Privacy

Privacy policy

Kidscape is dependent on the generosity of our supporters as well as the goodwill and trust of the public. We are committed to protecting any personal information we collect about you.

This page (together with our Cookies policy) sets out the basis on which we will process any personal information we collect from you or that you provide to us.

General information

Kidscape may collect and process your personal data and is the “data collector” in terms of the General Data Protection Regulation (GDPR).

The protection and confidentiality of your data is very important to us. Kidscape therefore only processes your data to the extent that:

• It is necessary to provide the Kidscape services you are requesting;
• You have given your consent to the processing, or;
• We are otherwise authorised to do so under data protection regulations.

If you have any questions, suggestions or comments, you are welcome to contact us.

Email: mydata@kidscape.org.uk 

What information we collect

Personal data

Personal data is specifically protected by law. Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data.

We process some or all of the following personal data when you complete an application or enquiry from our website:

• Your name
• Your postal address
• Your email address
• Your phone number

If you donate or have a direct debit with Kidscape we also pass your financial details to a third-party processor.

Children and young people

If you use one of Kidscape’s services or participate in programmes we may also collect sensitive personal information for children or young people in your care. This may include:

• Information on physical and mental health, special educational needs or disabilities

Technical data

We may also collect details of your visits to our website, including but not limited to traffic data, location data and the resources that you access. For more information see our Cookies policy.

How we process your data

Kidscape collects and stores your personal and technical data while you use our website. We may also collect personal data if you ask us to update our records in writing or by telephone.

If you use one of Kidscape’s services or participate in programmes, we may also collect personal data, including “special category data”, for children or young people in your care in writing or by telephone.

For what purposes we process your data

Kidscape acts as the data controller and collects, processes and uses the data collected to provide the services as detailed in our mission statement. By providing us with your information, we can provide these services.

You are not obliged to provide your personal data. However, if you do not wish to provide us with the necessary data, we cannot provide these services.

By providing us with your information, we exercise a legitimate interest to process the information to provide you with a service. We will always ask for your explicit consent to keep you updated about our work and ways to get involved, but reserve the right to contact you where we can demonstrate a legitimate need to do so.

When collecting “special category data” relating to our counselling services, we exercise a legitimate interest to process the information to provide you with a service. We ask for additional consent to process personal data of young people aged 13+.

Kidscape acts as the data controller for the information you provide during any recruitment process unless otherwise stated. If you have any queries about the recruitment process or how we handle your information, please contact us.

How long we hold your data

Your data will be stored by Kidscape as long as is necessary for us to provide the services associated with it. In addition:

• If you have given us your consent to be contacted, we will ask you to refresh consent after 2 years.
• If you have kindly donated to Kidscape, we will review your information 7 years after the date of your last donation.
• If using our counselling services, we will keep your information to allow us to refer to your circumstances should you continue your contact with us.
• If you request we not contact you we will keep a record of your preferences to enable us to comply with your request not to be contacted. We retain the right however to delete data for housekeeping purposes.
• Completely anonymised data can also be stored indefinitely for research purposes.

With whom we share your information

We do not pass on your data to third parties, unless we are legally entitled or obliged to do so, or you have given us your consent. We may share completely anonymised data with evaluation partners. We will never sell your information to third parties.

Where we store your data and how we protect your data

Kidscape may for financial or technical reasons use the services of a provider located outside of the European Economic Area. However, Kidscape shall ensure that personal information held by those providers will be in compliance with European data protection regulations.

Third-party processors

Kidscape uses the following third-party processors to process personal data:

• Google - view data protection statement
• Salesforce - view data protection statement
• MailChimp - view data protection statement
• Committed Giving (used to process donations and direct debits) - view data protection statement

Data security

The Kidscape website processes data via encrypted connection using SSL (Secure Socket Layer), which prevents third parties from accessing your data.

The Kidscape server is located in a secure environment and protected behind a firewall to restrict access.

Cloud services used by Kidscape are compliant with international security standard ISO 27018 which covers privacy protections for the processing of personal information by cloud service providers. Kidscape uses 2-Step verification as standard for cloud services used to conduct business operations.

The processing of “special category data” is restricted within Kidscape to staff authorised to provide the relevant counselling services.

Access to your data

You have the right to see the information we keep about you. You can also ask us to update or remove your data.

If you change your mind about hearing from Kidscape you can update your contact preferences at any time by visiting https://www.kidscape.org.uk/mydata, emailing mydata@kidscape.org.uk or by calling 020 7730 3300.

You can request that we delete your personal data by emailing mydata@kidscape.org.uk or by calling 020 7730 3300. We may require you to prove your identity. Please note in some circumstances we are required to keep your data, for example if you have a direct debit or Gift Aid declaration with Kidscape.

Kidscape will respond to any data access request within one month of receipt.

Changes to our privacy policy

We reserve the right to update this privacy policy to comply with data protection regulations. The most current version can always be found on this page.