privacy

Allestree Alliance Privacy notice

Your Right to Privacy

Your right to privacy is important to us.  We take the security of your information seriously and have policies and processes in place to ensure it remains safe. 

This notice describes the way we collect information, how we use it and how we protect it.

Who we are

We are Allestree Alliance.cic, A Community Interest Company registered in England and Wales under registration number 14005065 at C/O Lewis Adam Estate Agents, 1 Allestree Lane, Allestree, Derby. DE22 2HQ.

You can find our website at: www.allestree.org.

Our Data Protection Officer is Kieran Morgan-McGeehan and you can contact him by email at: DPO@allestree.org

How we comply with data protection regulations

We are committed to safeguarding your personal information and we are legally obliged to use your information in line with all laws concerning the protection of personal information. 

We are registered as a Data controller with the UK's information Commissioner's Office (ICO) under registration number:

ZB312773

Grounds for data collection 

We are committed to safeguarding your personal information and we are legally obliged to use your information in line with all laws concerning the protection of personal information. 

Information we hold about you

We collect personal information about you when you enquire about or make use of our services.  Personal information we collect, and hold may include:

• name, address, and e-mail address;

• telephone number;

• information about services you use, events you attend, and other related information;

• information we need to be able to process payments for you, for example bank and credit or debit card details;

• records of contact with you, such as system notes, emails, and letters.

How we get and use your personal information

Most of the personal information we process is provided to us directly by you.  We will only collect, use, hold or disclose personal information where we have a lawful basis to do so.  This means information needed to provide you with a product or service, to satisfy legal or regulatory requirements, or where we have your consent. 

We may use your information to:

• communicate with you;

• keep our records up to date

• process payments;

• for the investigation of or prevention of crime;

• for research and statistical purposes;

• to disclose to regulatory bodies for the purposes of monitoring and/or enforcing our compliance with their requirements;

• process job applications;

• gain feedback from you;

• prevent crime and meet our legal obligations;

• prudentially manage our business using models and forecasts;

• keep you informed of other relevant products or services that may be of interest to you where you have provided consent for us to do this.


The lawful bases that we rely on for processing your information are: [delete as appropriate]

• Your consent, which you can remove at any time;

• We have a contractual obligation;

• We have a legal obligation;

• We have a vital interest;

• We need it to perform a public task; or

• We have a legitimate interest.


We may also monitor and keep records of email communications which you send to us and other communications with you in accordance with this policy and our other business interests.


We also receive personal information indirectly from other orgnaisations.

How long we keep your information

We will keep your personal information only for as long as necessary in line with regulatory and legal requirements and will destroy it securely when it is no longer needed.  We have a retention schedule that we use to manage the length of time we keep personal data and if you would like to know any specific timescales listed on it, please contact us using the contact details on this form.

Cookies

We and our trusted partners use cookies and other technologies in our related services, including when you visit our Site or access our services. 

A "cookie" is a small piece of information that a website assigns to your device while you are viewing a website. Cookies are very helpful and can be used for various different purposes. These purposes include allowing you to navigate between pages efficiently, enabling automatic activation of certain features, remembering your preferences and making the interaction between you and our Services quicker and easier. Cookies are also used to help make sure that the advertisements you see are relevant to you and your interests and to compile statistical data on your use of our Services. 

The Site uses the following types of cookies:

a. 'session cookies' , which are stored only temporarily during a browsing session in order to allow normal use of the system and are deleted from your device when the browser is closed; 

b. 'persistent cookies ', which are read only by the Site, saved on your computer for a fixed period and are not deleted when the browser is closed. Such cookies are used where we need to know who you are for repeat visits, for example to allow us to store your preferences for the next sign-in; 

c. 'third-party cookies' , which are set by other online services who run content on the page you are viewing, for example by third-party analytics companies who monitor and analyse our web access.

Cookies do not contain any information that personally identifies you, but Personal Information that we store about you may be linked, by us, to the information stored in and obtained from cookies. You may remove the cookies by following the instructions of your device preferences; however, if you choose to disable cookies, some features of our Site may not operate properly and your online experience may be limited.

We use a tool which is based on the Snowplow Analytics  technology to collect information about your use of the Site. The tool collects information such as how often users access the Site, which pages they visit when they do so, etc. The tool does not collect any Personal Information and is only used by our Site hosting and operating service provider to improve the Site and services.

Use of script libraries (Google Web Fonts)

In order to present our contents correctly and make them graphically appealing across all browsers, we use script libraries and font libraries such as Google Web Fonts ( https://www.google.com/webfonts ) on this website. Google Web Fonts are transferred to your browser's cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font. 
  • Calling script libraries or font libraries automatically triggers a connection to the library operator. In theory, it is possible – but currently also unclear whether and, if so, for what purposes – that operators of corresponding libraries collect data.

