Privacy Policy Focus Birmingham is a registered charity (1065745) supporting individuals with visual impairment and disabilities. We provide services including Sight Loss Support Services through our Low Vision Centre and deliver a programme of community engagement projects. We also have a Complex Needs Day Service and Supported Living Scheme. When Focus Birmingham collects and processes your personal data we are required to comply with the Data Protection Act 2018 (“DPA”) and the General Data Protection Regulation 2016 (“GDPR”) (the DPA and GDPR are together referred to as the “Data Protection Legislation”). Our responsibilities Focus Birmingham is regulated by the Information Commissioner’s Office (ICO) and is the data controller of the personal data you provide. We have appointed Cate Burke as Data Control Officer and they will have day to day responsibility for ensuring that we comply with the Data Protection Legislation and for dealing with any requests we receive from individuals exercising their rights under the Data Protection Legislation. This privacy policy provides information about the personal data we collect and process, why we process it and how we process it. Your personal data includes all the information we hold that identifies you or is about you. Why we collect your personal data? When you use our services or to fulfill a contract we have entered into with you. We may collect the following data: Your name, email address, postal address, phone number, date of birth, next of kin details and in some cases opinions that we document about you. Special categories of data, including but not limited to, medical and health records, care plans and information about your religious beliefs, ethnic origin and race. When you provide us with goods or services. We may collect the following data: Your name, email address, postal address, phone number and any other details you give us to provide us with your service. Financial information such as bank account details to make payments for goods and services received from you. When you apply for a job with us or volunteer with us. We may collect the following data: Your name, address, and contact details. Details of your qualifications, education, and employment history, whether you have a disability, information about your entitlement to work in the UK and information about your criminal record. We may collect information about you from a third party such as an employment agency, a former employer to provide a professional reference or character reference and information from criminal records checks. Special categories of data collected for equal opportunities monitoring purposes including information about your age, ethnic origin and gender. When you register your interest as a supporter, request us to send you marketing information, register for an event, you are fundraising for us or by filling in an enquiry form on our website (https://www.focusbirmingham.org.uk). We may collect the following data: Your name, email address, address/location and phone number. We will retain this information while we are corresponding with you or providing services to you or to a client of our services you represent. When visiting our website, you are accepting and consenting to the practices described in this Privacy Policy and our Terms and Conditions (link to Ts and Cs). If you do not consent, please do not submit any personal data to us. Our website uses cookies to distinguish you from other users of the website. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookies Website Statement. Your data may also be available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behaviour of our users and supporters to help us gain a better understanding of you to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply: - The data that may be available to them includes any of the data we collect as described in this privacy policy. Our website provider will not transfer your data to any other third party or transfer your data outside of the EEA. They will store your data for a maximum of 7 years. This processing does not affect your rights as detailed in this privacy policy. Everything we do with your personal data counts as processing it - including collecting, storing, amending, transferring, and deleting it. We are therefore required to comply with the Data Protection Legislation to make sure that your information is properly protected and used appropriately. Why do we process your personal data? We process your personal data in order: To provide you with the services you have To fulfil the contract, we have entered into with To receive services or goods from To evaluate your application for employment and if successful to enter into an employment contract with you. We may process information about whether or not you are disabled in order to make reasonable adjustments if you have a disability or in some cases process health information in order to find out whether you will be able to carry out an intrinsic part of the job. We also process health information after an offer of employment has been made. When we process other special categories of data during the recruitment process such as ethnic origin, sexual orientation, or religion or belief, this is for equal opportunities monitoring purposes. To process an application to volunteer with us which will include special categories of data as above for equal opportunities monitoring purposes. To respond to any queries or comments you submit to us and to correspond with you on a day to day To help us develop and design our services, to determine our priorities and use the experiences of users of our services and that of volunteers to explain the scope and impact of the support we provide. In these circumstances we will either anonymise the data or obtain full consent from you to use this information. To send you newsletters and marketing information if you have consented to us doing so. To notify you of services that we feel may interest you or permit third parties to do so if you have provided the appropriate consent. To monitor website usage and provide stats to third parties for the purposes of improving and developing the website and the services we provide via the website. Our legal basis for processing your data is as follows: - Your consent (for example, to send you direct marketing by email). You have entered into a contract with us (for example, to provide services or products) Focus Birmingham’s legitimate interests (which include delivery of our charitable purposes, regulatory compliance purposes, providing information and services, the recruitment of volunteers and job applicants, fundraising and campaigning). Compliance with a legal obligation. If you are a user of Focus Birmingham’s Services we collect, process and use personal and special categories of data (for example regarding your medical condition) which we process because we are providing you with a support, health and or social care service. Many of our services are commissioned by a local authority or the NHS and in many cases Focus Birmingham is processing data on their behalf and they will continue to have access to it. In addition, if you are a tenant at Millward Place, the Care Quality Commission (CQC) will also need access to your personal data in some circumstances. If we obtain consent from you to the processing of your personal data, you can withdraw your consent at any time by contacting us at [email protected] or on 0121 393 4849. Who will receive your personal data? We only transfer your personal data to the extent we need to. Recipients of your personal data include:- In certain circumstances we may pass your personal data to our third party service providers, agents and sub-contractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example to process donations and send you mailings). However, we will only disclose the personal information that is necessary to deliver the service, they do so only on the basis of written instructions, are under a duty of confidentiality and are obliged to keep your information secure. We will not disclose your information to third parties for them to use for their own direct marketing purposes unless you have requested us to do, or to comply with a legal obligation. We do not transfer your personal data outside of the EEA. How long will we keep your personal data? We will retain all personal data in line with our Data Retention Policy (available upon request). We retain your information for this period in case any issues arise or in case you have any queries. Your information will always be kept securely. Following the end of the retention period, your files, and personal data we hold about you will be permanently deleted or destroyed. If we are required to obtain your consent to process your personal data, any information we use for this purpose will be kept until you withdraw your consent, unless we are entitled to retain the personal data on the basis of other grounds set out in the Data Protection Legislation. What are your rights? You benefit from a number of rights in respect of the personal data we hold about you. We have summarised the rights which may be available to you below, depending on the grounds on which we process your data. More information is available from the Information Commissioner’s Office website (https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/). These rights apply for the period in which we process your data. Your right of access - You have the right to ask us for copies of your personal information. Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances. Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. Your right to complain about our processing If you think we have processed your personal data unlawfully or that we have not complied with GDPR, you can report your concerns to the supervisory authority in your jurisdiction. The supervisory authority in the UK is the Information Commissioner’s Office (“ICO”). You can call the ICO on 0303 123 1113 or get in touch via other means, as set out on the ICO website: https://ico.org.uk/concerns/. Any questions? If you have any questions or would like more information about the ways in which we process your data, please contact Cate Burke on 0121 393 4849 or [email protected] Manage Cookie Preferences