Privacy Policy

www.veteranslaunchpad.org.uk is a website operated by AF&V Launchpad Ltd (hereafter known as Launchpad).

WE – AT LAUNCHPAD – REGARD YOUR PRIVACY AS IMPORTANT.

Launchpad is a registered charity in England and Wales and the registration number is 1153185. Launchpad is a company limited by guarantee registered in England and Wales under company number 8366047.

Launchpad’s registered address is: Enterprise House, Harmire Enterprise Park, Barnard Castle, Co. Durham, DL12 8XT.

Information we collect from beneficiaries, supporters and volunteers (where you choose to provide it to us); enables us to send you information about our services in which you register an interest.

By providing us with your information (whether face to face; over the telephone or in writing) you consent to us processing it for this purpose. This policy also states how and why we use data, how we store it and how individual personal preferences can be amended. We will not pass your data on to any third party. By visiting our website, you are accepting and consenting to the practices described in this policy.

For the purposes of applicable data protection legislation (including but not limited to the General Data Protection Regulation (the GDPR Regulation (EU) 2016/679) the data controller is AF&V LAUNCHPAD Limited. Launchpad, as the Data Controller, is registered with the Office of the Information Commissioner under the General Data Protection Regulation (GDPR) registration no. ZA015855.

The terms of this policy may change, so please check it from time to time. This version, published in August 2020, supersedes all previous versions.

Launchpad Privacy Statement

GDPR provides the legal framework that defines how personal information can be used. Launchpad is fully committed to complying with the principles set out in GDPR and has a legal duty to protect any information we collect from you.

Please read this privacy policy to understand how we use your data. In summary:

Only information that we need is collected.
Your personal information is only used for the purpose for which we collect it.
Your personal information is only seen by those who need it to do their jobs.
We will only disclose data when we have your consent, or where we are obliged to disclose personal data by law, or as expressly permitted under the GDPR (through contract; legal obligation, vital interests; public task; or legitimate interests).
We will keep your information up to date. Inaccurate or misleading data will be corrected as soon as possible.
Personal information is retained only for as long as it is required for the purpose collected; normally, this will be for a maximum of 6 years (as per industry standard). Unless there is a legal requirement to do otherwise, at the 6-year point, we will take the necessary and legal steps to remove your information from our records.
Your information will be protected from unauthorised or accidental disclosure and processed in an appropriate manner to maintain its integrity and confidentiality.
We will provide you with a copy of your personal information on request (please see below for information on access rights and requests).

These principles apply whether we hold your information on paper or in electronic form.

INFORMATION WE MAY COLLECT FROM YOU

We may collect and process the following data about you:

Information you give us.

If you provide services to Launchpad, we will collect information in line with your contract for services. We may also collect technical information relating to your use of our website, including your browser type or the Internet Protocol (IP) address used to connect your computer to the internet.

We also gather general information about the use of our website, such as which pages users visit most often and which services, events or facilities are of most interest. We may also track which pages users visit when they click on links in emails.

We obtain personal information from you when you enquire about our activities – including fundraising and trading – apply to live with us, send or receive an email, make a donation to us, ask a question or otherwise provide us with personal information.

We will only ever collect the information that we need, including data that will be useful to help improve our services. The information is either needed to fulfil your request or to enable us to provide you with a more personalised service. You don’t have to disclose any of this information to browse our sites.

Information we collect about you.

With regard to each of your visits to our site, we may automatically collect the following information:

technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including the date and time); information you viewed or searched for; page response times, download errors, lengths of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs), methods used to browse away from the page, any phone number used to call our customer service number if you linked to our site from another website, the address of that website, and, if you linked to the site from a search engine, the address of that search engine and the search term you used.
the personal information we collect might include name, date of birth, email address, postal address, telephone number and credit/debit card details.
we may also collect special categories of personal data such as information about your health if this is required for the purpose you have contacted Launchpad. We collect special categories of personal data only if we are permitted to do so by data protection law, and we have additional measures in place to protect this data.
we may also record an individual’s unit, particularly if still serving. We also gather general non-personal information about the use of our website, such as which pages users visit most often, and which are of most interest. We may also track which pages users visit when they click on links in Launchpad emails. Wherever possible we use aggregated or anonymous information which does not identify individual visitors to our website. Please see the section below on Cookies.

Why do we collect this information?

