Updated 30th April 2020
This is the Making Change Happen Collective Limited’s privacy statement. Making Change Happen’s address is 1 Grove Place, Bedford, MK40 3JJ. In this policy the United Kingdom data protection rules include: the GDPR 2016/679, The Data Protection Act 2018 (both take effect from 25 May 2018) and the Privacy and E-Communication Regulations 2003.
Making Change Happen Limited is a company registered in England and Wales with company registration number 06666977. Making Change Happen is registered as a data controller with the Information Commissioner’s Office under registration number A8336930.
The foundation of data protection as it applies to personal data is built upon 6 data protection principles:
- Lawfulness, fairness and transparency – personal data must be processed in a lawful manner and in a way that is transparent and fair to the data subjects.
- Purpose limitations – the personal data must only be processed for the purpose(s) for which it was collected.
- Data minimisation – we should only obtain the bare minimum personal data we need to process the data in the way we have said we will.
- Accuracy – we should do our best to ensure the personal data we have is accurate.
- Storage limitations – we should ensure that the personal data we have is stored in an appropriate manner to avoid it being seen or used by third parties.
- Integrity and confidentiality – we must ensure that the personal data is kept confidential and is not damaged or corrupted.
We want visitors viewing this website www.makingchangehappen.co.uk to be informed as to our use and care of your personal data.
By visiting the website www.makingchangehappen.co.uk you are deemed to be on notice of, and in agreement with, the manner in which we collect and process personal data that is received via this website. If you do not agree with the manner in which we collect and process personal data, you should stop using this website now and not revisit.
Making Change Happen policy on data protection
Your right to privacy is recognised and respected. Making Change Happen will not collect any personal information about you on this website without your clear permission. Any personal information which you volunteer to us will be treated with the highest standards of security and confidentiality in full compliance with the provisions of current valid law.
We do not collect any personal data about you on this website, apart from the information you volunteer. Any information you provide in this way will not be made available to any third parties unless we have received your express consent or unless we are obliged to do so by law. We may anonymise the personal data you submit and then use this data for statistical, market research, search engine optimisation (SEO) or promotional purposes in the normal way.
The data we collect
We collect the following types of personal data from you:
- Contact information, including email addresses, telephone numbers and residential/post addresses
- Dates of birth
We sometimes collect special category personal data relating to you. This is only where you provide us with this information and will only ever relate to your health, in particular, your mental health. We will never share this information with any third party. We do not collect any other special category personal data.
Obtaining copies of your data
In accordance with the data protection rules, you have the right to request that we provide you with a copy of the personal data we hold that relates to you. We will deal with any request in accordance with the data protection rules and will provide you with a copy of your personal data unless an exemption applies. In this situation we will inform you of why we haven’t been able to provide you with a copy of the personal data. In accordance with the data protection rules, we are obliged to destroy any personal data when the purpose for which it was obtained has ended. This may mean that we have deleted some of the personal data that you have requested. In this situation, we will be unable to provide you with a copy of this personal data.
If you wish to obtain copies of any personal data we hold, please write to us at: 1 Grove Place, Bedford, MK40 3JJ or email us at firstname.lastname@example.org. You should include any personal identifiers such as your name, address, phone number, e-mail address etc, so that we can readily identify who you are and what personal data you are asking for. For obvious data security reasons, we may require that you provide us with a valid photo identification to facilitate the access request. Indeed, we reserve the right to require, see and confirm photo identification before passing any personal data to a requestor.
Correcting inaccurate information
If you discover that we hold inaccurate information about you, you can request that we correct that information and Making Change Happen would very much encourage you to do so. Any such request must be in writing and should be transmitted to us either by post or by email at the addresses referred to above. we may require photo identification to confirm and fulfil the request.
We will review permissions already given by you before any actions are taken in respect of any further processing and update these as or if required by contacting you.
Deleting your data
In certain circumstances, you may also request that data which you have supplied be deleted. We may require photo identification to confirm and fulfil the deletion/rectification request.
If you have concerns about how personal data are processed via this website or indeed have any other relevant complaints, please do not hesitate to bring these to our attention by emailing email@example.com.
Right to communicate
If you provide us with any postal or email address, we may communicate with you by post or email to provide you with promotional information regarding services which we provide or to keep you informed of any relevant matters which we believe might be of some interest to you. If you do not wish to receive this information from us you must notify us of this in writing, either by post or email (unsubscribe), at the address mentioned earlier.
Making Change Happen newsletter
Making Change Happen provides an option for you to receive our newsletter (should you wish) by email to keep you abreast of current services and similar industry news. This newsletter is administered by an external service provider called MailChimp.
MailChimp is a popular mail service handler and is registered with Privacy Shield and as such complies adequately with EU data protection rules. Of note is MailChimp’s undertaking to achieve GDPR compliance before 25 May 2018 (Regulation enforcement date) See their guide HERE.
You may unsubscribe from the newsletter by emailing firstname.lastname@example.org
Third party websites
Some of Making Change Happen’s services are provided to you by third parties, via that third parties’ website service. Where this is the case any data you provide to that third party will be subject to these terms, as well as any terms applicable to that third parties’ service offering. Before providing any data to any third party you must ensure you are happy with the terms under which they will be processing your data.
Whilst Making Change Happen takes reasonable steps to validate the integrity of any third parties, it makes no warranties that use of any third parties’ website or service will work perfectly, or be fit for any particular use or purpose that you may want it to be.
Purpose of data collection
The Data Protection Act states that the purpose(s) for which the data are processed must be ‘specified, explicit and legitimate’. With this in mind, the below outlines the purposes for which we process data:
Making Change Happen collects, processes and retains personal data for the following reasons:
- To communicate with, inform and answer queries from prospective, current or past customers and visitors.
- To deliver relevant information to you
- To initiate and provide a quality legitimate service
- To fulfil obligations under law. E.g. the Data Protection Acts 1988-03, SI 336 2007, Directive 95/46/EC. In contemplation of Regulation 2016/679.
The above list is not exhaustive given the broad nature of our services within the industry and therefore this statement will be reviewed to reflect this variability as required.
The lawful purposes for which Making Change Happen collects and processes personal data are:
Consent – where you have provided us with unambiguous and informed consent to the processing of the personal data.
Legitimate interest – where we have a legitimate interest in processing the personal data and such legitimate interest does not materially adversely affect your fundamental rights and/or freedoms.
Contract – where we are processing the personal data to enable us to provide services that we have contracted to provide you.
Data Retention/Destruction and Minimisation
Making Change Happen seeks to minimise the quantum of personal data held. To facilitate this, unnecessary and/or superfluous data will be deleted/discarded in a secure manner. Where information must be held e.g. under a legal obligation. All files (electronic and hard-copy) are protected securely by Making Change Happen.
Interception by Third Parties
While we will treat any personal data received from you in accordance with the terms set out in this privacy statement and we will take all reasonable steps to store the data securely, we cannot ensure that your data is not intercepted by third parties in the course of being transmitted to us. In the event that any information is intercepted when being transmitted to us via the internet we bear no responsibility or liability to you for the manner in which any such intercepted data is used by any third parties.
Changes to Our Policy
Details of transfers to third country
Making Change Happen do not transfer personal data to third countries at this time
The existence of each of data subject’s rights
Individuals (data subjects) are provided (GDPR 2016/679 Arts 12-22) with the following rights to (summary):
- Transparent information and clear communication regarding their data
- Information as to how the subject’s data was collected
- Information as to how the subject’s data was collected but not from the subject him or her self
- Access by the data subject
- Rectification of data
- Erasure of data (Right to be forgotten)
- Restriction of processing
- Notification of rectification, erasure or processing
- Data portability
- Object to processing
- Object to automated processing/decision-making including profiling
An individual (data subject) has the right to withdraw consent at any time, where relevant. Should you wish to withdraw consent please contact 1 Grove Place, Bedford, MK40 3JJ, or email email@example.com.
Automated decision-making, profiling decisions
Making Change Happen does not engage in automated decision-making currently
Personal data source and whether it came from publicly accessible sources