  • The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy .

How we protect your information

The security of your information is important to us.  We protect your information by maintaining physical, electronic, and procedural safeguards in relation to the collection, storage, and disclosure of personal data to prevent unauthorised access, accidental loss, disclosure, or destruction. 

Your information is securely stored in [insert location].


No data transmission over the internet can be entirely secure, and therefore we cannot guarantee the security of your personal information and/or use of our sites.  However, we use our reasonable endeavours to protect the security of your personal information from unauthorised access.

Where we process your information

We only process your information within the United kingdom and European Union unless it's impossible to do so.

Transfer of data outside the EEA 

Please note that some data recipients may be located outside the EEA. In such cases we will transfer your data only to such countries as approved by the European Commission as providing adequate level of data protection, or enter into legal agreements ensuring an adequate level of data protection.

How we share your information 

From time to time we may send information to, receive information from, or exchange your personal information with:

• partners or agents who support us to deliver our products and services to you, or that we refer you to, or that refer you to us;

• companies who perform essential services for us;

• third-party organisations that conduct research, analysis, and marketing activities on our behalf;

• regulators, courts, or other public authorities;

the emergency services in the case of accident or emergency.


We will only share or exchange data with third parties with the protection of a written agreement and the ability to oversee their activities, unless information is required for legal or regulatory reasons.


Where we have relationships with other organisations that process your information on our behalf, we take care to ensure they have high data security standards.  We will not allow these organisations to use your personal information for unauthorised purposes. 


If the business is reorganised or sold to another organisation, we may transfer any personal information we hold to that organisation. 


In the event that a third party may deliver all or part of the service requested by you, whilst the information you provide will be disclosed to them, it will only be used for the administration of the service provided and to maintain management information for business analysis.

Marketing

We may use your Personal Information such as your name, email address, telephone number, etc., ourselves or by using our third-party subcontractors, for the purpose of providing you with promotional materials concerning our services which we believe may interest you. 


To respect your right to privacy, within such marketing materials we provide you with the means to opt out of receiving further marketing offers from us. If you unsubscribe, we will remove your email address or telephone number from our marketing distribution lists. 



Please note that even if you have unsubscribed from receiving marketing emails from us, we may send you other types of important email communications without offering you the opportunity to opt out of receiving them. These may include customer service announcements or administrative notices.

Corporate transaction

We may share information in the event of a corporate transaction (e.g. sale of a substantial part of our business, merger, consolidation or asset sale). In the event of the above, the transferee or acquiring company will assume the rights and obligations as described in this Privacy Policy.

How you can manage the information we hold and how we use it

Data protection regulations mean you have rights over how we hold and use the information we hold about you: 


• Your right to manage consents

You have the right to give your consent to us using your data for any activities we do not have another lawful basis to carry out, for example sending you marketing communications.  You can withdraw consent at any time.


• Your right of Access

You have the right to request access to the information we hold about you; this is called a Data Subject Access Request


• Your right to know about sharing

You have the right to know who your data is shared with and why


• Your right to rectification

You have the right to have your details updated if they are inaccurate and for information not required for lawful reasons to be deleted.  You also have the right to ask us to complete information you think is incomplete.


• Your right to erasure 

You have the right to ask us to erase your personal information in certain circumstances. 


• Your right to object to processing

You have the right to object to the processing of your personal data in certain circumstances.


• Your right to restriction of processing

You have the right to have automated processing and profiling restricted.  Profiling may be used to analyse or predict economic situations, health, personal preferences, interests, reliability, behaviour, location, or movements


• Your right to data portability

You have the right to request that information we process by automated means is sent to you or another nominated data controller in a commonly used electronically readable format


You are not required to pay any charge for exercising your rights.  If you make a request, we will respond to you within one month.



If you wish to action any of the above, please contact us by e-mailing dpo@allestree.org

Please do not include confidential information in e-mails or letters.


You can also complain to the data protection regulator if you are unhappy with how we have used your data.

In the UK, the regulator is the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

Updates or amendments to this Privacy Policy

We reserve the right to periodically amend or revise the Privacy Policy; material changes will be effective immediately upon the display of the revised Privacy policy. The last revision will be reflected in the "Last modified" section. Your continued use of the Platform, following the notification of such amendments on our website, constitutes your acknowledgment and consent of such amendments to the Privacy Policy and your agreement to be bound by the terms of such amendments.

Last revised March 2022

Share by: