1. About us
1.1 CHI is a registered charity in both England and Wales, and Scotland. Our registration number for England and Wales is 1183026, and for Scotland it is SCO49501.
1.2. We are located at WeWork, Floor 2, 123 Buckingham Palace Road, London SW1W 9SR. Our contact phone number is 0300 3020076 and our contact email address is firstname.lastname@example.org.
1.3. Our charity was launched in 2018 to act as a catalyst for evidence-led change to enable those working in and around homelessness to achieve breakthrough results. We believe that homelessness is an issue that can be solved sustainably. We want to improve the life chances of people at risk of, or experiencing homelessness by focusing on what works, pushing for interventions to be evaluated, and creating a movement that believes all citizens are better off when policymakers and practitioners value evidence and know how to use it.
2.1. For the purpose of the General Data Protection Regulation (GDPR) and applicable UK laws as the Data Protection Act 2018, CHI is the “Data Controller” of your data.
3. The basis for the processing of your data
3.1. When our relationship with you is governed by an agreement, we rely on contract to process your data. This may be the case where you are a an affiliate, member or a volunteer, or when you are conducting a study on our behalf.
3.2. In addition, some data is processed based on CHI’s legitimate interest, notably photographs, audio and video recordings of the events in order to raise awareness and for training, generating interest and funding purposes. We have run a Legitimate Interest Assessment that includes the three purpose, necessity and balancing tests in order to ensure our processing is lawful. Legitimate interest would as well be the lawful basis in the case of website analytics for preventing fraudulent or other malicious activities, in terms of cybersecurity and/or error tracking purposes.
3.4. We may ask for your consent in other cases where we process your data. Such consent can be revoked at any time by contacting us at email@example.com.
4. Collected information
4.1. All personal information you provide to us or any other we collect automatically through your use of our website will be processed and stored by CHI to perform our activities and achieve our goal of helping end homelessness for good.
4.2. The types of personal information we collect may include:
- Contact details – including your name, email address, phone number, postal address and date of birth;
- Location data – we may collect your IP address;
- Your image or recordings – we may obtain photographs, audio or video recordings of events. We may reproduce and/or publish your image in our website, and in other promotional materials, social networking channels and other materials related to our activities;
- Your interactions with us – for example if you send us information via email, survey or social media, this may be stored on our systems;
- Technical information – when you use our website, CHI automatically receives and records information on its server logs from your browser or mobile platform, including the location, IP address, cookie information and details about the page you requested.
5. Use of your personal information
5.1. As well as the purposes described above at Clause 4.1, we use the personal information we collect to:
- To administer our website or any other purposes required in order to allow us to perform our activities as a homelessness charity;
- to register you as an affiliate, member or volunteer;
- to inform you via email, SMS or phone about our activities;
- to send you information about appeals and fundraising activities;
- to provide support service, including to respond to your enquiries and fulfil any of your requests for information;
- to send you important information regarding our activities, or other technical notices, updates, security alerts, and support and administrative messages; and
- as we believe to be necessary or appropriate under applicable law, to enforce our rights or to respond to requests from law enforcement and other government authorities.
7. Disclosure of your information
7.1. We do not share, rent or sell your personal information to anyone without your explicit consent. However, based on contract and legitimate interest, we use third-party providers to support our activities:
- We may disclose your personal data to the following categories of third-party providers:
- Institutions or entities conducting studies on our behalf (academics, universities and local authorities, among others).
- Other reasons – We may also share your personal information with a purchaser or potential purchaser of our charity and in some circumstances, we may have to disclose your personal information by law, either because a court or the police or other law enforcement agency has asked us for it, to enforce our legal rights, or to prevent fraud.
8. Security and international transfers of data
8.1. We are committed to ensuring that your information will be treated confidentially and securely, and we have put in place appropriate measures to ensure the security of your personal data.
8.2. When your personal data is transferred to parties located outside of the EEA we shall undertake an assessment and take appropriate measures to ensure such third party will provide adequate security of such personal data and respect your rights to privacy. These safeguards are intended to ensure a similar degree of protection is afforded to your data wherever it may be transferred and may include:
- only transferring your personal data to countries which have been deemed to provide an adequate level of protection for personal data by the European Commission;
- entering into specific contractual terms which have been approved by the European Commission and which give personal data the same protection as within the EEA; or
- where your data will be transferred to the US, ensuring that the third party to which we are transferring your data is part of the Privacy Shield.
For further information on the safeguards used, please contact us at firstname.lastname@example.org.
9. Data retention
9.1. We may retain your personal data for as long as we require for the purposes for which it is processed or as is otherwise required by applicable law.
9.2. When calculating the appropriate retention period for your data, we consider the nature and sensitivity of the data, the purposes for which we are processing the data, and any applicable statutory retention periods. Using these criteria, we regularly review the personal data which we hold and the purposes for which it is held and processed. Once processing has been completed, we may securely delete or anonymise your personal data.
9.3. Please, note that we can keep personal data for longer where we are keeping it for research or statistical purposes.For more details about our retention periods, please contact us at email@example.com.
10. Your rights
10.1. Under the EU General Data Protection Regulation (GDPR) and any other relevant rules in the UK as the Data Protection Act 2018, you are entitled to certain rights in relation to our handling of your personal data, as described below.
10.2. You may request details of the personal information that we hold about you under data protection laws. If you would like a copy of the information held about you please write to us at firstname.lastname@example.org.
10.3. If you think any information we have about you is incorrect or incomplete, please write to us or email us at email@example.com as soon as possible. We will correct or update any information as soon as we can.
10.4. You have the right to erasure of your data. Should you want to exercise your right to erasure, please email us at firstname.lastname@example.org. Please, note that we are not required to delete the information important for the establishment, exercise or defence of legal claims, or that we need to retain in order to comply with the law.
10.5. You have the right of restriction of processing, where the data is wrongfully processed but should not be erased for a reason listed in Article 18 (1) of the GDPR.
10.6. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies to information you have given us, if we are processing information based on your consent or in talks about entering into a contract and the processing is automated.
10.7. If you would like to exercise these rights, please write to us or email us at email@example.com.
10.8. Please, note that GDPR provisions on the right of access, the right to rectification, the right to restrict processing and the right to object may be limited based on the research and statistics exemption. This exemption will only apply:
- to the extent that complying with the provisions would prevent or seriously impair the achievement of the purposes for processing;
- where processing is subject to appropriate safeguards for individuals’ rights and freedoms;
- if the processing is not likely to cause substantial damage or substantial distress to an individual;
- if the processing is not used for measures or decisions about particular individuals; and
- as regards the right of access, the research results are not made available in a way that identifies individuals.
11. Contact and complaints
Should you have any complaints about how we handle your personal information, please contact us at firstname.lastname@example.org. Should we be unable to resolve your complaint and you wish to take your complaint further, you may do so by contacting the UK Information Commissioner’s Office (ICO). The ICO can be reached here.
12. Data protection officer contact details
CHI has appointed a Data Protection Officer for you to contact if you have any questions or concerns about the CHI’s personal data policies or practices. CHI’s data protection officer’s name and contact information are as follows:
The Brew Eagle House
163 City Rd
UK Contact email: email@example.com
Contact telephone: (+44) (0)20 3917 4158