Suffolk Community Foundation logo

Privacy Policy – Service Users

Suffolk Community Foundation (SCF) are committed to protecting the privacy and security of your personal information.

This privacy notice explains how we collect, use, share, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018

Data Controller

Suffolk Community Foundation
The Old Barns, Peninsula Business Centre,
Wherstead,
Ipswich
IP9 2BB

Types of Personal Data Collected

We may collect and process the following categories of personal data:

  • Personal identification information (e.g., name, business email, job title- retained for 6 +1 years)
  • Financial information (e.g., bank details for fund transfers – retained for 6 + 1 years)

    Purposes of Processing

    We collect and process your personal data for the following purposes:

    • To meet our legal and regulatory obligations in relation to conducting business and providing funds
    • To ensure communication between us and you
    • To understand your funding needs (recipients of funding)
    • To understand your reasons and duration of providing funding (donators)
    • To record and monitor funding to report to funders where required

      Lawful Basis for Processing

      We rely on the following lawful bases for processing your personal data:

      • Contractual necessity: Processing necessary for the performance of a contract or entering a funding agreement.
      • Legal obligations: Processing necessary to comply with our legal obligations, such as record-keeping requirements.
      • Legitimate interests: Processing necessary for our legitimate interests such as seeking out funders and communicating with those who apply for funding.

      Data Sharing

      We may share your personal data with the following categories of recipients, as required and permitted by law:

      • Regulatory authorities, government agencies, and professional bodies as mandated by law
      • Funders – so they may understand where their donations have been allocated
      • Funders – where there are statistical reporting requirements
      • Third-party service providers who assist in the delivery of our services (e.g., IT providers, HR and payment processors)

      Securing Your Personal Data

      SCF uses a range of security techniques to keep your personal data secure, these include:

      • Strict access control
      • Network monitoring and management
      • Security Policies
      • Use of multi – factor authentication
      • Anti – malware software
      • Encryption techniques
      • Employee training and awareness

      International Transfers

      SCF does not transfer data outside of the EEA.

      Your Rights

      You have the following rights regarding your personal data:

      • The right to access: You can request a copy of the personal data we hold about you.
      • The right to rectification: You can request the correction of inaccurate or incomplete personal data.
      • The right to erasure: You can request the deletion of your personal data in certain circumstances.
      • The right to restrict processing: You can request the limitation of the processing of your personal data in certain circumstances.
      • The right to data portability: You can request the transfer of your personal data to another organisation.
      • The right to object: You can object to the processing of your personal data in certain circumstances.
      • The right to lodge a complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or another supervisory authority.

      Contact Us

      If you have any questions or concerns regarding the processing of your personal data or would like to exercise your rights, please contact the Data Protection Officer at [email protected]

      If you need to make a complaint about the way Suffolk Community Foundation processes your personal data, you may make a complaint to the supervisory authority the ICO:
      Wycliffe House, Wilmslow, Cheshire, SK9 5AF, Tel: 0303 123 1113 (local rate).

      Or you can use the online service which allows you to make a complaint using the online form. You can report a breach, a concern or even just request more information. The ICO online can be found here: https://ico.org.uk/global/contact-us/

       

      Owner: Dir of Finance & Ops
      Version: 1.0
      committee/board: Operations
      Last reviewed: May 2024
      Next review: May 2026