Data Protection and Privacy Statement
This Privacy Notice explains how Gloucestershire Nightstop collects and uses your personal information and who we share it with.
This notice applies to visitors to our website and social media platforms, subscribers, donors, fundraisers, supporters, event attendees, volunteers, job applicants, people who receive advice, support or housing services from us.
We regularly review this Privacy Notice, please check our website for the most up to date version.
For further information about our privacy practices please contact our Data Protection Lead by:
Writing to Gloucestershire Nightstop, Morroway House, Station Road, Gloucester, GL1 1DW.
Emailing *protected email*
Calling 01452331330
About us
Gloucestershire Nightstop helps people who are homeless, vulnerable and disadvantaged. We are a Data Controller registered with the Information Commissioner’s Office (ICO) under registration number ZB325583
Registered Charity Number: 1102988, Company Number: 04837650 (Registered in England and Wales)
How do we collect your information?
We collect your personal information when you interact with Gloucestershire Nightstop. This could be when you tell us information on the phone, go onto our website, correspond with us by email or letter, complete a form or tell us information in person.
We also collect information from third parties where it is relevant to our relationship with you and where you have given them consent to share your information with us, or where there is a legal reason for sharing the information such as for fraud prevention purposes, public protection or safeguarding purposes.
What information do we process?
The type of information we collect and how we use it depends upon why you are providing it and your relationship with us. We aim to be clear with you when we collect your information and will only use it fairly, lawfully and in a way that you would reasonably expect us to.
We collect the following types of Personal Information:
Contact details – including your postal address, telephone number(s), and email address
Your full name and title
Date of birth
Details of your circumstances when providing you with housing or support services
Your bank details, credit/ debit card and other payment details
Records of your correspondence, involvement and engagement with us
Donation history and Gift Aid details
Photographs, video or audio recordings
Occupation
Other information you share with us.
We may also process sensitive personal information, known as special category data and information about criminal convictions or offences. This includes information about your race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, health, sex life or sexual orientation.
We will process this data only where it is necessary, for example to comply with legal requirements or to provide support to you if you access one of our services, or we will ask you for your explicit consent to process this information.
Gloucestershire Nightstop advice, support and housing services
When you access a Gloucestershire Nightstop advice, support or housing service we will process your personal information, special category data, and information relating to criminal convictions and offences.
We collect your information to help us understand your support and accommodation needs to provide the most appropriate service to you. We also are required by regulators and law to collect some information to conduct risk assessments, monitor our services and meet safety standards
We will also use your data for statistical reports for monitoring purposes to see how our services are performing and how we can improve them. Statistics will not include any information that could be used to identify you.
We will only share your information when there is a benefit to you and it contributes to your housing or support needs, or when legally required to do so, including regulatory compliance. We may share your personal information with:
Other agencies who may contribute to your support, like GPs, pharmacies and hospitals;
The Local Authority or organisation for whom we provide the service under a contract;
People you have authorised access or when it is in your best interest;
Our insurance company in relation to claims or possible claims;
Utility providers and Housing providers if we help you to move to new accommodation.
Gloucestershire Nightstop will not sell your data or share your information with any third party for marketing purposes.
We may contact you to ask you for feedback or opinions about our services or your experiences with us.
Only staff that need access to your information because they are working with you or contributing to your housing and support can access your records.
Website Visitors
We use cookies on our website so that we can tailor the content to you, to ensure it’s working the way it should and to make improvements. You can find out more about our cookie policy here.
Your rights
If you already have GA cookies, they will be updated with the latest information about your visit to the site.
As we cannot access any personal data about you ourselves, we are not the Data Controller for your Google Analytics or Doubleclick profile data. You would need to contact Google directly for this information.
You have the right to object to this tracking and to stop it happening.
If you would like more detail about the methods used however, please get in touch at *protected email*
How do I prevent being tracked by Google Analytics?
If you are uncomfortable with this tracking, you can take the following actions:
Use a tracking-blocker, such as Privacy Badger
Clear cookies after every browsing session
Install the Google Analytics opt-out extension
Social Media
We use social media to inform, educate and engage new potential supporters. We may target ads using social media at audiences that look like they have an interest in Gloucestershire Nightstop’s work. Please see our cookie policy
If you have given us consent to use your image or become a case study to help promote our work we may post this on our Social Media outlets.
We want to remind you that information shared on social media, on our pages or in private messages may be used or sold by the provider, such as Facebook, Twitter or Youtube, for commercial purposes.
Email and Newsletter Subscribers
If you subscribe to our mailing list, you will be automatically be subscribed to receive email updates. You will only receive information that you have opted in to receive.
Depending on your preferences, we will contact you for the following reasons:
To share stories about young people
To update you with news about Gloucestershire Nightstop
To let you know about opportunities to get involved with Gloucestershire Nightstop campaigns, events and giving
We use Dotmailer (part of dotdigital) to manage our email marketing. The dotdigital platform is hosted on a high security Microsoft Azure data centres. All Azure facilities meet a broad set of compliance standards, details of which can be found here
Comapi also utilise Google Cloud services in West Europe and the UK. These hold copies of Comapi data for disaster recovery purposes. Details around Google’s cloud security can be found here
Microsoft Azure and the Google Cloud Platform are used to host infrastructure that powers dotdigital’s SaaS platforms, data will be stored in one of the following regions .
The Engagement Cloud EU region utilises the Microsoft Azure North and West Europe facilities, and Google’s Europe region. The Engagement Cloud US region utilises the Microsoft Azure Central US, and East US 2 facilities, and Google’s Americas region. The Engagement Cloud Australia region utilises the Microsoft Azure Australia East. and Australia SouthEast facilities, and Google’s Sydney facility. Customers using our CPaaS and legacy SMS platforms will have data stored in Microsoft Azure North and West Europe, and Google’s UK facilities.
We transfer all contacts to our own database, Raisers Edge which is UK hosted. This system is kept updated with your marketing preferences.
You can change your email marketing preferences at any time, by clicking ‘unsubscribe’ or ‘manage preferences’ on any of our emails or by contacting: *protected email*
Donors, Fundraisers and Supporters
We collect and process information about you if you choose to support us. This could be when you make a donation, volunteer for us, register to fundraise for us, sign up for an event or sign up to receive a publication.
We do not store sensitive personal information that you share with us unless there is a clear and valid reason for doing so.
We will use your information to:
Provide you with the services, products or information you asked for
Administer your contact details and give you the opportunity to change your preferences as well as amend errors and update your data
Manage donations (including processing Gift Aid)
Support your fundraising activities
Help with your activities online
Keep a record of your relationship with us (including your feedback)
Ensure we know how you prefer to be contacted
Understand how we can improve our services, products or information
Screen and analyse our supporters against a demographic database for the purpose of segmentation, so that we can efficiently and cost-effectively fundraise, and ensure the most suitable level of marketing is carried out across our entire supporter base
Flag your data record– for example if you request to be removed from certain mailing lists, opt out of any specific data processing, or if you have special requirements
Conduct surveys so that we can be sure our customer care and services are maintained to a high standard
We may also use your personal information to detect and reduce fraud and credit risk, or for due diligence purposes.
We need to keep the details of financial transactions for 7 years after the financial year of a donor’s last gift, in the event of a tax or banking enquiry. We will only contact you to thank you. If you say that you would like to hear from us, you will be added to our email subscriber list and will receive regular updates and fundraising asks. You can change your preferences on these updates at any time.
Staff, Volunteers and Trustees
When you apply for a job, volunteering opportunity or work for us we collect personal and sensitive information about you. We do this to:
Comply with legal requirements or industry standards, such as to carry out eligibility checks and where relevant Disclosure Barring Services.
Offer appropriate support or training you need to carry out your role.
Administer your role, such as payroll or pension services.
Contact you in relation to your role or organisational information.
Monitor Equality, Diversity and Inclusion.
Your information is stored on our computer system and in a staff file held by our Executive Director and line managers, Board or Committee information is held by our Executive Director.
If you are unsuccessful in your job application, we will hold your personal information for 6 months after we’ve finished recruiting the post you applied for. After this date we will destroy or delete your information. We keep de-personalised statistical information about applicants to develop our recruitment processes, but this does not contain any information that could be used to identify individual job applicants.
Once you stop working for us, we will keep your information for 7 years.
