Privacy & Cookies Policy

All information you provide to us is held securely in accordance with the Data Protection Act 1998 and the EU General Data Protection Regulation.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

If you would like further information about Data Protection, the law and good practice, please visit the Information Commissioner’s website: https://ico.org.uk The Information Commissioner is the Data Protection statutory governing body for England and Wales.

Our address is Heathlands Drive, Prestwich, Manchester M25 9SB and our charity number, company number and registered data controller number are as set out above.

Our Data Protection Officer is Deborah Haberman. She can be contacted at info@thefed.org.uk

We will collect information from you when we communicate with each other by post, telephone, email, face-to-face or if you complete a printed application form or an electronic version via our website.

If you visit our website, we will collect certain information from you, depending on how you use the site:

• Anonymous data that is automatically collected from all visitors
  • Personal data that you voluntarily submit in connection with activities set out below
  • Financial data that you voluntarily submit in connection with any of the relevant activities set out below

If you submit such information, we will ensure that it is only used for the purpose for which it was submitted and will ensure that the data is held securely.

You may be asked to voluntarily submit personal information in order to:

• make a donation or set up a direct debit
  • support a Fed fundraiser
  • buy a ticket or register for an event
  • buy a gift card or other item
  • apply for a job vacancy
  • apply to be a volunteer
  • make an enquiry about any of our services or request other information or material
  • subscribe to our e-bulletin or other publication

We may collect and record information, which you have not submitted, in order to understand more about how our site is used, e.g. through Google Analytics. To do this we may send cookies to your PC or other device.

By browsing our website, you accept our use of cookies and consent to this. In order to remember that you have accepted our use of cookies, we will place a temporary cookie to remember your consent for 3 months and automatically issue a new consent request after this time.

Some cookies do not relate to our website such as pages concerning the processing of donations by our payment service provider or pages containing embedded content such as videos, Twitter feed, Facebook likes. You may receive cookies delivered from these websites.

We do not govern the publication of third-party cookies. To understand more about their cookies and privacy statements, please visit the relevant sites.

Find out more about cookies:  Google’s Analytics overview

Disabling Cookies
If you do not want cookies to be stored on your PC or other device you can disable this function within your web browser, though this may affect your navigation around our site.

The “Help” menu in the toolbar of most web browsers will tell you how to change your browser’s cookie settings, including how to have the browser notify you when you receive a new cookie, and how to disable cookies altogether.

You can always opt-out of Google Analytics cookies by using Google’s opt-out tool.

Processing your financial data via our website:

In order to process Direct Debit or Credit Card transactions we will ask for your card details. To ensure the maximum level of security is applied to your data, all transmissions over the internet are encrypted using SSL (Secure Sockets Layer).

Credit Card, Debit Card and bank detail information is not retained on our web servers but is transferred to our PCI compliant payment gateway services (for the purpose of collecting and recording payments).

If you are a service-user of The Fed, we will collect certain information from you in order to:

• support you or your family to access appropriate services
  • provide any appropriate service
  • assess you or your family’s needs for social care
  • ensure the safety and reduce the vulnerability of you, your family or other members of the Jewish and wider community
  • prove eligibility for services, where residency rights and immigration status are required
  • assist in assessment of your eligibility for funding, where grants and public funding is applied for
  • comply with our regulatory and legal obligations, including but not exclusively to, the Care Quality Commission, OFSTED, local authorities, NHS, Health and Safety Executive and the Charity Commission
  • reply to compliments or investigate and respond to complaints

We may receive information either directly from you or from other organisations where you have agreed that they may share your details with us, including:

• Event organisers or third-party websites such as JustGiving or VirginMoneyGiving where you are using these platforms to fundraise for The Fed
  • Synagogues for example, when promoting a joint appeal
  • Other organisations that we are working with, such as Will writing services, (only if you have agreed that they may let us know you have pledged to support us)

We may use your personal data with regard to:

• process and keep a record of your donations.
  • to administer raffles or auctions you participate in, including contacting you to let you know if you have won a prize.
  • to claim any relevant Gift Aid (if you agree that we can claim Gift Aid on your donations) and, as we are legally required, to keep a record of the claim and your Gift Aid declaration.
  • to, where necessary, prevent fraud.

If you tell us that you plan to support us financially in the future or that you have included The Fed in your Will, we will keep a record of your intentions

If you complete a form to register or enquire about an event, activity or volunteering opportunity, or if you respond to an invitation, we will consider this a request to send you details about the same, and will send you information including, where relevant, reminders. Where appropriate, we will use your information to identify any help we can offer, specific to the event, activity or opportunity and to provide necessary information to event organisers.

We may use your information to respond to your query or feedback or to send you relevant information such as fundraising materials or details of our services.

We may also keep a record of conversations we have with you, feedback you provide and any materials we send to you.

We may use your information to tell you about our services and how your support enables us to help people in the community.

We may use your information to let you know about ways you can support us, either financially, by attending one of our events, or through volunteering.

