Privacy Policy
This privacy policy is specific to activities carried out on the Homeless Connect website.
If you contact Homelss Connect through other means, you should review the organisation’s Privacy Policy. References to ‘we’ or ‘us’ are to Homeless Connect’ is the working name of ‘Council for the Homeless (Northern Ireland)’, registered charity in Northern Ireland (charity number 103325) Belfast Office (Inc. Fareshare NI), 3rd Floor, Andras House,60 Great Victoria St, Belfast, BT2 7BB
.
We are committed to protecting your privacy and take this responsibility very seriously. We therefore take care to safeguard it. This notice outlines what data we collect, how we may use it, how we protect your data and your rights, and how you can exercise those rights. We regularly check this notice to ensure we provide you with the most up-to-date information regarding our data processing activities. We strongly advise you to read it from time to time to ensure you are happy with any changes that might be made. This privacy policy was last updated in October 2021.
Visiting our website
We use cookies to tailor your browsing experience and ensure we show you more relevant information. If you don’t want cookies, you can set your browser to notify you when you receive one, then choose to decline it. We use a Google Analytics cookie to track usage of the website and this anonymous information is used to try to develop and improve the website.
Why we collect your data
We will only collect personal data where you have submitted this on one of our webforms. If you want to get advice by email, we need to ask you some personal questions in order to ensure that the response we give is accurate and appropriate to you. On occasion we also have to provide some information to our funders in order to give a demographic breakdown of who is using our online service. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
When we respond to your request, we may ask you to provide feedback.
Disclosure of your personal data
We will not share any of your personal data to any third party – except where:
- the transfer is to a secure data processor, which carries out data processing operations on our behalf (please see section 13 for more information)
- we are required to do so by law, for example to law enforcement or regulatory bodies where this is required or allowed under the relevant legislation
- it is necessary to protect the vital interests of an individual
- we have obtained your consent
We will never share or sell your personal data to a third-party organisation for marketing, fundraising, or campaigning purposes.
Transfers of data outside of the European Economic Area
We use Microsoft Office 365 and xxxx, which are multi-tenant cloud services, for our internal office use. This means that internal documents and information generated by us are stored in cloud services hosted within the European Economic Area (EEA).
Retention of your data
Whatever your relationship with us, we will only store your information for a specified amount of time and no longer than necessary.
The length of time that data will be kept may depend on the reasons for which we are processing the data and on the law or regulations that the information falls under, such as financial regulations, Limitations Act, Health and Safety regulation etc., or any contractual obligation we might have – such as with government contracts or if we have a business case, such as with research data. For business case data, we will anonymise the data so no individual is identifiable.
Subject to the above, we will typically store data relating to people to whom we provide services to for a maximum of seven years after completion of those services. .Once the necessary retention period has expired, the information will be confidentially disposed of or permanently deleted.
Full Privacy Policy (For internal or a pdf download?)
Homeless Connect helps an array of service providers via our membership and thousands of people through our projects.
When doing this, we process personal data about people who receive advice, guidance, training and support services from us, book on training courses, or volunteer with us.
We are committed to protecting your privacy and take this responsibility very seriously. We therefore take care to safeguard it. This notice outlines what data we collect, how we may use it, how we protect your data and your rights, and how you can exercise those rights.
References to ‘we’ or ‘us’ are to Homeless Connect’ is the working name of ‘Council for the Homeless (Northern Ireland)’, registered charity in Northern Ireland (charity number 103325) Belfast Office (Inc. Fareshare NI), 3rd Floor, Andras House,60 Great Victoria St, Belfast, BT2 7BB
We regularly check this notice to ensure we provide you with the most up-to-date information regarding our data processing activities. We strongly advise you to read it from time to time to ensure you are happy with any changes that might be made.
This privacy policy was prepared to be as comprehensive as possible, but it does not include an exhaustive list of every aspect of our collection and use of personal information. However, we would be happy to provide a copy of our policy and procedure on this if requested.
If you have any questions about this policy, please contact us using the details in the “Contact us”, section below.
