Privacy

Calderdale Thriving Communities Privacy Policy:

Calderdale Thriving Communities promises to take great care with your personal data, and commits to protecting any personal information obtained about you while visiting our website.

This Privacy Policy sets out how and why we obtain, use and protect personal information.

Who we are

In this Privacy Statement, whenever you see the words ‘we’, ‘us’, ‘our’ or ‘Calderdale Thriving Communities’ it refers to the Calderdale Thriving Communities, a partnership project led and managed by Everybody Arts whose registered address is Shaw Lane, Halifax, HX3 9ET. 

This Privacy Policy relates to information which is obtained by Calderdale Thriving Communities and for which Everybody Arts is the Data Controller.

If you have any queries or questions about this Privacy Statement or how we use your personal data, please get in touch by emailing hello@wowcalderdale.co.uk.

Our Privacy Statement 

Your privacy is extremely important to us. This Privacy Statement, which we are required to provide by law, explains what personal data we collect about you, how and why we use it, and explains your rights in relation to your personal data. Your personal data means any information which identifies and relates to you (or from which you can be identified) for example your name and contact details. 

We may amend this Privacy Statement from time to time. 

What personal data do we collect? 

We will only collect the personal data we need and most of the personal data we collect is provided directly by you. The personal data (including any special category data) we may collect could include: 

  • Information you provide when filling in forms on our website www.wowcalderdale.co.uk. This includes information provided when completing our enquiry forms or submitting feedback. This may include your name, your organisation’s name, email address, postal address and telephone number. We may also ask you for information when you report a problem with our website.

  • Details you include in your correspondence with us, and our responses

  • Your experience of social prescribing

  • Your responses to our research surveys, if you choose to participate

  • Details of your visits to our site including (but not limited to) web server statistics, traffic data, location data and details of the web pages that you access. We may collect information about the device you use to view the site, its operating system and browser type via the web server log files, for system administration and to analyse aggregate information. This is statistical data about our users’ browsing actions and patterns, and does not identify you individually.

Some of the data we collect about you might include special category data, which is data relating to: 

  • Physical or mental health

  • Racial or ethnic origin

  • Political opinions

  • Religious or philosophical beliefs

  • Trade union membership

  • Genetic data

  • Biometric data

  • Sexual orientation and sex life

 We will only collect special category data where we have a basis in law to do so. For more information, see “Our lawful basis for using your personal data” section below. 

How we use your personal data 

We use your personal data in the following ways: 

  • To provide you with information or services that you request from us

  • To promote our activities and raise awareness of social prescribing

  • Where you have provided consent, to send you marketing communications about items we think may be of interest to you

  • For feedback and understanding of individual experiences of social prescribing, including audio, video, photographs and written personal stories

Our lawful basis for using your personal data 

When we process your personal data for the purposes outlined in this Privacy Statement, we must have a lawful basis for doing so. Our lawful basis will vary depending on the purpose, but the lawful bases we generally rely on are: 

  • performance of a contract – to carry out our obligations arising from any contracts entered into between you and us,

  • consent – where we have obtained your consent to collect or use your personal data for a particular purpose, e.g. marketing,

  • legitimate interests – where we have a legitimate interest to process your personal data for purposes related to the advancement of social prescribing through promotion, collaboration and innovation, to help us improve, to listen to feedback,

  • legal obligation – in some circumstances we may need to process your personal data to comply with a common law or statutory legal obligation.

 Where we process special category data, such as health data, as well as one of the above lawful bases, we must also have an additional lawful basis. The additional lawful bases that we most commonly use for processing special category data are: 

  • Not-for-profit bodies

  • Explicit consent

  • Information has been clearly or obviously made public by you – e.g. if you have posted data about yourself including your physical or mental health on a blog

  • Legal claims

 How we share your data 

We may share your personal data with companies listed on our directory or that are part of our partnership. If that is the case, we ensure that we have contracts in place with our suppliers, and that the contracts include the required data protection provisions. For example, we will share data with suppliers who: 

  • Sometimes we partner with other organisations where it is necessary for a particular purpose e.g. in relation to funding or grant applications.  

  • We may also share data where required with legal advisors, accountants, auditors and professional service firms who act on our behalf. 

  • Where required, we may also share your data with other organisations for the prevention and detection of crime including fraud, or where we are legally required to do so. 

We do not sell your personal data for other organisations to use.  

How long we retain your personal data 

 We will only hold your personal data for as long as it is needed for the purposes we collected it for. The precise period of time will depend upon the particular information, what we are using it for and any legal or statutory requirements. We maintain a Data Retention Policy which includes our agreed retention periods for specific types of information.

How we protect your personal data  

We take the security of your personal data seriously and use technical, organisational and physical security measures to protect your personal data. Unfortunately, the transmission of information via the internet is not completely secure.  Although we will do our best to protect your personal data, we cannot guarantee the security of data that you transmit to our site; any transmission is therefore at your own risk. 

We also provide appropriate training to our employees to help us comply with our data protection obligations. 

Marketing 

If you have signed up to receive marketing from us, we may send you our Newsletter and other information that we think may be of interest to you. We send this information by email. 

You can opt-out of receiving marketing from us at any time by replying to the email with ‘Unsubscribe’ in the subject line.

Cookies 

Calderdale Thriving Communities would like to use cookies. A cookie is a small piece of data (text file) that is sent from a website when visited by a user and stored on their computer by their web browser. Cookies are designed to improve the browsing experience of the user by recording a user's browsing activity.

 Your Data Subject Rights 

 You have a number of legal rights under data protection laws including: 

  • Access to your personal data – you can ask us to provide a copy of your information together with specified details about how we use your personal data

  • Rectification – If you believe that your personal data is inaccurate, incomplete or out of date, you may ask us to rectify it

  • Erasure – in certain circumstances, you may have a right to request erasure of your personal data but this is not an absolute right

  • Restricting processing – you may ask us to restrict or suppress the processing of your personal data in certain circumstances

  • Data portability – in some cases, you have a right to move, copy or transfer certain personal data that have been provided by you to another organisation

  • Objection – you can object at any time if you want us to stop sending you direct marketing. You can also object to other types of processing in certain circumstances.

  • Automated decision making and profiling – if we undertake any automated decision making or profiling using your personal data, you have the right to challenge and request a review of any automated decision we make.

  • Withdrawal of consent – if our legal basis for processing your personal data is consent, you may withdraw your consent at any time.

 Many of these rights are not absolute or may be subject to exemptions in certain circumstances. 

 If you wish to exercise any of these rights, you can contact us by emailing hello@wowcalderdale.co.uk.

 You may also find further information about your rights using the Information Commissioner’s Officer (ICO) website: https://ico.org.uk/your-data-matters/ 

 If you are not happy with how we handle your personal data, please contact us by emailing hello@wowcalderdale.co.uk.  You may also choose to make a complaint to the ICO.

 Updates 

This Privacy Statement is updated from time to time. This is for example if a change is needed due to legal requirements or a change in processing activities. Please check this page from time to time to see the most current version.

 We last updated this Privacy Statement on 08 April 2024.

Embedded Community Box Privacy Policy

  In the following Policy,

  * "we" refers to Fraction 7, Ltd, makers of Community Box

  1. What data we store on your device

  We do not store any data on your device.

  2. What we track

  We monitor activity in, and uploads to, Boxes. This is both to ensure there are no violations of the Terms and Conditions, or in order to comply with requests from law enforcement or other authorised government agencies.

  3. What data we store

  We store any data that is necessary for the display and processing of a Box (e.g., the box contents themselves, and any settings or customisations that have been made to the Boxes). We also store your contact details so that we can get in touch with you for purposes in connection with the business. We also store usage metrics in order for our internal teams to improve the Community Box experience.

  4. What data we share

  We are committed to your privacy and we do not share data with any 3rd parties, except in the case of requests from law enforcement and other authorised government agencies.

  5. How we process your data

  Your data is stored and processed in the form of reports, and real-time monitoring and metrics. These are used internally within our company to allow us to improve our services so we can improve the Community Box user experience.

  6. How you can obtain and erase the data we store about you

  If you wish to obtain copies of any data we store about you, or for us to erase that data (note that this would imply terminating your account with us), then you can email hello@communitybox.co with the subject line "GDPR request" and we will follow up with you to ascertain what action is required.