Tavistock
Catalyst is committed to collecting, storing and using personal data in a safe and responsible manner at all times and for holding this data for no longer than necessary.
This document informs you of our policies regarding the collection, use and disclosure of personal information.
Personal data that we hold
Catalyst only retains personal data where it has a legitimate interest to do so. These are as follows:
- Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. You have the right to withdraw your consent at any time.
- Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
- Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
Our legitimate interests are:
- Catalyst stores names and email addresses of anyone who wishes to be kept informed of our work.
- We store postal addresses of anyone who makes a gift aided donation to Catalyst.
- We hold personal data of job applicants and Catalyst volunteers for the duration of the application process or term of engagement.
How we collect personal data
Catalyst operates a website, tavistockcatalyst.co.uk, and a Facebook page, through either of which a request can be made to receive news updates by email.
Anyone who offers financial support to Catalyst is asked if they wish to gift aid their contribution, in which case a postal address is collected for HMRC gift aid submission.
Applicants for Catalyst jobs and people who volunteer for schemes such as mentoring complete the relevant application forms with their personal information.
How we use personal data
Catalyst will not share your personal data with anyone else except for the purpose of:
- claiming gift aid on financial gifts, where names and postal addresses are required by HMRC
- sending occasional news and updates
- obtaining DBS certificates for employees and volunteers.
Data storage
Personal data is held on a secure, password protected computer only by the Catalyst officers who need access.
- The treasurer uses data from donors.
- The youth work leader holds data on volunteers.
- The Catalyst chairman or designated trustee holds information on employees.
- The Catalyst recruiting officer and safeguarding officer use data on volunteers or employees who require DBS checks.
Personal details provided by employees or applicants for jobs will be kept confidentially and will not be used for any other purpose.
All personal information will be held no longer than necessary:
- Employee personal information will be deleted one year after the period of employment ends.
- Personal details for an unsuccessful job applicant will be deleted at the end of the application process.
- Email addresses on the supporters list will be deleted on the request of the individual at any time.
- Postal addresses of donors who gift aid their donations will be deleted one year after the final gift aid submission to HMRC.
Data breach
A log is kept by the Data Controller of any breach of privacy reported by an employee, trustee, volunteer, supporter or member of the public.
Any major breach of security will be reported to the Information Commissioner’s Office.
Your rights
You may ask for a hard copy of any personal information about you that we hold, and we will aim to supply it within 14 days.
If you ask to be removed from our supporters list, we will aim to do this immediately.
To ask, email [email protected].
Our responsibilities
Catalyst trustees have the responsibility for implementing and monitoring the effectiveness of this policy.
Trustees will designate a Data Controller from amongst their number.
The policy will be reviewed annually by the trustees.
If we make any material changes to this Privacy Policy, the updated policy will be available on this website.