via telephone for the purposes of Gift Aid will be stored on our EPoS system, Kudos. This is accessible to staff members. This information may also be passed on to HMRC.
7.9 Information submitted to us online for the purposes of Gift Aid will be stored on our website, this is accessible only to relevant staff members and Raising IT. This information may also be passed on to HMRC.
7.11 Information submitted to us online for the purposes of delivery of large items will be stored on our website and on our EPoS system Kudos. This is accessible to staff members and Raising IT.
7.14 Information passed onto our courier myHermes, for the delivery of small items purchased through our website and through our eBay store are stored on myHermes servers which are located outside of the European Economic Area (“EEA”).
7.15 Payment information submitted through our eBay store is stored and processed by PayPal. This information is stored on servers which are located in the United States and elsewhere in the world where PayPal facilities are located.
8.1 We may update this policy from time to time by publishing a new version on our website.
8.2 You should check this page occasionally to ensure you are happy with any changes to this policy.
8.3 We may notify you of changes to this policy [by email or through the private messaging system on our website].
9.1 Under certain circumstances, by law you have the right to:
9.2 You may instruct us to provide you with any personal information we hold about you; there is no charge for this but provision of such information will be subject to:
9.3 We may withhold personal information that you request to the extent permitted by law.
9.4 You may instruct us at any time not to process your personal information for marketing purposes.
9.5 In practice, you will need to expressly agree in advance to our use of your personal information for marketing purposes, or we will provide you with an opportunity to opt out of the use of your personal information for marketing purposes at any time by emailing [email protected]ussouthwales.org.uk
Using our website
Third party websites
10.1 Our website includes hyperlinks to, and details of, third party websites.
10.2 We have no control over, and are not responsible for, the privacy policies and practices of third parties.
11.1 Please let us know if the personal information that we hold about you needs to be corrected or updated.