We collect this information for the purpose of promoting the aims of the Charity and communicating effectively and appropriately with our supporters and, in particular, providing support to our beneficiaries.

The lawful basis for which we process your information is:

your consent;
processing is necessary for the performance of a contract to which you are a party. If you fail to provide this information we may be unable to perform the contract.
processing is necessary for compliance with our legal obligations, for example to comply with our obligations as an employer to disclose employee salary details to HMRC.
processing is necessary to protect your interests or that of another person.
processing is necessary for the performance of a task carried out in the public interest.
processing is necessary for the purpose of the legitimate interest pursued by us or a third party, except where your rights as a data subject override our legitimate interest. The legitimate interest we rely upon is subject to an assessment based on the specific context and circumstances.

How do we use this information?

We will use the information you provide in the ways set out below:

promote the aims of Launchpad;
to provide and personalise our services to beneficiaries;
to communicate with our supporters, dealing with your enquiries and requests, recording any contact with you;
to provide you with information that you have indicated an interest in, for example information about our campaigns, volunteering, fundraising and trading activities and how you can donate to us;
we may use this information to personalise the way our website is presented when users visit it, to make improvements to our website and to ensure we provide the best service for users;
to claim Gift Aid on your donations;
to conduct market research;
segmentation, so that we can offer supporters information relevant to them;
for administrative purposes.

Do we share your information with anybody else?

We share your personal information with our suppliers, who we engage to process data on our behalf. In such cases information is only shared for the purpose of providing services on our behalf relating to communications, or agreements between yourself and Launchpad. Such processing is conducted under relevant Data Processing Agreements.
We also may need to disclose your information if required to do so by law or as expressly permitted under applicable data protection legislation. We do not sell personal details to other charities or other third parties. Our websites may include links to websites run by other organisations. Launchpad is not responsible for the privacy practices of these other websites so you should read their privacy policies carefully before sharing any personal or financial data.

Storing and protecting your information.

We recognise the concerns that many people have about giving personal information online. We place great importance on the security of all personally identifiable information associated with our beneficiaries, supporters, staff and volunteers. We have security measures in place to protect against the loss, misuse and alteration or destruction of personal data under our control. Information is stored by us on computers located in the UK. We may also store information on paper files. All paper files are kept in a secure, double locked office. All of our online forms are protected by double encryption. We also use a secure server when you make a donation or payment via our website.
However, no data transmission over the internet is 100% secure. As a result, whilst we cannot absolutely guarantee that loss, misuse or alteration of data will not occur while it is under our control, we use our best efforts to prevent this and protect your personal information. The Charity uses the relevant and legally required set of controls to provide protection from the most prevalent cyber security threats.
We will keep your information only for as long as we need it to provide you with the goods, services or information you have required, to administer your relationship with us, to inform our research or the preferences of our supporters, to comply with the law and tax accounting rules, or to ensure that we do not communicate with people who have asked us not to.
When your information is no longer required, we will always dispose of it securely, in accordance with our retention of records policy.

Information we receive from other sources.

We may receive information about you if you use any other website we operate or other services we provide. We also work closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.

Payment Card Information

Launchpad does not store any sensitive payment card data in our systems. The Charity has an active PCI-DSS compliance programme in place. This is the international standard for safe card payment processes.

Transfer of Information Outside the EU

Given that the Internet is a global environment, using it to collect and process personal data necessarily involves the transmission of data on an international basis. This means for instance that data you pass to us may be processed outside the European Economic Area, although the data will always be held securely and we will take steps to ensure that any third-party organisation we engage to process data on our behalf provides an adequate level of protection in accordance with GDPR. By submitting your personal information, you agree to this transfer, storing or processing at a location outside the EEA.

Under 13s

Launchpad is concerned to protect the privacy of children aged under 13. We will seek consent from a parent or guardian before collecting personal information about a child aged under 13. We will not knowingly request or collect from a child any information online that can be traced to the child, such as an email address, name, or information about the child’s family. Unless a parent or guardian consents to such use in advance, we will not knowingly use information that a child provides to us for any fundraising or promotional purpose.

Your Rights

You have a right to object to Launchpad processing your personal information (‘right to object’) at any time where we rely on our legitimate interests for doing so. Such a request must be sent to the Data Protection Officer at the relevant address below.

You also have a right to object to our processing your data for the purposes of marketing. Launchpad always acts upon your choices around what type of communications you want to receive and how you want to receive them.

You have a choice about whether you want to receive information about the Charity’s work and fundraising and trading activities. We make it easy for you to tell us how you want us to communicate, in a way that suits you. Our forms have clear marketing preference questions; if you don’t want to hear from us then that’s fine. We will not use your personal information for marketing purposes if you have indicated that you do not wish to be contacted.

You can change your marketing preferences for what you receive from us and how, at any time, by contacting:

The Data Protection Officer

Name: Samantha Jackson
Address: Speke House, Heathgate Avenue, Speke, Liverpool L24 7SH
E-Mail: [email protected]

You may ask us at any time for information about any personal data we hold about you or ask us to correct or delete that information. You have a right to ask us to confirm whether we are processing information about you, and to request access to this information (‘right of access’). Please use our form to ensure you supply all the information we need to process your request. You can also use this form if you are requesting information on behalf of somebody else. We will ask you for proof of your identity before we can act upon your request.

To obtain a copy of the personal information we hold about you, please write to us or submit your form to:

The Data Protection Officer

Name: Samantha Jackson
Address: Speke House, Heathgate Avenue, Speke, Liverpool L24 7SH
E-Mail: [email protected]

You may ask us, or we may ask you, to rectify information you or we think is inaccurate, and you may also ask us to remove information which is inaccurate or complete information which is incomplete (‘right to rectification’). If you inform us that your personal data is inaccurate, we will inform relevant third parties with whom we have shared your data so they may update their own records.

If your personal details change, please help us to keep your information up to date by notifying us at the address below:

The Data Protection Officer

Name: Samantha Jackson
Address: Speke House, Heathgate Avenue, Speke, Liverpool L24 7SH
E-Mail: [email protected]

You have a right to obtain your personal data from us and reuse it for your own purposes, perhaps for another service, without hindering the usability of the data (‘right of portability’). This right does not apply where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

You have a right to seek the erasure of your data (often referred to as the ‘right to be forgotten’). You may wish to exercise this right for any reason, for example where it is no longer necessary for us to continue holding or processing your personal data; you may withdraw your consent. You should note that we are entitled to, and reserve the right to retain your data, for statistical purposes linked to legal government and industrial requirements.

This right is not absolute, as we may need to continue processing this information, for example, to comply with our legal obligations, or for reasons of public interest.

You have a right to ask us to restrict our processing of your information (‘right to restriction’) if:

you contest its accuracy and we need to verify whether it is accurate
the processing is unlawful and you ask us to restrict use of it instead of erasing it
we no longer need the information for the purpose of processing, but you need it to establish or defend legal claims
you have objected to processing of your information being necessary for the performance of a task carried out in the public interest, or for the purposes of our legitimate interests. The restriction would apply while we carry out a balancing act between your rights and our legitimate interests.
you exercise your right to restrict processing, we would still need to process your information for the purpose of exercising or defending legal claims, protecting the rights of another person or for public interest reasons.

If you would like to exercise any of your rights above, please contact the Data Protection Officer at our address, unless we have provided specific contact details in respect of one of the rights we have set out. We will act in accordance with your instructions as soon as reasonably possible and there will be no charge.

You have a right to report any of your concerns about our use of your data to the Information Commissioner’s Office. You may do so by calling their helpline at 0303 123 1113.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Cookie Usage

Launchpad website uses cookies, tracking pixels and related technologies. Cookies are small data files that are served by our platform and stored on your device. Our site uses cookies dropped by us or third parties for a variety of purposes including to operate and personalise the website and to ensure you see content that is relevant to you. Cookies help us to provide you with a better experience by allowing us to understand what areas of the website are of interest to our visitors (e.g. via Google analytics). Most browsers will allow you to turn off cookies. Please note however that turning off cookies will restrict your use of our website. To learn more about cookies and how to manage them, visit AboutCookies.org.

When you first visit our site, you are given the option to opt-out of cookies but please be aware that this may negatively impact on your ability to view and use content on our website.

Trademarks and copyright

Launchpad website contains material which is protected by copyright and/or other intellectual property rights. All copyright and intellectual property rights including the names, images and logos are owned by Launchpad unless otherwise stated. All rights are reserved.

