Who we are
Our website address is: http://www.paracarnival.co.uk.
What personal data we collect and why we collect it
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Who we share your data with
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Your contact information
How we protect your data
What data breach procedures we have in place
What third parties we receive data from
What automated decision making and/or profiling we do with user data
Industry regulatory disclosure requirements
Paracarnival exists to create a fully inclusive services, where people of ALL abilitites have the same opportunities as everybody else. Our supporters are important to us, and we’re committed to keeping your data safe, making it clear what information we collect from you, and how we use it.
You can change how we contact you at any time, simply by contacting Supporter Care by email at email@example.com or calling us on ?????????
As part of our commitment to you, we have appointed a Data Protection Officer. You can contact them at firstname.lastname@example.org by writing to:
Postal address goes here
What data we collect and how we use it
The type and quantity of data we collect and use depends on why you have provided it.
- We will only collect, use and otherwise handle your personal data:
- where you have consented to this for specified, explicit and legitimate purposes
- where this is necessary to fulfil legal obligations that apply to us
- where it is necessary for our legitimate interests relating to running our daily operations, as long as, in each case, these interests are in line with applicable law and your legal rights and freedoms.
If you support us, for example by signing up to an event, donating, signing up to Gift Aid, or signing up to a campaign, we will usually collect your name, contact details, and whether you would like to be contacted, and how we would do so. If appropriate, we may also ask to collect your date of birth, financial details, Gift Aid eligibility, reasons for support, information relating to health and disability, and responses to our campaigns.
We collect this data so we can keep you up to date with information and products you have requested, or may be interested in, and to ask for more support, in the way that you have chosen; to run our events; and to fulfil our legal responsibilities for financial and Gift Aid reporting. We will keep your data only for as long as necessary. If you have kindly donated to us, we are required to keep this data for seven years. If you have not donated to us, we will only keep your data for three years.
If you volunteer with us, or enquire about our volunteering opportunities, we will usually collect your name, contact details, emergency contact details, bank details, contact preferences, ethnicity, gender, availability to volunteer, disability (including physical and mental conditions) and criminal convictions.
We collect this data so that we can contact you about volunteering opportunities that come up; so that we ensure the safety of our volunteers, staff and customers; can pay expenses; carry out our awards programme; and to help us anonymously measure our inclusion and accessibility across our volunteering programmes. We will keep this data for two years after you stop volunteering for us.
Gift in Wills
Some of our supporters choose to let us know that they plan to leave a gift in their Will to Scope to help us carry out our important work. We will collect contact details and contact preferences of supporters who ask us for more information about how to leave a gift to Scope in their Will or who tell us that they are thinking about leaving a gift to the charity. We will use this data to keep in touch and send you other information and products that you are interested in. If you change your mind then we will only keep this data for three years.
If you tell us that you do intend to leave us a gift in your Will then we will collect contact details and contact preferences. We will use this data to keep in touch and send you other information and products that you have expressed an interest in. This data will be kept on file long-term, as hopefully it will be many years before your gift is realised.
Some of our supporters kindly tell us stories about their experiences to help us in our campaigns. We will record the details of the story, and contact details to enable us to get updated approval to use the story. We will keep this data for three years after you give it to us, and will always contact you each time we wish to use it.
Our supporters, volunteers and customers kindly let us use photography and images of them to help our campaigns and activity come to life. We keep these images stored in a secure location and will only use them with the subject’s permission. We keep these images for three years after we have been given them, unless you ask otherwise.
Part of the work we do involves carrying out research. If you agree to take part, we will record responses to questions that you give us, and your personal details. This data will be used to fulfil our research objectives, and may be shared for relevant projects. Your data will remain anonymous unless you consent to it being disclosed. The data we collect will be kept for five years.
Posts will be kept indefinitely.
We run a support and information helpline. We record only the data needed to help your enquiry. This data is not shared in any way and will not be used to contact you about other services or offers from Scope unless you give us permission to do so.
