Privacy Policy | Mental Health Motorbike

MENTAL HEALTH MOTORBIKE

PRIVACY NOTICE

CONTENTS

1 INTRODUCTION

2 THE INFORMATION WE COLLECT AND WHEN

3 HOW WE USE YOUR INFORMATION

4 WHO WE MIGHT SHARE YOUR INFORMATION WITH

5 HOW WE KEEP YOU UPDATED ON OUR PRODUCTS AND SERVICES

6 YOUR RIGHTS OVER YOUR INFORMATION

7 HOW LONG WE KEEP YOUR INFORMATION FOR

8 GIVING YOUR REVIEWS AND SHARING YOUR THOUGHTS

9 SECURITY

10 CHANGES TO OUR PRIVACY NOTICE

11 HOW TO CONTACT US

1. INTRODUCTION

Mental Health Motorbike (MHMb) is committed to protecting the privacy and security of your personal information. We take care to protect the privacy of [our volunteers and users that communicate (online or offline) with us, at events, over the phone, through our mobile applications, websites and social media platforms.

We have therefore developed this Privacy Notice to inform you of the data we collect, what we do with your information, what we do to keep it secure, as well as the rights and choices you have over your personal information.

Throughout this document we refer to Data Protection Legislation which means the Data Protection Act 2018 (DPA2018), United Kingdom General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003, all the foregoing as amended from time to time, and any legislation implemented in connection with the aforementioned legislation. Where data is processed by a controller or processor established in the European Union, or comprises the data of people of the European Union, it also includes the EU General Data Protection Regulation (EU GDPR). This includes any replacement legislation coming into effect from time to time.

Mental Health Motorbike is the controller for the personal information we process, unless otherwise stated.

We are registered with the Information Commissioner’s Office (the ICO) with registration number ZB494405

You can contact us either by email or post.

Our main trading/postal address: GDPR, Mental Health Motorbike c/o Bendrigg House, Heath Road, Chesterfield, S44 5RP

Our E-mail address is: gdpr@mhmotorbike.com
Our Data Protection Manager is Anne Moore and the Deputy Data Protection Manager is Leanne McClean.

2. THE INFORMATION WE COLLECT AND WHEN

We only collect personal information that we know we will genuinely use and in accordance with the Data Protection Legislation. Data may be collected in interactions with MHMb including: when making a donation, booking a MHFA course, registering to help as a volunteer, purchasing a raffle ticket, placing an order on our website.

The type of personal information that we may collect about you include some or all of the following:

Your name
Telephone number(s)
Email address
Postal Address
Survey responses
IP address
Purchases
Services used
Subscriptions
Records of conversations and agreements
Payment transactions

You are under no statutory or contractual requirement or obligation to provide us with your personal information; however, we require at least the information above in order for us to deal with you as a volunteer or service user in an efficient and effective manner. We will not store, process or transfer your data unless we have an appropriate lawful reason to do so.

Sensitive Data

If you contact us directly to receive support, we may sometimes need to record sensitive personal information. Data Protection Law recognises that some personal categories of data are more sensitive including: race, ethnic origin, political opinions including party support or membership, religion, philosophy, trade union membership, genetics, biometrics (where used for ID purposes), health (mental and physical), sex life and sexual orientation.

In conversations about mental health, relevant sensitive personal information may be shared e.g. health issues, sexual orientation, substance abuse etc. Mental Health Motorbike will treat this information with the utmost care, respect and confidentiality. We will not pass your information onto anyone without your explicit consent unless there is a legal basis for doing so. This would only be in exceptional circumstances such as reporting safeguarding concerns, serious self harm or posing a threat to others.

3. HOW WE USE YOUR INFORMATION

To contact you, following your enquiry, reply to any questions, suggestions, issues or complaints you have contacted us about
To make available our products and services to you
To process your donations or other payments, to claim Gift Aid on your donations and verify any financial transactions
To provide the services and goods that you have requested
To ensure that Mental Health First Aiders receives certificates, reminders and renewal notices in a timely manner
To take payment from you or give you a refund
Where you volunteer with us, to administer expenses claimed
For statistical analysis and to get feedback from you about our services and activities.
To contact you about products and services from us
To keep a record of your relationship and interests with us
To provide you with our Newsletter
To help answer your questions and solve any issues you have
To comply with our legal and regulatory governance obligations and good practice
To ensure business policies are adhered to (such as policies covering email and internet use)
To investigate complaints
To ensure safe working practices, monitor and manage staff/volunteer access to systems and facilities and staff absences, administration and assessments
To monitoring staff/volunteer conduct, disciplinary matters
To improve services

4. WHO WE MIGHT SHARE YOUR INFORMATION WITH

Data is mainly used by our Trustees and volunteers to support users.

We may share your personal data with other organisations in the following circumstances:

MHMb carry’s out administration of Mental health First Aid (MHFA) courses. To do this we must share your information with MHMb volunteers, Mental Health First Aid England, Mental Health First Aid Wales and with the relevant accredited instructors.
We share data with partners to process donations and claim Gift Aid where appropriate
If the law or a public authority says we must share the personal data;
If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk).

We will not share your information with any third parties for the purposes of direct marketing.

We use data processors who are third parties to provide elements of services for us. We have Data Processing Agreements in place with our data processors. This means that they are only able to process your personal information under our strict instructions. They may only share your personal information with other organisations apart from us if we have provided them with prior written consent for this sharing. In addition, these other organisations must comply with our Data Processing Agreement. They will hold your personal data securely and retain it for the period we instruct.

5. HOW WE KEEP YOU UPDATED ON OUR PRODUCTS AND SERVICES

We may send you relevant offers and news about our products and services in a number of ways including by email, but only if you have previously consented to receive these Newsletters. When you register with us, we will ask if you would like to receive Newsletters and you can change your marketing choices online, by email or in writing at any time.

If you wish to amend your marketing preferences, you can do so by sending a message on Facebook, emailing gdpr@mhmotorbike.com or writing to GDPR, Mental Health Motorbike c/o Bendrigg House, Heath Road, Chesterfield, S44 5RP.

6. YOUR RIGHTS OVER YOUR INFORMATION

Right to be informed about our collection and use of personal data

You have the right to be informed about the collection and use of your personal data. We ensure we do this by providing you with this Privacy Notice. This Notice is regularly reviewed and updated to ensure it accurately reflects our data processing activities.

Right to Access Your Personal Information

You have the right to access the personal information that we hold about you in many circumstances, by making a request. This is sometimes termed a ‘Data Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge and we will respond without delay and within one calendar month of receipt of your request.

We may ask for proof of identity and sufficient information about your interactions with us so that we can locate your personal information. Please note that the time limit for fulfilling your request does not start until we have been able to verify your identity.