Privacy Policy

Introduction

We, Harrow Carers, are the ‘controllers’ of the information which we collect about you (‘personal data’). Being controllers of your personal data, we are responsible for how your data is processed. The word ‘process’ covers most things that can be done with personal data, including collection, storage, use and destruction of that data.

This notice explains why and how we process your data, and explains the rights you have around your data, including the right to access it, and to object to the way it is processed. Please see the section on ‘Your rights as a data subject’ for more information.

We are a Charitable Company and our contact details are:

Address: 376-378 Pinner Road, Harrow, HA2 6DZ
Email: admin@harrowcarers.org
Telephone number: 020 8868 5224

Personal data

‘Personal data’ is any information that relates to a living, identifiable person. This data can include your name, contact details, and other information we gather as part of our relationship with you.

It can also include ‘special categories’ of data, which is information about a person’s race or ethnic origin, religious, political or other beliefs, physical or mental health, trade union membership, genetic or biometric data, sex life or sexual orientation. The collection and use of these types of data is subject to strict controls. Similarly, information about criminal convictions and offences is also limited in the way it can be processed.

We are committed to protecting your personal data, whether it is ‘special categories’ or not, and we only process data if we need to for a specific purpose, as explained below.

We collect your personal data mostly through our contact with you, and the data is usually provided by you, but in some instances, we may receive data about you from other people/organisations. We will explain when this might happen in this Notice.

Your data and how and why we process it

In general terms, we process your data in order to manage our relationship with you. The table below lists more specific purposes for processing your data, and the legal basis for each type of processing.

Data processing	Legal basis for processing
We process your data in order to provide you with relevant information, advice and support in line with our Charitable Objectives. We process your contact details and any details you provide for us about your circumstances such as financial information and your preferences regarding how you prefer to be contacted. We also process some special categories of data such as details of your caring role and the person you care for, any illnesses or disabilities which you may which you have told us about. We do not collect data about you from 3rd parties but we may store data about you which you have asked us to obtain from 3rd parties on your behalf such as welfare benefits information from the DWP or HMRC.	In order to provide you with the information, advice and support which is the main purpose of our work, we process your data on the basis of our legitimate interest in providing this service to you. The legitimate interests are providing relevant and timely information, advice and support to assist you in your caring role and to help reduce the impact you may experience on your health and wellbeing in caring for someone else. We sometimes have contracts with public bodies who fund the work we do and we have a legitimate interest in processing your data for this purpose. Any special category data that we process about you is done so on the basis of a legitimate interest and is carried out in the course of our legitimate activities with appropriate safeguards as a not-for-profit body.
CCTV – at our Carers’ Centre we use CCTV for security purposes. The images which are recorded on our CCTV system are considered personal data in law. We process this personal data to assist with keeping people and property safe.	In order to keep you and your property safe, we may process your personal data in the form of CCTV images if you visit our centre. This processing is done on the basis of our legitimate interest in keeping you and your property safe.
Photography – from time to time, during activities, we may take photographs of people. The images we take are sometimes used to provide information and advice for people using and supporting our services.	In order to provide information about our services, we may process your personal data in the form of photographs if you take part in our activities. This processing is done on the basis of our legitimate interest in providing relevant information to people who may use and support our services.

At times, we may further process data which we have already collected. We will only do this if the new purpose for processing it further is compatible with the original purpose that the data was collected for. We will tell you about any further processing before carrying it out.

Who we share your data with

For some processing purposes we share your data with third parties. This is a list of the information we may share with external recipients, and for what purpose:

Recipients of your data

Purpose for sharing

Contact Management Database service providers e.g. Charitylog.

We keep your personal data on a contact management database in order for us to provide you with information, advice and support services in line with our charitable objectives. Your data is effectively shared with the providers of the database software and we take necessary steps to determine that your data is kept safe and is not shared further with any 3rd parties.

Accountancy software service providers e.g. QuickBooks

If you make a donation, pay for services, pay for membership or have any financial interactions with us we may process your data using financial accountancy software such as QuickBooks in order to provide you with information, advice and support services which your financial transactions relate to in line with our charitable objectives.

How we store your data

Your personal data is held in both hard copy and electronic formats.

Electronic data, including emails, is stored on our 3rd party servers, which are located [in the UK on our software suppliers’ servers.

How long we keep your data

Information about how long we process your data for can be provided on request.

Some retention periods are based on legal requirements while others take into account practical needs to keep the data.

Once the applicable retention period expires, unless we are legally required to keep the data longer, or there are important and justifiable reasons why we should keep it, we will securely delete the data.

We may retain your personal data for as long as is necessary to undertake our charitable activities and to protect our legal interests (for example where required by relevant authorities, or for a reasonable legal limitation period after we have ceased providing services and support to you or undertaking activities with you or as otherwise stated to you when your data is collected, or for such period as we reasonably consider appropriate in connection with our relationship with you or for record-keeping and archival purposes.