UPDATED IN ACCORDANCE WITH THE INTRODUCTION OF THE EU’S GENERAL DATA PROTECTION REGULATION (GDPR) 25TH MAY 2018
Catalyse Change is a charity registered in Scotland regulated by OSCR. We (Catalyse Change) are committed to protecting and respecting your privacy and this policy explains how we use any personal data we collect about you when we coach, collaborate or communicate with you (including accessing of our website). We are a data controller which means we decide how personal data is processed and for what purpose.
What information do we collect about you?
We obtain information from you when you provide it to us or visit our website. The personal information we collect might include your name, address, email address, IP address, and information regarding what pages are accessed and when. If you give a donation or make a payment for our services, your card information is not held by us, it may be collected by our third party payment processors, who specialise in the secure online capture and processing of credit/debit card transactions, as explained below. On occasion when bank information is requested for a specific purpose, it will be used solely for the purpose intended then deleted.
How will we use the information about you?
First and foremost, we use your personal data to provide you with any services you’ve requested and to manage our relationship with you. We also use your personal data for other purposes, which may include providing you with information you’ve requested from us (like training or education materials) or information we are required to send to you to in order to optimise our service to you.
We do not share your personal details with any third parties organisations without your prior consent. Your personal data will be treated as strictly confidential and will only be shared with the Catalyse Change team, Catalyse Change coaches, any relevant regional leader or organisation you are part of where appropriate in order to carry out our service to you.
Access to your information and correction
You have a right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information please email us or write to us at either address at the bottom of this documents (under the “How to contact us” heading). We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.
Data retention and deletion
We’ll retain your personal data for as long as we have a relationship with you and for a period of time afterwards where we have an ongoing business need to retain it, in accordance with our data retention policies / practices and UK legislation (i.e. financial records are required to be retained for up to 6 years). Following that period, we’ll make sure it’s deleted or write requesting your consent to retain it. Once consent is given, it will last for a period of 2 years. After this period we will write and request consent again.
How to contact us