You are responsible for complying with all applicable copyright laws. We permit you to make copies of information on Launchpad website as necessary incidental acts during your viewing and you may take a print for your personal use of so much of the site as is reasonable for private purposes. All other uses are prohibited. Nothing in these terms shall be construed as conferring any right to use any trademark, logo, patent right or copyright of Launchpad.

Email

Emails that we send to you or you send to us, may be retained as a record of contact and your email address stored for future use in accordance with our record retention policy and procedures. If we need to email sensitive or confidential information to you, we may perform checks to verify the correct email address and may take additional security measures.

Third Parties

We do not pass personal data to third parties for marketing, sales or any other commercial purposes without your explicit consent. If we have to share your personal data with another organisation, we make sure that they comply with the principles of data protection legislation, and our procedures and instructions, when they use your information on our behalf.

CCTV

We have installed CCTV systems in our premises for the purposes of public and staff safety and also crime prevention and detection. CCTV is also installed on the outside of some of our buildings for the purposes of monitoring building security and crime prevention and detection. The purpose for processing this information is for security and safety reasons. The lawful basis we rely on to process your personal data is article 6(1)(f) of the GDPR, which allows us to process personal data when it’s necessary for the purposes of our legitimate interests.

Why we gather information and how we use it

The main purpose of the CCTV system is to provide a safe environment for anyone on the premises. However, if necessary it will be used to detect, deter and prevent crime and disorder to help identify, apprehend and prosecute anyone committing a criminal offence;

to provide the Police/Launchpad with evidence to enable criminal and/or civil proceedings to be brought in the courts.

Some examples of how we use your data are provided below (please note this is not an exhaustive list):

monitoring for Health and Safety purposes
detection and prevention of anti-social behaviour
the investigation and detection of crime
providing evidence in criminal proceedings (police and criminal evidence act 1984 and criminal procedure and investigation act 1996)
the prevention and reduction of crime and disorder
performance management including the investigation of any staff performance or disciplinary issues

Monitoring of footage

CCTV footage is monitored by Launchpad staff based on the premises.

Positioning of CCTV cameras

Whilst each project has its own requirements for the positioning of cameras, Launchpad will ensure that no cameras impact on an individual’s personal privacy. For this reason, CCTV cameras are only located in shared and communal areas which are accessed by all residents, visitors and staff. These include places such as entrances, exits, corridors, communal rooms and staff offices. Appropriate signage is displayed to inform people that CCTV is in operation on the premises. We collect video recording images of an identifiable individual where necessary.

Who your information may be shared with

Information may be shared with other agencies such as the police, ambulance, fire service, and other relevant agencies as required in the event of an emergency and the prevention or detection of crime. Information may also be shared with specific teams within Launchpad for the purposes of staff training, performance management and the investigation of any disciplinary issues.

How long we keep your information

On average we will keep footage for between 21 and 28 days although evidence supplied to the police for criminal cases may be retained for longer.

How you can access your information

Recorded material is not provided to members of the public or media organisations for profit, gain or commercial exploitation. This does not affect the right of individuals to access any personal data under the provisions of the Data Protection Act 2018. Any request for personal data is known as a ‘Subject Access request’.

All requests for CCTV material will be in writing, logged and subject to a signed handover detailing the basis for the request and authorising officer. This process is subject to regular review.

Fundraising Preference Service

Launchpad is committed to empowering our supporters to manage their information. The Fundraising Preference Service (FPS) enables donors to take control of their charitable giving and conversations; and we want to help you use the service effectively.

Launchpad supports the Fundraising Regulator and its efforts to develop the Fundraising Preference Service as a means of rebuilding trust between charities and the public. The Charity is committed to upholding fundraising best practice and being as transparent as possible with our donors.

Changes

We may change the terms of this privacy statement on occasion, but will not reduce your rights under this Privacy Policy without your explicit consent. If we do so, we will post the changes here, so please check from time to time. We will also keep prior versions of this Privacy Policy in an archive. By continuing to use our websites you will be deemed to have accepted such changes.

If you have any questions about this policy or how we use data please contact the Data Protection Officer at the address below or via email to

The Data Protection Officer

Name: Samantha Jackson
Address: Speke House, Heathgate Avenue, Speke, Liverpool L24 7SH
E-Mail: [email protected]

Further information and advice about data protection is available from:

The Office of the Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: +44 (0) 01625 545 745
Website: www.ico.org.uk