This privacy policy was last updated in October 2021.
Why we collect your data
We collect personal data for many reasons, including to provide you with services, communicate with you and send you information you have requested. Depending on how you interact with us, we may process data for the following reasons:
- to provide you with advice, that you have requested or been referred to
- to process personal details required for the administration of your booked training course
- to process a purchase of a publication on your behalf
- to record and contact you regarding payments you make to us
- to administer services we are providing to you
- to communicate with you regarding our work
- to process donations and administer Gift Aid information for any donation you make to us
- to process a purchase via our website on your behalf
- for our own internal administrative purposes, and to keep a record of your relationship with us
- to manage your communication preferences
- to process job applications or volunteer placements
- to conduct surveys, research and gather feedback
- to obtain information to improve our services and user experiences
- to carry out research to find out more information about our members and customers to improve and develop our services
- to comply with applicable laws and regulations, and requests from statutory agencies
Information we may collect
We collect the following personal information:
- your full name
- contact details – including your postal address, telephone number(s), and email address
- date of birth
- details relevant to your enquiry when providing you with an email response
- your bank details if you have purchased something from us
- records of your correspondence and engagement with us
- information you may enter on the Homeless Connect website
- photographs, video or audio recordings
- occupation
- other relevant information you share with us (eg during recruitment such as previous employers & educational attainment)
This information may be collected via:
- any paper forms you complete
- telephone conversations or face-to-face interactions
- digital forms completed via our website, online surveys or email
- third-party companies and websites such as Just Giving/My Donate
- publicly available sources
- communication via social media
We sometimes also collect sensitive, personal data about individuals. This includes information about health, religion, sexuality, ethnicity, political and philosophical beliefs, and criminal records. We will normally only record this data where we have your explicit consent, unless we are permitted to do so in other circumstances under data protection law. For example, we may make a record that a person is in a vulnerable circumstance to comply with requirements under charity law and the Code of Fundraising Practice, to ensure that we do not send fundraising communications to them.
Using your personal data
If you are receiving information, guidance or support from us, we will need to process your data because of your relationship with us.
We will keep all your information – including notes, letters and information given to us about you or your organisation – in a confidential record that is specific to you and your organisation. We use a secure password protected web based management system. This means that we can keep the information you provide us, so we are able to see the history and relevant details of your communication or membership. This ensures that we provide appropriate and accurate advice or support. We take information security very seriously. No one is allowed access to our system or files unless they need this to provide the service to you, or one of the other purposes discussed in this notice.
When you call our organisation, your call maybe recorded. This is used for training purposes, quality assurance, complaint investigations, and to make further improvements to the service we provide to you. You are informed of the recording before any data collection occurs.
To ensure that our services meet a high standard of quality, client files are sometimes checked by our quality assurance staff. Files may also be checked by external auditors if the work we do is funded by another organisation, such as a local Government department or Legal Services Agency. All auditors are bound by confidentiality policies.
We may use your data for statistical reports. These statistics will not include any information that could be used to identify any individual.
Direct marketing
We use a range of marketing activities and channels to communicate with our members, stakeholders and supporters – including our website, direct mail, email, and telephone.
We send the following marketing materials:
- updates about Homeless Connect work – including e-bulletins, mailings and other publications informing you about our work
- events – Please note that if you sign up to a Homeless Connect event, we will also send you administrative communications about how you can take part. On occasion we will also send you a reminder about the same event in future years, in case you want to participate in it again
- volunteering – information about how you can help support us by giving up your time or using your influence to progress our aims, along with updates on the impact of your work
- professional services – including details of the professional services that we offer, such as training
We will never share or sell your personal data to a third-party organisation for its marketing, fundraising or campaigning purposes.
You can withdraw your consent, unsubscribe from or update your marketing preferences at any point using the details in the ‘Contact us’ section below.
Any electronic communications, such as emails, will have a link to unsubscribe from future electronic communications, so you can manage your own communication preferences.
