XCEL respects your privacy…
Last Updated: 25.05.2018
- What information do we collect about you?
- How will we use that information about you?
- Sharing your information
- How long will we keep your data?
- Your rights
- Requesting access to, updating & removing your data
- How to contact us
What information do we collect about you?
We collect information about you when you submit an enquiry, provide your details requesting further information, or requesting to join our mailing list. We may also collect your data in the form of photos & videos taken at one of our events or services.
How will we use that information about you?
We initially collect information about you to process your enquiry, manage your mailing list request or process your giving.
We may also contact you with information about further services or events that may be of interest to you, or to invite you to take part in feedback in relation to our services and events. In the case of financial giving, we may contact you to update you about our work or to invite you to fundraising and other events.
Photos and videos may be used as a part of our social media, web & marketing campaigns.
Sharing your information
We will not normally share any information we hold about you with others without your prior consent, unless one of the following exceptions apply. Information may be shared between XCEL leaders or with authorised volunteers in order to effectively provide services to you. We may disclose information we hold about you if:
- If we feel there is a legitimate interest for us to do so. A legitimate interest analysis will be conducted to ascertain where this is appropriate
- It is necessary for law enforcement or similar purposes
- As a necessary part of providing you with our service(s) or contacting you as a member, donor or customer – for example, by using a third party mailing house to process our communications
Third parties we may share your data with based on these reasons are
How long will we keep your data?
We will retain your information for as long as you are registered with us as interested in or using our services. You may request at any time for your information to be removed from our database or to change the way you are contacted (see Requesting access to, updating & removing your data section below).
As an individual, you have control over what information we hold about you, how it is used, and whether you are happy for us to keep it. General Data Protection Regulation (GDPR) states that you have:
- The right of access – to see what information we hold about you and to verify the lawfulness of our processing of your data
- The right to rectification – to rectify the information we hold if it is incomplete or inaccurate
- The right to erasure – “to be forgotten”; to have your information removed
- The right to restrict processing – to change the way in which we use your data
- The right to data portability – to obtain your information in order to transfer it to another service or organisation
- The right to object; and – to object to the way in which we are using your data
- The right not to be subjected to automatic decision making including profiling – to have your information removed from any databases subject to automatic decision making processes
To exercise any of your rights regarding your personal information, please contact the data officer on firstname.lastname@example.org
Requesting access to, updating & removing your data
You have the right to request details of all the information we hold about you. To do this, you should email us on email@example.com. There is no charge for this, however if you are making multiple requests for the same information, we retain the right to charge an administration fee. We will respond to your request within 1 month, unless clarification is required.
You also have the right to ask us to update your information or have it removed from our database. This can be done using the same process as above.
In the first instance, we would ask that all complaints regarding the handling of your data be sent directly to our data officer via email to firstname.lastname@example.org, or in writing to Data Officer, Xcel Church, 3 Mill Park, Portree, IV51 9EY.
If you feel your complaint has not been handled appropriately, you can contact the Information Commissioner’s Office (ICO).
How to contact us
3 Mill Park
For more information about your legal rights in relation to the information we hold about you, please visit the Information Commissioner’s Office at ico.org.uk.