Updated 22nd May 2018
This is the Making Change Happen privacy statement. The Making Change Happen address is 1 Grove Place, Bedford, MK40 3JJ for the purposes of complying the United Kingdom data protection rules include: the GDPR 2016/679, The Data Protection Act 2018 (both take effect from 25 May 2018) and PECR and in preparation/contemplation of Regulation 2016/679.
The foundation of data protection as it applies to personal data is built upon 6 data protection principles:
- Lawfulness, fairness and transparency.
- Purpose limitations.
- Data minimisation.
- Storage limitations.
- Integrity and confidentiality
I want visitors viewing this website www.makingchangehappen.co.uk to be informed as to our use and care of your personal data.
By visiting the website www.makingchangehappen.co.uk you are deemed to be on notice of, and in agreement with, the manner in which we collect and process personal data which I receive via this website. If you do not agree with the manner in which we collect and process personal data, you should stop using this website now and not revisit.
Making Change Happen Policy on Data Protection
Your right to privacy is recognised and respected. Making Change Happen will not collect any personal information about you on this website without your clear permission. Any personal information which you volunteer to me will be treated with the highest standards of security and confidentiality in full compliance with the provisions of current valid law.
I do not collect any personal data about you on this website, apart from the information you volunteer. Any information you provide in this way will not be made available to any third parties unless I have received your express consent or unless I am obliged to do so by law. I may use data which you have submitted to me for statistical, market research, search engine optimisation (SEO) or promotional purposes in the normal way.
Obtaining Copies of Your Data
If your right of access to the data which you have requested is not restricted by an exemption under the Data Protection Acts, and is correctly requested, I will supply a copy of any personal data relating to you which I have received from you via this website. We are entitled to destroy any personal data which you submit to me at my discretion and will do so for security and/or data minimisation reasons where appropriate. In the event that I have destroyed any personal data which you have supplied to me, we will not have any obligation to supply you with copies of this destroyed data or verification of the destruction. I will endeavour to provide you with a personal data destruction date if available.
If you wish to obtain copies of any personal data which I hold, you must write to me at: 1 Grove Place, Bedford, MK40 3JJ or email me at email@example.com. You should include any personal identifiers such as your name, address, phone number, e-mail address etc. For obvious data security reasons we may require that you provide us with a valid photo identification to facilitate the access request. Indeed we reserve the right to require, see and confirm photo identification before passing any personal data to a requestor.
If you make a request in respect of your personal data, I will comply with this request within 30 days of receiving it in writing.
Correcting Inaccurate Information
If you discover that I hold inaccurate information about you, you can request that I correct that information and Making change Happen would very much encourage you to do so. Any such request must be in writing and should be transmitted to me either by post or by email at the addresses referred to above. I may require photo identification to confirm and fulfil the request.
I will review permissions already given by you before any actions are taken in respect of any further processing and update these as or if required by contacting you.
Deleting Your Data
In certain circumstances you may also request that data which you have supplied be deleted. If you wish to request a deletion, you will be expected to identify some contravention of data protection law in the manner in which we have processed the data which you require to be deleted. I may require photo identification to confirm and fulfil the deletion/rectification request.
If you have concerns about how personal data are processed via this website or indeed have any other relevant complaints, please do not hesitate to bring these to the attention of me by emailing firstname.lastname@example.org.
Right to Communicate
If you provide me with any postal or email address, I may communicate with you by post or email to provide you with promotional information regarding services which I provide or to keep you informed of any relevant matters which we believe might be of some interest to you. If you do not wish to receive this information from me you must notify me of this in writing, either by post or email (unsubscribe), at the address mentioned earlier.
Making Change Happen Newsletter
Making Change Happen provides an option for you to receive my newsletter (should you wish) by email to keep you abreast of current services and similar industry news. This newsletter is administered by an external service provider called MailChimp.
MailChimp is a popular mail service handler and is registered with Privacy Shield and as such complies adequately with EU data protection rules. Of note is MailChimp’s undertaking to achieve GDPR compliance before 25 May 2018 (Regulation enforcement date) See their guide HERE.
You may unsubscribe from the newsletter by emailing email@example.com
Purpose of data collection
The Data Protection Act states that the purpose(s) for which the data are processed must be ‘specified, explicit and legitimate’. With this in mind, Making Change Happen outlines the following purposes for which they process data:
Making Change Happen collects, processes and retains personal data for the following reasons:
- To communicate with, inform and answer queries from prospective, current or past customers and visitors.
- To deliver relevant information to you
- To initiate and provide a quality legitimate service
- To fulfill obligations under law. E.g. the Data Protection Acts 1988-03, SI 336 2007, Directive 95/46/EC. In contemplation of Regulation 2016/679.
The above list is not exhaustive given the broad nature of my services within the industry and therefore this statement will be reviewed to reflect this variability as required.
The general personal data legitimate processing conditions under law underlying the purpose(s) of data collection by Making Change Happen are:
- You (prospective or previous) provided consent
- To prevent injury or other damage to you (the data subject): or serious loss of or damage to your property or otherwise to protect your vital interests
- Necessary for the administration of justice
- Necessary under an enactment
- That the processing serves an official function; or
- Where necessary for the purposes of the legitimate interests pursued by Making Change Happen or by any lawful third party in the absence of reasons which prejudice your fundamental rights and freedoms or your (the data subject’s) legitimate interests.
Data collected must be adequate, relevant and not excessive
Making Change Happen adheres to the principle that data gathered must be adequate, relevant and not excessive. It is important to note here that laws, rules and practices can evolve or change, so this will be reflected in the application and the operative spectrum of the three guiding principles below.
Adequate:To provide the services on offer, personal data must be gathered for the purpose of communication, information, administration and legal compliance.
Relevant:Only personal data germane, appropriate and necessary under law to the requirements of the services/activities provided and legitimate interests of Making Change Happen are sought.
Not excessive:The necessity of having an ‘upper limit’ of personal data collection is acknowledged. Making Change Happen is mindful of the potential for ‘excessive data creep’.
Data Retention/Destruction and Minimisation
Making Change Happen seeks to minimise the quantum of personal data held. To facilitate this, unnecessary and/or superfluous data will be deleted/discarded in a secure manner. Where information must be held e.g. under a legal obligation. All files (electronic and hard-copy) are protected securely by Making Change Happen.
Interception by Third Parties
While we will treat any personal data received from you in accordance with the terms set out in this privacy statement and we will take all reasonable steps to store the data securely, we cannot ensure that your data is not intercepted by third parties in the course of being transmitted to us. In the event that any information is intercepted when being transmitted to us via the internet we bear no responsibility or liability to you for the manner in which any such intercepted data is used by any third parties.
Changes to Our Policy
Details of transfers to third country
Making Change Happen do not transfer personal data to third countries at this time
The existence of each of data subject’s rights
Individuals (data subjects) are provided (GDPR 2016/679 Arts 12-22) with the following rights to (summary):
- Transparent information and clear communication regarding their data
- Information as to how the subject’s data was collected
- Information as to how the subject’s data was collected but not from the subject him or her self
- Access by the data subject
- Rectification of data
- Erasure of data (Right to be forgotten)
- Restriction of processing
- Notification of rectification, erasure or processing
- Data portability
- Object to processing
- Object to automated processing/decision-making including profiling
An individual (data subject) has the right to withdraw consent at any time, where relevant. Should you wish to withdraw consent please contact 1 Grove Place, Bedford, MK40 3JJ, or email firstname.lastname@example.org.
Automated decision-making, profiling decisions
Making Change Happen does not engage in automated decision-making currently
Personal data source and whether it came from publicly accessible sources