If you make any changes to your consent, we will update your record as soon as we possibly can. It may take up to 60 days for our systems to update and stop any postal communications from being sent to you. Email communications will, however, be stopped immediately. If you tell us you do not wish to receive marketing emails you may still receive transactional and service-based communications confirming and servicing other relationships you have with us (as described below).
Administrative communications
In addition to marketing communications you receive we will also communicate with you by post, telephone, and email in relation to administrative and transactional matters.
As mentioned above, we may still need to communicate with you for administrative purposes even where you have opted out of marketing communications from us.
Customer research and analysis
We may use profiling and database segmentation techniques to analyse your personal information, and create a profile of your interests and preferences. This allows us to ensure communications are relevant and timely, to provide an improved experience.
Under data protection legislation, you have the right to object to your data being processed in this way.
Visiting our website
We use cookies to tailor your browsing experience and ensure we show you more relevant information. If you don’t want cookies, you can set your browser to notify you when you receive one, then choose to decline it. Please read our Cookies Policy which is on our website for more information.
Applying for a job with Homeless Connect
When you apply for a job with us, your personal data will be collated to monitor the progression of your application, and the effectiveness of the recruitment process through the statistics collected. Where we need to share your data – such as for gathering references, obtaining Access NI checks (depends on the role), or a prison clearance (depends on the role) – you will be informed beforehand, unless the disclosure is required by law. These checks are only done after a position has been offered only to the successful candidate. On the application form, you are asked to complete the referee details, and can tick permission to contact referee. If you tick yes, once offered a role, we will automatically send out reference requests. If you tick no, we will contact successful candidates for permission first.
Personal data about unsuccessful applicants is held for 12 months after the recruitment exercise is complete for that vacancy. You, as an applicant, can ask us to remove your data before this time if you do not want us to hold it. During this time, if you have been made a reserve for a post and we feel there is another suitable vacancy available, we will contact you when the vacancy arises.
Once you have taken up employment with Homeless Connect, we will compile a file relating to your employment. The information contained in this will be kept secure and will only be used for purposes directly relevant to your employment. Once your employment with us has ended, we will retain the file in accordance with the requirements of our retention schedule and then delete it from our files.
When using the Homeless Connect Job hub your information is shared and managed directly with our member partners and organisations.
Professional contacts
We may collect data about professional contacts and partners with whom we work, or to whom we provide professional services – such as training or publications. Personal data collected in this way will be processed in accordance with data protection legislation and this policy.
We may send our professional partners information and updates about our work (primarily by email). Such contacts can opt out of receiving this information at any time.
We maintain a record of information related to MPs and other holders of public office, to enable us to undertake our campaigning activity in furtherance of our charitable aims. This will include keeping a record of contact details such as address, telephone number and email address as well as publicly available voting records and committee and group memberships.
Our legal basis for processing personal data
We need a lawful basis to collect and use your personal data under data protection law. The law allows for six ways to process personal data (and additional ways for sensitive personal data). The four ways that Homeless Connect processes personal data are highlighted in bold. This includes information that is processed on the basis of:
A . a person’s consent (for example, to send you direct marketing by email or SMS)
B. a contractual relationship (for example, to provide you with goods or services that you have purchased from us)
C. processing that is necessary for compliance with a legal obligation (for example to process a Gift Aid declaration)
D. Vital interests, to protect someone’s life
E. Public task-the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individuals’ personal data which overrides those legitimate interests.
F. Homeless Connect legitimate interests (please see below for more information)
Personal data may be legally collected and used if it is necessary for a legitimate interest of the organisation using the data, if its use is fair and does not adversely impact the rights of the individual concerned.
When we use your personal information, we will always consider if it is fair and balanced to do so and if it is within your reasonable expectations. We will balance your rights and our legitimate interests to ensure that we use your personal information in ways that are not unduly intrusive or unfair. Our legitimate interests include:
- Charity Governance: including delivery of our charitable purposes, statutory and financial reporting and other regulatory compliance purposes.
