About this Policy
ATFC is a charity registered in England and Wales with number 1167912.
References to the processing of information includes the collection, use, storage and protection of data. ATFC is the ‘data controller’ for the purposes of this policy, except where otherwise stated, and the policy extends those working for and on behalf of ATFC and, to the extent set out below, anyone else processing data on our behalf from time to time.
Children of any age have the same rights over the data processed about them as adults, although their ability to understand and to exercise these rights may vary depending on their age and capacity. We therefore ask those legally responsible for the children to whom we provide art therapies to understand that our obligations are to every individual data subject separately, and to work with us accordingly and your attention is drawn to the ATFC Child & Young Person Therapy Consent Form on our website. References in this policy to ‘you’ or your data’ includes reference to children’s data, as the context allows.
Why do we process your data?
Organizations are permitted to process data if they have a legal basis for doing so. ATFC processes data on the basis that:
Express and informed consent has been given by the person whose data is being processed; and/or
ATFC has a legitimate interest in processing the data; and/or
It is necessary in relation to a contract, agreement or ongoing arrangement for the provision of services which someone has entered into with ATFC or because someone has asked for something to be done so they can enter into a contract, agreement or arrangement with us; and/or
There is a legal obligation on ATFC to process data.
If and to the extent that ATFC is relying on solely consent as the basis for processing data, we are required to obtain your explicit consent and you can modify or withdraw this consent at any time by notifying us in writing, although this may affect the extent to which ATFC is able to provide services to or interact with you in future.
Where consent is sought in relation to a child under the age of 16 years of age, we will ask that someone legally responsible for them provides such consent. Where we receive such data from another data controller, such as a school, we expect that it is being shared with us lawfully and with all due authority.
We may change this policy from time to time and any such changes will be published on our website. Notwithstanding any change to this policy, we will continue to process your personal data in accordance with your rights and our obligations in law.
This policy is effective from 25 May 2018.
What personal data do we process?
We process the data necessary for ATFC to fulfil its charitable objects by providing art therapies in a supportive environment to children aged 5-18 experiencing learning, behavioural emotional and other difficulties, together with fundraising and marketing, running events, keeping our service users and supporters informed of our activities, and the effective running of ATFC as an operational and fundraising charity through those working for and with us, our trustees and volunteers. Data collected and processed may include, but not be limited to:
Names and contact information such as telephone numbers, email and postal addresses of volunteers, therapists, donors, supporters or others with whom we have contact
Details relating to children to whom ATFC provides art therapies and their families (collectively referred to in this policy as ‘service users’), including those of a sensitive personal or medical nature
Donor and volunteer records and preferences, including, where necessary, bank or payment details and details of tax status in order to process payments and claim Gift Aid
Such other information that is relevant and necessary for ATFC to carry out its activities, charitable purposes and legal obligations.
Such data may be collected, for example, when you provide it through our website by making a donation, submitting an enquiry, subscribing for a service, when you request assistance, when you fill in your details on a pledge card or Gift Aid form, when you tell us about yourself if you apply to work for ATFC as freelance therapist, a volunteer or employee or when you otherwise provide us with personal data in some other way.
How do we use your data?
We process your personal data to operate ATFC as stated above, and in particular for the following purposes:
For internal record keeping, invoicing, communication and administration
To carry out the services provided to service users
To engage, direct and oversee the work of therapists providing services to service users
Work with schools and their staff with whom we liaise to provide our services
To comply with any legal obligations and to protect parties’ interests in cases of dispute
To let you know about ATFC’s activities, events and campaigns or related matters which we think may be of interest to you.
To share such information as is necessary and lawful with therapists working with us to provide art therapies, schools and others, including to safeguard children to whom we provide our services.
Data processed will be retained only for as long as the purpose for which it was collected continues and for as long as is reasonable and permissible in law. Accordingly, the periods for which we retain data will vary depending on the purposes for which it was collected and relevant statutory or other requirements.
Your rights in relation to your personal data
You, as the data subject, may request deletion of your data at any time in writing, subject to any overriding legal requirement for its retention, such as the need, where appropriate, to comply with legal or safeguarding obligations or the requirements regulatory authorities such as Her Majesty’s Revenue and Customs, or to prevent the commission of or to assist in the investigation of an actual or suspected criminal offence. We may keep certain data on a ‘suppression list’ so we know, if requested, not to contact you or process your data in future until further notice.
You may request details of personal information which we hold about you. Those legally responsible for a child may request such details about the child. Any such request must be submitted in writing and we reserve the right to seek verification of the identity of persons making such requests before we respond. A small fee may be payable if an information request is particularly onerous.
You may choose to restrict the collection or use of your personal information, but this may impact or limit the way in which we are able to interact with you. You may, at any time, change your mind about what information we hold about you, or if we continue to hold it at all, subject to any legal obligation on us to retain data, and as stated above.
You are responsible for the accuracy of data you have provided to ATFC. If you believe that any information we are holding on you is incorrect or incomplete, please write to us as soon as possible. We will promptly correct any information found to be incorrect.
Where your data has been supplied to us by another party, such as a school, meaning that ATFC is processing it on behalf of that other party and is acting as a data processor, please note that in order to exercise your rights over your data you need submit any request relating to it to the party that supplied the data to us.
In the unlikely event that there is any kind of a breach of our duties and obligations under this policy or the Data Protections laws, we will take immediate steps to isolate and rectify the problem. Should the breach be serious one (where there is a risk of, for example, discrimination, damage to reputation, financial loss or loss of confidential information) we have a duty to report that matter to the individuals affected and to the Office of the Information Commissioner.
You can obtain further information about Data Protection and privacy laws and your rights by visiting the Information Commissioner’s website at: https://ico.org.uk/for-thepublic.
Persons processing data on behalf of ATFC do so in accordance with this policy and on the basis that ATFC is satisfied that they can and will adhere to our high standards for data protection and security.
The transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. Please note that, unless encrypted, email messages sent via the internet may not be secure and could be intercepted and read by someone else. Please bear this in mind when deciding whether to include personal or sensitive information in any email messages you send to us.
Web browsing and Cookies
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We may use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
We may also collect and store information about your browsing device, including, where available, your IP address, operating system and browser type. This is anonymous statistical data about your browsing activities and patterns, and does not contain any personal data.
Links to other websites
Copyright 2019. Artstherapies.org.uk All rights reserved.