Profiling
We use profiling and screening techniques to ensure communications are relevant and timely, and to provide an improved experience for our supporters. Profiling also allows us to target our resources effectively, which donors consistently tell us is a key priority for them. We do this because it allows us to understand the background of the people who support us and helps us to make appropriate requests to supporters who may be able and willing to give more than they already do. Importantly, it enables us to raise more funds, sooner, and more cost-effectively, than we otherwise would.
When building a profile, we may analyse geographic, demographic and other information relating to you in order to better understand your interests and preferences in order to contact you with the most relevant communications. In doing this, we may use additional information from third party sources when it is available. Such information is compiled using publicly available data about you, for example addresses, listed Directorships or typical earnings in a given area.
What legal basis do we rely on to process your data?
The law requires us to tell you the basis on which we process your data. We will process your -personal data on the following basis:
Consent
We may ask for your consent to process your information, such as to send you direct marketing. You can withdraw your consent at any time.
Necessary in the performance of a contract
Where we have a contract or an agreement with you to provide goods or a service. You will not be able to opt out of providing this information because without it we would be unable to do the thing you have asked us to do.
Legal Obligation
We may process your personal information to comply with legal requirements, such as for fraud prevention purposes when claiming Gift Aid.
Public Task
We may process your information to perform a specific task in the public interest that is set out in law, for example some of the accommodation and support services that we provide are in the public interest.
We process Special Category Data and Criminal History Data on the basis of ‘substantial public interest’ and we do this in order to safeguard children and of individuals at risk, to ensure equality of opportunity and treatment, to provide advice services, to prevent or detect unlawful acts and to comply with legal or regulatory requirements.
Legitimate interests
The law allows us to process your data if it is in our legitimate interests to do so, but only so long as it does not disproportionately affect your privacy rights, cause you any harm or is overly intrusive.
The law also says we must let you know what we consider our legitimate interests to be. Our legitimate interests are:
Ensuring that our services meet the needs of our supporters, customers and clients.
Communicating with supporters, customers and clients to meet our business objectives.
Ensuring that we make the most efficient use of our resources and we understand how we are performing.
Ensuring we understand our supporters, customers and client’s experiences and views.
If you think that anything we do with your data affects you adversely, you can ask us to stop processing your data.
You can contact us to find out more about this.
How we store your information
We ensure that there are appropriate technical controls in place to protect your personal details.
Online forms are always encrypted, our servers are secure and our network is protected and routinely monitored.
Where we hold paper records they are retained securely in a locked cabinet with restricted access.
Sharing your information
Gloucestershire Nightstop staff, volunteers and contractors are appropriately trained and will have access to your information in order to provide the services you have requested.
We do not trade personal data for commercial purposes and will only disclose it if required by law, if it is necessary to arrange your event attendance, or if it is with your consent.
We share some information with our data processors, which are organisations that carry out a service on our behalf, such as to process donations.
We carry out comprehensive checks on companies before we work with them. We have contracts and information sharing protocols in place that are clear about our requirements, especially regarding how they look after the personal data they collect or have access to.
Transfers to other countries
Some of our servers are hosted in the European Economic Area, data transferred to these servers is done so with safeguards and controls that meet the requirements of Article 46 of the EU GDPR, and UK GDPR from 1st January 2021, to ensure its security.
If we are re-connecting you with a country that is located outside of the UK you will always be involved in the process and we will ensure that your personal information is adequately safeguarded.
Links to other Websites
The Gloucestershire Nightstop website contains links to and from other websites.
This Privacy Notice only applies to Gloucestershire Nightstop and does not cover any other websites that we link to.
Your privacy rights
As an individual whose personal data is processed by Gloucestershire Nightstop you have the following rights:
Right to be Informed:
The Right of Access:
The Right to Rectification:
The Right to Erasure:
The Right to Restrict Processing:
Right to Data Portability:
Right to Object:
To exercise your rights please contact us.
Complaints
If you are not satisfied with the way that we have dealt with your personal data, please let us know and we will try and resolve your concerns. If you are not satisfied with the outcome, you can make a formal complaint through our Complaints Policy .
If you are still not happy with our response, you have the right to complain directly to the Information Commissioners’ Office
