We are committed to protecting your privacy, keeping your data safe and not doing anything with it that you wouldn’t reasonably expect. This statement describes how we collect and use personal information. The terms of this statement may change, so please check it from time to time- you can see the date it was last changed above.
If you have any questions, please contact us at firstname.lastname@example.org.
What information do we collect and what do we use it for?
Every time you get in touch with us, we get in touch with you, or you take part in any Service Design Academy activity, we will record this so that we can better respond to your needs.
We will use your data to:
- Provide you with the services, products or information you asked for
- Send you information about activities we believe are most relevant to you
- Keep a record of your relationship with us
- Ensure we know how you prefer to be contacted
- Understand how we can improve our services or information.
If you enter your details onto one of our online forms, and you don’t ‘submit’ the form, we will not retain the information that you have entered.
Building profiles and targeting communications
We use profiling and screening techniques to ensure communications are relevant and timely, and to provide an improved experience for those who are engaged with us. Profiling also allows us to target our resources effectively, so we don’t waste them, or your time. Understanding your interests and needs helps us to make appropriate requests.
When building a profile we may analyse geographic, demographic and other information relating to you in order to better understand your interests and preferences in order to contact you with the most relevant communications. In doing this, we may use additional information from third party sources when it is available. Such information is compiled using publicly available data about you, for example addresses, listed Directorships, typical earnings or house prices in a given postcode/area and publicised donations to other causes.
We will contact you to let you know about the progress we are making, this includes relevant newsletters and event invites. We make it easy for you to tell us how you want us to communicate, in a way that suits you. We include information on how to opt out when we send you marketing. If you don’t want to hear from us, that’s fine. Just click unsubscribe, or let us know on email@example.com.
Where do we collect your information from?
We collect information in the following ways:
When you give it to us directly
You may give us your information in order to sign up for one of our events, request a service or communicate with us.
When you give it to us indirectly
When you give permission to other organisations to share or it is available publicly
We combine information you provide to us with information available from external sources. This is known as data-appending and enables us to contact you in the event that you change your address, job or phone number, or didn’t provide it to us. We also use this information to gain a better understanding of our supporters to improve our fundraising methods, products and services and make sure we contact you in the most relevant and appropriate way.
The information we get from other organisations depends on your privacy settings and the responses you give them. This information comes from the following sources:
Companies You may have provided permission for a company to share your data with third parties. This could be when you buy a product or service, register for an online competition or sign up with a comparison site.
Information available publicly This may include information found in places such as Companies House or published in articles/newspapers.
When we collect it as you use our websites or Apps.
Like most websites, we may use “cookies” to help us make our site – and the way you use it – better. Cookies mean that a website will remember you. They’re small text files that sites transfer to your computer (or phone or tablet). They make interacting with a website faster and easier – for example by automatically filling your name and address in text fields.
In addition, the type of device you’re using and the settings on that device may provide us with information, including what type of device it is, what specific device you have, what operating system you’re using, what your device settings are, and why a crash has happened. Your device manufacturer or operating system provider will have more details about what information your device makes available to us.
We may also use Google Analytics to monitor web traffic, however this data is anonymised and we cannot identify individuals. You can find out more about Google Analytics here.
When someone you know refers you to us.
On occasion, someone you know, for example friends, family or a business associate, may give us your name and contact details as someone who is likely to be interested in the services and training offered by the Service Design Academy. We will contact you as soon as is practicable to let you know we are processing your data in this way.
How do we keep your data safe and who has access to it?
Your data is stored securely on systems managed by Dundee and Angus College, following industry good practice. We do not process credit card details for online transactions; these are only handled by our PCI accredited Merchant Service providers. If you provide your card details to us on a paper form or over the phone, we will use them to process your payment securely and then immediately shred the card number into secure waste.
We take appropriate measures to ensure that the personal information disclosed to us is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used.
Your information is only accessible by appropriately trained staff and contractors.
We may pass your information to our service providers. We always make sure there are appropriate controls in place first; the service provider will never use your data for any additional non-Service Design Academy or Dundee and Angus College purpose. Some examples of service providers would be using an emailer service to send out personalised email newsletters, using a mailing house to send out communications, or screening names and addresses via a data bureau to remove deceased people from our mailing list and keep addresses up-to-date.
We may occasionally share your name and contact details with selected partners.
We may need to disclose your details if required to the police, regulatory bodies or legal advisors.
We will only ever share your data in other circumstances if we have your explicit and informed consent.
We never sell or swap any of your personal information.
Why we can collect your information and how you can tell us to stop
The legal basis for processing your personal data is your consent, where you have provided this, and otherwise our legitimate interests. In the case of our legitimate interests to process your personal data we are required to ensure that our interests are balanced against any detriment you may face from our processing.
We may on occasion transfer your personal information to countries or jurisdictions outside the UK if necessary for the above purposes. These countries may not always provide the same level of data protection as the UK. If we do make such a transfer, we will use controls such as Privacy Shield or model contract clauses to ensure your information is protected to an equivalent standard as if it were being processed within the UK.
You have a right to ask us to stop processing your personal data in cases where we are relying on our legitimate interests, and if it’s not necessary for the purpose you provided it to us for (e.g. registering you for an event) we will do so. You also have the right to withdraw your consent in cases where you have provided this. Contact us on firstname.lastname@example.org.
Right of access
You have a right to ask for a copy of the information we hold about you and to have any inaccuracies in your information corrected. If you want to access your information, send a description of the information you want to see and proof of your identity to email@example.com.
Keeping your data up-to-date
Where possible we use publicly available sources to keep your records up to date; for example, the Post Office’s National Change of Address database and information provided to us by other organisations as described above.
We really appreciate it if you let us know if your contact details change.