We may use your information to:

• process your application to become a volunteer
  • ensure your suitability to volunteer with The Fed, by viewing any appropriate qualifications, obtaining personal and professional references and any other information that we, in our sole discretion, feel is appropriate including, but not limited to, whether you have any criminal convictions, by seeing the results of a DBS check.
  • contact you about events, new volunteering opportunities, training opportunities and recruitment drives
  • maintain a record of the volunteering activities you have undertaken for us
  • send you our regular updates about volunteering opportunities and any other organisational information appropriate to you

We may use your information to process your application for employment by The Fed, including – but not limited to:

• confirming your identity
  • confirmation of your right to work in the UK
  • processing of DBS checks
  • completion of the interview and assessment process to consider if you are a suitable candidate
  • confirming your relevant experience, qualifications or training
  • obtaining your personal and/or professional references

We may use your information to:

• carry out a due diligence check
  • set up payment systems on our invoicing system
  • provide insurers with details of our drivers for inclusion on insurance schedules
  • provide our insurers, following a claim or potential claim, with the necessary information to proceed with any claim being made
  • record details of purchases made on behalf of tenants for delivery to personal addresses
  • record the names of individuals who are classified as eligible for VAT exemption
  • record the personal details of sessional workers for monitoring adherence to our requirements

Personal data used through the procurement and insurance claim process held by us may include your:

• name
  • contact details (e-mail, address, business telephone number, mobile number, fax number, postal address, company and department, country of residence (if applicable) and internet address
  • bank account details
  • documentation for identification
  • documentation relating to insurance cover
  • information from third parties, e.g. references

We may also process your data, where we have a lawful basis to do so, including where you have given your consent, if it is not already being processed for one of the above purposes, so as to:

• help review the quality of our services
  • identify areas for future development
  • receive and respond to compliments
  • investigate concerns or complaints
  • fundraiser
  • carry out market research
  • administer a promotional campaign
  • contact you with information about products and services
  • contact you about job and volunteering opportunities

The Fed may also use your personal data, after it has been anonymised, to allow for the statistical analysis of data to enable the organisation to target and plan effectively the provision of services. In deciding what personal data to collect, hold and use, we are committed to ensuring that it will comply with the Data Protection legislation.

If we wish to use your personal data for a new purpose which is different from the original purpose for which you gave your data to us, we will provide you with a new privacy notice which explains the new use, prior to commencing the processing. This will set out the relevant purposes and processing conditions. If consent is the legal basis for this new purpose, we will seek your prior consent to the new processing.

Under data protection law, you have the following rights:

• To know the purpose for processing your personal data
  • To withdraw consent to the processing of your personal data
  • To object to the processing of your personal data
  • To data portability
  • To request rectification and/or erasure
  • To request access to the information we hold on you by making a ‘Data Protection Act Subject Access Request’

If you would like to exercise any of these rights, please make a request in writing to our Data Protection Officer at our address above, providing

• enough information to enable use to identify who you are
  • proof of your identity and address (such as a copy of your driving licence or passport and a recent utility or credit card bill), and
  • details of the information to which your request relates

If you would like to unsubscribe from any email communication you receive, you can also click on the ‘unsubscribe’ button at the bottom of our email communication.

If you are dissatisfied with the way we have handled your individual rights you can lodge a complaint by contacting our Quality Assurance Officer by phone on 0161 772 4800; by email: alison.lightfoot@thefed.org.uk; or in writing to the address above.

If you feel The Fed has not satisfactorily handled your complaint, you can report your concerns to the Information Commissioner’s Office at https://ico.org.uk/concerns/ ; by telephone on 0303 123 1113; or in writing to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow SK9 5A

The Fed may use your personal data, after it has been anonymised so that individuals cannot be identified, for the statistical analysis of data to help us target and plan service provision effectively.
In deciding what personal data to collect, hold and use, The Fed is committed to ensuring that it will comply with data protection legislation. We have put in place appropriate safeguards and technical measures to protect your personal data.

As an organisation, we recognise that any personal data handled by us is held on your behalf and we respect this responsibility by adopting and maintaining high standards regarding the handling and use of that personal data

The Fed will always first consider and address privacy risks when planning to use or hold personal information in new ways, such as when introducing new electronic systems. We provide training to staff who handle personal information and treat it as a disciplinary matter if they misuse or do not look after your personal information properly. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

The Fed may disclose personal data to third parties, but only where it is necessary to comply with a legal obligation or permitted under data protection legislation, for example, where the disclosure is necessary for the purposes of the prevention and/or detection of crime; or where it is necessary for a third party working for or on our behalf and/or to provide services to you.

The information you provide us with may be shared, for example, with local authorities, GPs, the Department of Work and Pensions (DWP), HMRC and the Home Office.

There will be times when information will be disclosed to partner organisations providing services on behalf of The Fed. Once your details are no longer required, they will be deleted securely.
The Fed will ensure that proper steps are taken to keep your personal data safe and secure. and where this is disclosed to a third party, we will seek to ensure it too has appropriate systems and procedures in place to keep your data safe and prevent its loss.

Where we seek to disclose sensitive personal data about you (such as medical details) to third parties, we will do so only with your prior express consent or where we are legally allowed or obliged to do so.

If you choose to complete any of our online forms, we will not use the personal information you give us for marketing purposes without first gaining your consent. Your consent will be sought at the point of completing any online form.

We may pass your details to third-party service providers who are contracted to us who will be able to assist us with your request, for example, a counselling service.

These third parties are obliged to keep your details secure, will use them only to fulfil the request and will dispose of the information at the time when they are no longer required.

No personal information you have given us will be passed on to third parties for commercial purpose.

Your personal data will be held by us only for a limited period after you stop interacting with us. Further information on how long your data will be held for can be found in our Records Retention Schedule.

At this time, we do not share any data for planning or research purposes for which the national data opt-out would apply. We review all of the confidential patient information we process on an annual basis to see if this is used for research and planning purposes. If it is, then individuals can decide to stop their information being shared for this purpose. You can find out more information at https://www.nhs.uk/your-nhs-data-matters/.

Data obtained by us for the purpose of producing a person’s life-story book as part of The Fed’s My Voice Project is stored in Dropbox which is held in the US and locally on our server. A separate data protection policy has been developed for the purpose of that project.