- Administration and operational management: including responding to solicited enquires, providing information and Homeless Connect services, research, events management, the administration of volunteers and employment, and recruitment requirements
If you would like more information on our uses of legitimate interests, or to change our use of your personal data in this manner, please get in touch with us using the details in the ‘Contact us’ section below.
Disclosure of your personal data
We will not share any of your personal data to any third party – except where:
- the transfer is to a secure data processor, which carries out data processing operations on our behalf (please see section 13 for more information)
- we are required to do so by law, for example to law enforcement or regulatory bodies where this is required or allowed under the relevant legislation
- it is necessary to protect the vital interests of an individual
- we have obtained your consent
We will never share or sell your personal data to a third-party organisation for marketing, fundraising, or campaigning purposes.
Security of your personal data
We use appropriate technical and organisational measures and precautions to protect your personal data and to prevent the loss, misuse or alteration of your personal data.
Our management system, is a secure web based application and it is hosted within the UK.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Transfers of data outside of the European Economic Area
We use Microsoft Office 365 and xxxx, which are multi-tenant cloud services, for our internal office use. This means that internal documents and information generated by us are stored in cloud services hosted within the European Economic Area (EEA).
Retention of your data
Whatever your relationship with us, we will only store your information for a specified amount of time and no longer than necessary.
The length of time that data will be kept may depend on the reasons for which we are processing the data and on the law or regulations that the information falls under, such as financial regulations, Limitations Act, Health and Safety regulation etc., or any contractual obligation we might have – such as with government contracts or if we have a business case, such as with research data. For business case data, we will anonymise the data so no individual is identifiable.
Subject to the above, we will typically store data relating to people to whom we provide services to for a maximum of seven years after completion of those services. Personal data about unsuccessful applicants are held for 12 months after the recruitment exercise is complete for that vacancy.
Once the necessary retention period has expired, the information will be confidentially disposed of or permanently deleted.
If you request to receive no further contact from us, we will keep some basic information about you on our suppression list to avoid sending you unwanted materials in the future.
Your rights
You have many rights under data protection legislation. These include:
- Right of Access
You have the right to know what information we hold about you and to ask, in writing, to see your records.
We will supply any information you ask for that we hold about you as soon as possible, but this may take up to 30 days. We will not charge you for this other than in exceptional circumstances. You will be asked for proof of identity as the person dealing with your request may not be the staff member you have met before. We need to be sure we are only releasing your personal data to you.
This is called a data subject access, and can be done by: emailing hello@homelessconnect.org or telephoning 02890 246440 writing to the Homeless Connect, 3rd Floor, Andras House,
60 Great Victoria St,
Belfast, BT2 7BB
Right to be informed
You have the right to be informed how your personal data will be used. This policy, as well as any additional information or notice that is provided to you either at the time you provided your details, or otherwise, is intended to provide you with this information.
Right to withdraw consent
Where we process your data based on your consent (for example, to send you marketing texts or emails), you can withdraw that consent at any time. To do this, or to discuss this right further with us, please contact us using the details in the ‘Contact us’ section below.
Right to object
You also have a right to object to us processing data where we are relying on it being within our legitimate interests to do so (for example, to send you direct marketing by post). To do this, or to discuss this right further with us, please contact us using the details in the ‘Contact us’ section below.
Right to restrict processing
In certain situations, you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
Right of erasure
In some cases, you have the right to be forgotten (i.e. to have your personal data deleted from our database). Where you have requested that we do not send you marketing materials, we will need to keep some limited information to ensure that you are not contacted in the future.
Right of rectification
If you believe our records are inaccurate, you have the right to ask for those records concerning you to be updated. To update your records, please get in touch with us using the details in the ‘Contact us’ section below.
Right to data portability
Where we are processing your personal data because you have given us your consent to do so, you have the right to request that the data is transferred
Contact Us
If you have any questions about this policy, would like more information, or want to exercise any of the rights set out in this notice you can get in touch with us in the following ways:
- Email hello@homelessconnect.org
- Call 02890 246440