We want everyone we work with to feel confident and comfortable with how any personal information you share with us will be looked after or used. This Privacy Notice sets out how we collect, use and store your personal information (this means any information that identifies or could identify you) if you attend our Lifelong Learning Programmes or Projects, apply for a job or volunteer placement, or have a business relationship with us.
The Purple Patch Arts Privacy Notice may change so please remember to check back from time to time. This is version 1.2 which was last updated on the 18th June 2019. Where we have made any changes to this Privacy Notice, we will make this clear on our website or contact you about any changes.
Purple Patch Arts are committed to protecting your personal information and making every effort to ensure that your personal information is processed in a fair, open and transparent manner.
We are a “data controller” for the purposes of the Data Protection Act 2018 (the ‘2018 Act’) and the EU General Data Protection Regulation (‘GDPR’) – (“Data Protection Law”). This means that we are responsible for, and control the processing of, your personal information.
We are not required to have a Data Protection Officer. However, for further information about our privacy practices, please contact our Data Protection Lead by:
We will comply with Data Protection Law. This says that the personal information we hold about you must be:
We collect information from you in two main ways; directly and indirectly.
This could be if you
This includes when you phone us, or get in touch through the post, or in person.
When you interact with us through third parties: This could be if you provide a donation through Paypal and provide your consent for your personal information to be shared with us, if someone names you as an emergency or financial contact, or if you sign up to our mailing list through MailChimp.
Personal information we collect might include details such as your name, date of birth, email address, postal address and telephone number, health information and any other information you provide in any communications between us. If you would like to know the full list of data we hold on you then please contact our Data Protection Lead. You will have given us this information whilst signing up to a taster, programme or project, working with us on a project, applying for a job or volunteer placement or any of the other ways to interact with us.
We will mainly use this information:
If you do not provide this information, we will not be able to provide the service you have requested, keep you updated about services or process your job or volunteer placement application.
To contact you about our work and how you can support Purple Patch Arts (see “Marketing” below)
If you sign up to a Lifelong Learning Programme or a project we will ask for your consent to take photographs of you for your portfolio, social media and marketing purposes. You can choose not to consent, and you can withdraw your consent at any time by contacting us:
Data Protection Law recognises that some categories of personal information are more sensitive. Special Category Data can include information about a person’s health, race, ethnic origin, political opinions, sex life, sexual orientation or religious beliefs.
If you attend a Lifelong Learning Programme or a project, we need to collect some special category data about you so that we can keep you safe. We will also ask about any previous convictions you have; any information you give us will be handled in accordance with Data Protection Law.
If you attend our Lifelong Learning Programmes or a project, or apply for a job or volunteer placement we will also collect some special category data so that we can make sure that what we do is in line with the Equalities Act. Any information collected will be anonymised and handled in line with Data Protection Law.
In most cases, we will only use your personal information because we need to use it in order to fulfil a contract with you (for example, because you have signed up to programme or project), or where we have your consent (for example, taking photos of you).
However, there are other lawful reasons that allow us to process your personal information and one of those is called ‘legitimate interests’. This means that the reason that we are processing information is because we have a legitimate interest in doing so.
Whenever we process your personal information under the ‘legitimate interest’ lawful basis we make sure that we take into account your rights and interests and will not process your personal information if we feel that there is an imbalance.
Some examples of where we have a legitimate interest to process your personal information are where you have contacted us or we have worked with you previously and wish to approach you about a new opportunity, use your personal information for data analytics, improving our services, or for legal purposes (for example, dealing with complaints and claims).
We will only contact you about our work and how you can support Purple Patch Arts by phone, email or text message, if you have agreed for us to contact you in this manner.
You can withdraw your consent at any time by contacting us: firstname.lastname@example.org / 077205 41801 or by clicking the unsubscribe link at the bottom of the relevant communication.
The personal information we collect about you will mainly be used by staff and volunteers at Purple Patch Arts so that they can support you, or fulfill a contract with you. We may use carefully selected companies to provide services on our behalf, including storing files and recording financial transactions. We will only provide those companies with the information they need to deliver the relevant service, and we make sure that your data is treated with the same level of care as if we were handling it directly. We enter into contracts with these service providers that require them to comply with Data Protection Laws and ensure that they have appropriate controls in place to secure your information. If you would like to know who we share your personal information with, please contact our Data Protection Lead.
We will never sell or share your personal information with organisations so that they can contact you for any marketing activities. Nor do we sell any information about your web browsing activity.
If you are taking part in a funded project then we may share your personal information with the funders as part of our contract with them. We will tell you about what we’ll be sharing, and who with, when you sign up.
We take looking after your information very seriously. We’ve implemented appropriate physical, technical and organisational measures to protect the personal information we have under our control, both on and off-line, from improper access, use, alteration, destruction and loss.
We only keep it as long as is reasonable and necessary for the relevant activity, which may be to fulfil statutory obligations.
You have various rights in respect of the personal information we hold about you – these are set out in more detail below. If you wish to exercise any of these rights or make a complaint, you can do so by contacting our Data Protection Lead:
You can also make a complaint to the data protection supervisory authority, the Information Commissioner’s Office, https://ico.org.uk/:
Please note, some of these rights only apply in certain circumstances and we may not be able to fulfil every request.
Cookies are small pieces of information sent to your computer and stored on your hard drive. When you visit and look around our website, we record things like your IP (internet protocol) address – the unique number of the device you are using to access our website, which pages you visit, when they were visited, and the type of device you were using. This information helps us create a better experience for everyone who uses our website.
We use Google analytics cookies, which are used to measure how people use our website. We look at reports to make sure that our website is providing the best possible service for our users. Google analytics does not identify you personally – it just collects data about your visit to our website.
|__utma||This cookie is used to determine unique visitors to the site, and is written upon your first visit to this site from your web browser. The cookie is updated with each page view, and expires 2 years from being set or updated.|
|__utmb||This cookie is used to establish the length of your visit to the site. The cookie is updated with each page view, and expires 30 minutes from being set or updated.|
|__utmc||This cookie is set to enable interoperability with the older version of Google Analytics code known as Urchin. This is a Session cookie which is destroyed when the user closes their browser.|
|__utmz||This cookie stores the type of referral used by you to reach your site, whether via a direct method, a referring link, a website search, or a campaign such as an ad or an email link. It is used to calculate search engine traffic, ad campaigns and page navigation within the site. The cookie is updated with each page view, and expires 6 months from being set or updated.|
|__utmv||This cookie may be set from some pages which are used to track file downloads, or which are used in advertising campaigns. The cookie is updated with each page view, and expires 2 years from being set or updated.|
|_ga||This cookie is asssociated with Google Universal Analytics and is used to distinguish unique users by assigning a randomly generated number as a client identifier. By default it is set to expire after 2 years, although this is customisable by website owners.|
|_gat||This cookie is associated with Google Universal Analytics, and is used to throttle the request rate – limiting the collection of data on high traffic sites. It expires after 10 minutes.|
You can find out more about cookies and how to delete or control them at: www.gov.uk/help/cookies
If you have any questions or want to find out more, please contact us by: