- PRIVACY POLICY
This Privacy Notice details the types of personal data we may collect about you when you interact with us. It also explains how we will store and handle that data and keep it safe.
We know that there is a lot of information here, but we want you to be fully informed about your rights, and how the Law Centres Network uses your data. We hope that the following sections will answer any questions you have. If not, please do get in touch with us.
We normally collect your data when you provide it to us or when it is provided to us by others. You may give us your data by email; through an online web form; on a paper form; over the telephone; face to face; or by post.
The type of data we collect depends on why we are processing your data. We typically collect your name and contact details
We only use your data for the purposes for which it was provided. For instance:
We maintain a database of supporters. This includes contact information and is managed through MailChimp for the purpose of sending e-bulletins about LCN's work and the work of Law Centres. You will have subscribed to or have opted in to being included in this database.
MailChimp is based in the US and therefore your data (name and email address) is transferred outside of the EU. However, we believe that, given the limited nature of the data being transferred, the Standard Contractual Clauses that exist between EU and US, provides adequate data security and protection.
If you are no longer happy for us to hold your details, at any time you can stop receiving emails from us by unsubscribing from the list, or updating your mailing preferences. You can view the MailChimp Privacy here: https://mailchimp.com/legal/privacy/
We accept donations through JustGiving, a donations portal operated by JustGiving. Donor data is stored by JustGiving and we do not receive any personal data. However, we can log in to our JustGiving account to see the donor data, except for payment details, which we cannot see at all. Full details of the JustGiving privacy policy can be found at: https://btplc.com/mydonate/aboutmydonate/Privacypolicy/index.aspx.
LCN uses Plausible Analytics to help understand how are website is being used by different audiences. This is a privacy-friendly and open-source web analytics platform which is fully compliant with GDPR. It doesn't use any cookies. There are no cookies on our website.
Whilst LCN cannot provide legal advice, some people still contact us for information on their local Law Centre or where to find other sources of help. We do not recommend disclosing confidential or sensitive information about your advice / legal query or personal circumstances. However, if you do send us emails or leave voicemails, copies of enquiries are retained by LCN . We also record the number and type of enquiries we receive in relation to legal advice, volunteering, media and setting up a Law Centre on our database.
We do record and retain anonymised data about your enquiry on our database. This data simply classifies what your enquiry was about and your location (to the nearest town), to help us better understand the type pf enquiries we receive, legal need and provision of legal services across the country. You cannot be identified from this data.
If you contact us to register your interest about setting up a Law Centre, we collect your first/last name, email address, telephone number and your nearest town, along with details of your enquiry.
We only ask what is required in order to provide assistance on what you have requested. In this case, we retain the details you provided in order to assist you in your enquiry. Your data is kept secure and confidential on our systems and is retained indefinitely so as we have a historical record.
Some freelance workers, consultants and service users fall into this category. We only collect as much data as needed to facilitate the agreement (typically provision of services to LCN or to render services to a customer by nature of our business relationship e.g. training and events) with them. We will hold this data until we no longer consider it relevant for the purpose it was originally collected. Until then we have a legitimate interest in keeping this information on our systems by nature of our business relationship.
Where we deliver, administer or lead on projects that are funded by other organisations, we may be required to provide monitoring information to that funder to evidence how we have used the money and to what benefit. Similarly, where we work in partnership with other organisations we may share monitoring information between partners. In these cases, we may gather or receive details, for example, of your age; ethnicity; gender etc. We keep this information securely and confidentially and we only use it for monitoring purposes and to evaluate the project. Where we disclose it to funders we do so anonymously. We will always let you know if we are sharing the data we collect from you with partners or funders and ask your permission before doing so.
LCN uses Eventbrite and Ticket Tailor for event management. LCN may also collect data about you when you register or pay for an event. We only collect details necessary for running the event, and typically use the information to provide you with the service to requested, and to monitor and evaluate the training we deliver.
The Eventbrite privacy policy is at https://www.eventbrite.co.uk/help/en-gb/articles/460838/eventbrite-privacy-policy/
The Ticket Tailor privacy policy is at https://www.tickettailor.com/privacy-policy/
We are only entitled to hold and process your data where the law allows us to. The current law on data protection sets out a number of different reasons for which we may collect and process your personal data. These include:
In most situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our charity and which does not materially impact your rights, freedom or interests. This may include to satisfy our external quality auditors or our regulators, or to properly report to funders in cases where you have received services or advice obtained under a grant-funded service that we administer.
