Privacy Policy

At NDAS we will only collect, process and store information about you that you have willingly provided. You don’t need to provide any information to us in order to use many of our services including our advice line and drop in services. NDAS aims to be transparent with regards to what information we collect and what will be done with this information.

NDAS will not share any of your information with any third party unless we are legally required to do so. If we do share information about you without your permission it could be because there are safeguarding concerns regarding an adult or child; via a court order or if someone is disclosing information about an act of terrorism.

When you give us a donation or contact us for any reason, we will ask for your information. We use this information to manage your donation or to record any advice or support requested. You are not obliged to give us this information but we may not be able to provide a service to you if you don’t, for example

We will process your personal data on the basis of your consent or our legitimate interests. These interests could include provision of information about services we provide; the administration of our website; and to ensure we comply with applicable laws and regulations.

We may ask you to ‘opt in’ to receive further information by email. By opting in, you agree to us contacting you occasionally with information about our work and to ask for other help in the future. We will never sell or swap your details. If you change your mind after ‘opting in’, you can write to info@ndas.co or call 0300 0120154 and let us know.

Dr Rachel Duncan, CEO is our data controller. Our data protection officer is Zoe Tatham, Business Manager. Both can be contacted via info@ndas.co or by calling 0300 0120154.

Keeping your data safe

We constantly work to make sure that your data is properly protected through locked and secured filing cabinets, passwords for electronic devices and encryption.

We make sure that your data is only seen by people who need to view it for their work and that our staff are trained in protecting your information.

Right to access your information

You have the right to see the information we hold about you under Data Protection laws. You also have a right to us to correct, delete, or restrict your personal data. You may ask us to send your information to someone else, or to give you information in a way that makes it easy for you to pass on. You can also object to or withdraw your permission for us to process your information.

If you want to exercise any of these rights, send a description of your request (including the information you want to access, if applicable) and proof of your identity by email to info@ndas.co

Right to complain

If you are not happy about the way in which we are processing your personal data, please contact us at info@ndas.co. Please see our complaints policy below for further detail. You also have the right to make a complaint to the UK Information Commissioner’s Office.

At NDAS we take your privacy seriously. The information below sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed.

What information do we hold?

We hold information that you provide to us either in person, electronically or by phone. The information you give us may include your name, address, contact details and any other details you choose to share with us.

If you are an NDAS employee, volunteer or service user we may also hold certain categories of sensitive information such as personal financial details, age, gender, marital status, date of birth, full employment and educational history, references, medical and criminal records.

How will we use your information?

For internal purposes, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
If you sign up for electronic newsletters we will use your information to send you news and information about NDAS only.
To monitor and evaluate the services we provide. Any information provided to third parties for evaluation purposes is anonymised and we will seek separate permission to share this information.

Where do we store your personal data?

Only NDAS staff that have a requirement to access your data can view and access it. We share anonymised data as required with funders and stakeholders.
We may store your information electronically, in paper form, or both.
All computers that store any personal data are password protected.
Laptop computers and similar devices that contain confidential information are encrypted.
Any paper files that hold personal information (other than names and contact details) are kept on secure premises in locked filing cabinets.
Information you provide to us is stored on our secure cloud based servers.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

What is our legal basis for processing your data?

Our legal basis for processing personal data is different depending upon the purpose it was collected for. The following list covers the main types of data that we hold, for a full list please contact us at info@ndas-org.co.uk

Data collected for NDAS news mailing lists is held on consent (unless otherwise stated).

Data collected through our booking systems for the events and courses that we run is held for our legitimate interests or because of a contractual obligation to do so.
Employee, volunteer and other relevant data records are processed to comply with legal and contractual obligations and to fulfil our legitimate interests as a charity.
Some of your records may be held with your consent. Where we choose to hold such records on consent we will notify you of this when your data is collected and will ask for you to agree to this. We will also inform you how you can withdraw your consent if you wish to do so.
Some data we may hold as the law requires in regards to safeguarding.

How long do we hold your data?

The length of time that we will retain your data will vary depending upon the purpose for which it is processed.
Data that is held by us on consent is only kept for as long as we have your consent to process that data.

Your Rights

Under UK legislation you have a number of rights about how your data is processed. Full details of your personal rights can be found on the Information Commissioner’s Office website – https://ico.org.uk/.

Your rights include the right to:

Request access to the data we hold about you,
Have inaccurate and incomplete data rectified,
Have the personal data we hold on you deleted (except where we are required to hold the data by law),
To restrict the processing of your personal data in certain circumstances.
Data that is held on consent will only be processed as long as we have your consent. To withdraw your consent you can contact us by emailing us at info@ndas-org.co.uk

Changes to our Privacy Policy

Any changes we make to our privacy in the future will be made available to you and, where appropriate, notified to you by e-mail or in person.

If you have any questions, comments or requests regarding this privacy policy please email info@ndas-org.co.uk

Dowload NDAS Privacy Policy