Privacy and Cookies
Privacy and Cookies Policy
Here at Staf (Scottish Throughcare and Aftercare Forum), we are reliant on the positive relationships we have with you (our members and supporters). Your support is invaluable in ensuring that young people leaving care in Scotland have positive relationships, the right support, and equal opportunities to enable them to live happy, successful lives on their own terms. It is also invaluable in ensuring that those who support young people feel empowered and have the right knowledge and skills in their roles.
In order to carry out our work, we need to collect information (or data) from you. Your data is important to you, so we have created this document to explain clearly and transparently the different ways in which we use your information.
We are committed to protecting the rights of individuals in line with the Data Protection Act 2018 and the EU General Data Protection Regulations (GDPR).
Who we are
We are Staf (the Scottish Throughcare and Aftercare Forum), registered in Scotland as a charity (Scottish Charity Number SC 030522) and as a Company Limited by Guarantee (Company Number SC286432).
Our contact details
Our registered address is: Edward House, 2nd Floor, 199 Sauchiehall Street, Glasgow, G2 3EX
Our contact number is 0141 465 7511 and contact email address is info@staf.scot.
You can also contact us using our website contact form: www.staf.scot/forms/contact-us.
You can contact us with any questions about data protection and privacy by emailing dataprotection@staf.scot.
Special note about children
Our website is not intended to be used by children, and we do not knowingly collect data about children. Children may use our website but should be supervised by a parent, guardian or carer.
How we collect information
There are a number of ways that we collect information. We collect information about you when you:
- Visit our website
- Become a member of Staf
- Sign up to our mailing lists
- Respond to one of our emails
- Register for an event or training course
- Make an enquiry
- Apply for a job or voluntary position
- Interact with us over the phone, email, social media or in another way
From time to time we also carry out research and gather information using information sources which are publicly available (such as information available on the internet).
The information we collect and what we do with it
We collect information for a number of reasons. The Data Protection Act 2018 and GDPR set out a number of lawful reasons why data can be collected. We have identified the types of information that we collect from you, and the reasons why we collect this information. You can find out more about each of the categories of information below.
Under the Data Protection Act 2018, Staf is a data controller (we make decisions on what information we collect and how we use and handle the information).
We have listed the types of information we collect from you below. Please click on the links to find out more about each category.
Third parties and sharing information abroad
We sometimes use services from third parties to carry out some of our work (for example our website provider and CRM system are provided by other companies). These companies act as Data Processors for Staf.
Some of our data processors may be based outside of the European Economic Area, so we always ensure that any third party we enter into a contract with will provide the same level of protection for your data as the Data Protection Act 2018 and GDPR provides.
Membership administration
Staf is a membership organisation and we collect information about our members to make sure our membership scheme is administered properly. Our lawful basis for collecting this information is our legitimate interests, namely the proper administration of our membership scheme.
Events administration
Staf hosts a variety of events throughout the year, which are aimed at our members and other stakeholders interested in our work. Our lawful basis for collecting this information is our legitimate interests, namely the proper administration of our events. Read more about events administration by clicking the button below.
Marketing Preferences
Staf carries out marketing to raise awareness of our organisation and the work we do. Our lawful basis for marketing activities is consent. Read more about marketing preferences by clicking the button below.
Payment Processing
Our website offers online card payments as well as traditional invoicing options for our services. Our lawful basis for collecting this information is our legitimate interests, namely processing payments made to us. Read more about payments processing by clicking the button below.
Our website
Various pieces of information are collected through your interactions with our website, not including those listed above. There are different lawful reasons for collecting this additional information through our website, which we have listed below.
Staf Website
Our website is owned and operated by Staf, and is hosted by SW&CO Design Ltd., who act as a data processor for Staf. Any information you submit to our website may be shared with our website provider, enabling them to provide their service to us and carry out analysis and research on demographics and behaviours of our users and supporters, enabling them to improve our services. SW&CO Design Ltd.will not transfer your information to a country outside of the European Economic Area and will store your information for a maximum of 7 years. Your information will only be used where necessary and where your interests do not outweigh the legitimate interests of SW&CO Design Ltd.in developing new services for us. This processing does not affect your rights.
Cookies
Cookies are small text files which contain a string of letters and numbers and are stored by your web browser. Cookies do not normally contain information that can identify any one person. Our website uses a number of cookies, and our lawful basis for using cookies is consent. Read more about cookies by clicking the button below.
Google Analytics
We use Google Analytics to analyse visitors interactions with our website. Our lawful basis for collecting this information is our legitimate interests, namely the proper administration of our website and ensuring improvements are made for users to find what they are looking for. Google analytics does not record any information that would allow us to identify you, and this information is used purely for statistical analysis and improving our website.
Sharing your information
We will not share your information or sell it to a third party without your consent, except where that third party is providing a service for us to carry out our work. Read more about sharing your information by clicking the button below.
Your rights
You have a number of rights which you can exercise under the Data Protection Act 2018 and GDPR. Click the button below to find out more about your rights.
Security
Information on all of our contacts are held on our central database, which is only accessible to those working at Staf. This information will not be shared unless you have given your consent to do so.
Withdrawing consent
You have the right to withdraw your consent to processing at any time. You can do this by clicking ‘unsubscribe’ from the bottom of any of our newsletters or marketing emails. You can also unsubscribe by sending an email to unsubscribe@staf.scot and putting the name of the mailing list you wish to be unsubscribed from in the subject line (you will normally find the name of the mailing list at the bottom of our emails). If you want to be unsubscribed from all mailing lists, please type ‘all’ in the subject line.
You can also withdraw your consent for sharing your contact details by emailing us at dataprotection@staf.scot. Please ensure that you clearly state that you wish to withdraw your consent to share your contact details.
Requests to withdraw consent will normally be dealt with within two business days of us receiving it. You may receive one further email to confirm that you have been removed from our mailing list.
If we do not rely on your consent to carry out processing, for example membership administration, we will inform you of this and your rights, normally within 2 working days of receiving your request.
Your right to complain
If you have a complaint about us, or the way that we have handled your personal data, you can make a complaint through any of the following ways:
Complain to us
Email us at dataprotection@staf.scot
Call us on 0141 465 7511
Contact us on our website: https://www.staf.scot/forms/contact-us/
Or you can write to us at: Data Protection, Staf, Edward House, 2nd Floor, 199 Sauchiehall Street, Glasgow, G2 3EX
Complain to OSCR
You can complain to the Office of the Scottish Charity Regulator (OSCR) on their website: https://ico.org.uk/concerns/
If you have received unwanted electronic marketing (i.e. phone, email or text) you can complete the following form: https://ico.org.uk/concerns/nuisance-calls-and-messages/
If you have had a problem accessing or re-using information, you can complete the following form: https://ico.org.uk/concerns/getting/
If you are concerned about the way we have handled your information, complete the following form: https://ico.org.uk/concerns/handling/
If you are concerned about the use of cookies on our website, you can complete the following form: https://ico.org.uk/concerns/cookies/
Updates to this notice
We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure that you are happy with any changes made. We may notify you of significant changes to this policy by email if we have sufficient permissions to do so.
This policy was last updated in July 2018.