We will keep this data for one whole financial year after you contact us.
Scope offers a wide range of information and advice services to disabled people, families of disabled children, and businesses. We will collect your contact details and preferences, and any other data that is relevant to delivering the service to you. This information will only be used for the purposes of the service and not shared with the rest of Scope unless you give us permission to do so.
We will keep the data for up to six years, in line with contracts and government regulations.
Should you wish to register a complaint we will collect your name, contact details and details about the complaint to enable us to respond, monitor and improve our organisation. This data will be shared with any parts of Scope or any third parties who are involved in resolving the complaint, for example, agencies that we have partnered with.
We will hold this data for six years.
When someone visits scope.org.uk we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out information, such as the number of visitors to the various parts of the site.
We might also obtain your personal data through your use of social media such as Facebook, WhatsApp, Twitter or LinkedIn, depending on your settings or the privacy policies of these social media and messaging services. To change your settings on these services, please refer to their privacy notices, which will tell you how to do this.
We use a third-party provider, Mailchimp, to deliver our monthly e-newsletters. We collect statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our e-newsletter. For more information, please see Mailchimp’s privacy notice.
Should you not wish Scope to contact you in the future, we will hold your contact details on file. This will enable us to ensure that we comply to your wishes.
We will hold this data indefinitely. Should you wish to engage with Scope again then please get in touch with our Supporter Care team email@example.com.
Although children under 16 can fundraise with the consent and support of a guardian, we do not record their contact information. Instead, their parent or guardian’s details are recorded (with their contact preferences). Individuals over 16 can be recorded but still require a guardian as reference (for school contacts this can be a teacher).
For our services, the service is always provided to the family or parent. Data is supplied to us where we have a legal basis to collect and retain that data as per the contracts, or included in the case notes provided, for example by paediatricians or in independent support where there is a young person involved. This information is not shared with anyone not connected to providing the service.
Service providers and partners
Paracarnival will use contact details of personnel belonging to our service providers and partners for the purpose of managing the relationship and fulfilling each party’s obligations under the agreement with the supplier or provider. These contact details will be kept as long as the partnership or service provider agreement remains in
Sharing your data
Unless we are required to share your data for legal or regulatory reasons, to help with a complaint, or to administer a Gift in Will, we will never share your data with other organisations.
We do use third-party organisations to help us collect donations such as JustGiving and ??????????? and to help us fulfil our marketing. Where we use external companies to collect or process data on our behalf, we carry out comprehensive checks on these companies, and put in place contracts to control how they manage the data they may collect or have access to.
Keeping your data safe and up to date
At Paracarnival we ensure that the most appropriate technical controls are in place to keep your data safely. Access to your data is regularly reviewed and only accessible
to the relevant trained staff, volunteers and contractors.
Where we use external companies to collect or process data on our behalf, we carry out comprehensive checks, and put in place contracts to control how they
manage the data they may collect or have access to. Your data will be hosted on servers located in the UK, which will not be transferred out of the European Union.
We will only collect the data that we need to carry out the purposes you have contacted us for, or given us permission to use it for.
To enable us to carry out the purposes you have contacted us for, there will be occasions when we will make some data collection mandatory i.e. your name and address to claim gift aid, or your email address to access our services. If you don’t provide this data, we cannot carry out the purposes you have contacted us for. We will always tell you why these fields are mandatory.
At any time that you wish you can:
- gain access to your personal information
- object to the processing of your personal information
- object to the use of automated decision-making and profiling
- restrict the processing of your personal information
- ask for a copy of your personal data (known as data portability)
- rectify or correct your personal information
- have your personal information removed (known as Erasure or the ‘right to
Where you have provided consent to be contacted or to receive a service, you will be entitled to withdraw that consent at any time.
If you are at any point unhappy with the way that we handled your personal data, you can make a complaint to the Information Commissioner’s Office.
To make changes to how we contact you, please contact Supporter Care at Memebers@paracarnival.co.uk
Changes to this Policy