If the law requires us to, we may need to collect and process your data. For example, we can pass on details of people involved in fraud or other criminal activity.
In some situations, we can collect and process your data with your consent. For example, when you tick a box to receive email newsletters, or if you consent when signing up for certain services or when making gifts and donations to us. When collecting your personal data, we will always make clear to you which data is necessary in connection with a particular service/purpose.
We take protecting your data very seriously. The data you give us may be subject to Legal Professional Privilege and is often extremely sensitive and confidential.
With this in mind we will treat your data with the utmost care and take all appropriate steps to protect it. We have clear data protection and information security policies and procedures in place, along with Regulatory and other legal obligations to keep your data safe. These are regularly assessed as part of our Quality Standards and compliance processes.
We protect our IT system from Cyber Attack. Access to your personal data is password-protected, and sensitive data is secured by encryption.
We regularly monitor our system for possible vulnerabilities and attacks, and we carry out regular testing to identify ways to further strengthen security.
LCN cares to ensure the security of personal data. When LCN collects information about you, we also make sure that your information is protected from unauthorized access, loss, manipulation, falsification, destruction or unauthorized disclosure. This is done through appropriate technical measures. For example, emails and our online forms are encrypted, our network is protected and routinely monitored, remote devices e.g. mobile phones and laptops are encrypted and there are password policies and multi-factor authentication in place for staff to securely access the organisation’s IT systems. Our IT support company undertakes periodic review of our security to ensure we are protected.
We undertake regular reviews of who has access to information that we hold, to ensure that your information is only accessible by appropriately trained staff, volunteers and contractors. Staff have access to personal information on a ‘need-to-know’ basis so, for example, highly sensitive data such as employment records are only available to managers with the designated permissions to access and process that data.
We only keep your data for as long as is necessary for the purpose(s) for which it was provided.
For supporters who have consented to be included on our supporter database we will hold the data until the individual unsubscribes or withdraws consent, or when it becomes clear that emails and other communications are no longer being delivered.
For some matters/contracts we may decide that it is proper and appropriate to keep data for the specified period to comply with regulatory or legal requirements e.g. financial data for six years. Our data retention policy sets out how long we keep different types of data.
We sometimes share your personal data with trusted third parties. We only do this where it is necessary for providing you services or for the effective operation of LCN.
For example, we may share your data with Law Centres; experts; translators; secure file storage and destruction companies; auditors; the companies that securely host our off-site cloud storage servers.
The policy we apply to those organisations to keep your data safe and protect your privacy is as follows:
We provide only the information they need to provide their specific services;
They may only use your data for the exact purposes we specify in our contract with them;
We work closely with them to ensure that your privacy is respected and protected at all times;
If we stop using their services, any of your data held by them will either be deleted or rendered anonymous.
Unless we state otherwise, your data is stored and processed within the European Economic Area (EEA). The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway.
If we ever have to share your personal data with third parties and suppliers outside the EEA, we will ensure that it is sent and stored securely and, where appropriate, we will seek your specific consent to do so.
You have the right to request:
Access to the personal data we hold about you
This is called a Subject Access Request and is free of charge in most cases. However, LCN has the right to refuse to comply with your request if we believe it to be manifestly excessive or unfounded.
The correction of your personal data when incorrect, out of date or incomplete.
To withdraw consent. Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
The deletion of your personal data, for example when you withdraw consent; or object and we have no legitimate overriding interest; or once the purpose for which we hold the data has come to an end – although we are not required to delete your data where data where we are required to hold it for complying with our own legal obligations.
That we stop any consent-based processing of your personal data after you withdraw that consent.
Where we rely on legitimate interest to process your personal data, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.
To ask for your information, please contact Alex Charles at alex@lawcentres.org.uk.
If we choose not to action your request, we will explain to you the reasons for our refusal. In order to comply with your request, we may ask you to verify your identity.
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. You can contact them by calling 0303 123 1113, or go online to www.ico.org.uk/concerns (opens in a new window). Please note that we cannot be responsible for the content of external websites.
Sign up for our monthly newsletter to stay in the loop