We retain and use personal data (information that relates to and identifies living people) to help us carry out our role in supporting over 50s in Haringey and people over 18 who are disabled.
We will always make sure that your personal data is protected and treated securely. Any information that you give will be held in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
We also make our Information Asset Register available for people to read to give further clarity about how data relating to them is managed and kept secure. This includes our retention schedule and clear details about the lawful basis for storing and keeping personal data.
Find out more about our Information Governance Policy and our Retention and Disposal Schedule below.
Information we collect
We collect personal data from visitors to this website through the use of online forms and every time you email us your details. We also receive information about our own staff and people who apply to work for us.
Security
We are strongly committed to data security and we take reasonable and appropriate steps to protect your personal data from unauthorised access, loss, misuse, alteration or corruption.
We have put in place physical, electronic, and managerial procedures to safeguard and secure the information you provide to us.
Only authorised employees and contractors under strict controls will have access to your personal data.
How we share information with other organisations
We only share personal data with other organisations where it is lawful to do so and in accordance with our Information Governance Policy.
Among others, we work with Haringey Council, Public Voice, Mind in Haringey, Haringey Over 50s Forum, and Tottenham Hotspur Football Club. We can also engage external suppliers to process personal data on our behalf.
We will only disclose your personal data where we have your consent to do so, or where there is another very good reason to make the disclosure – for example, we may disclose information to Haringey Over 50s Forum, and/or Haringey Council where we think it is necessary to do so in order to protect a vulnerable person from abuse or harm. Any such disclosure will be made in accordance with the requirements of the current data protection legislation.
Wherever possible, we will ensure that any information that we share or disclose is anonymised, so as to ensure that you cannot be identified from it.
We may sometimes use other organisations to process personal data on our behalf. Where we do this, those companies are required to follow the same rules and information security requirements as us, outlined in a Data Processing Agreement. They are not permitted to use the data for other purposes.
Retention and disposal of personal data
We publish a retention and disposal schedule and a data protection policy that explains how long we keep different types of records and documents, including records and documents containing personal data. Personal data is deleted or securely destroyed at the end of its retention period.
Your rights
Your right to access information about you
If you think we may hold personal data relating to you and want to see it please email hello@haringeycircle.com or write to Haringey Circle, Tottenham Town Hall, Town Hall Approach Road, London N15 4RX.
You have a right to receive a copy of this personal data, or to ask us to forward it to a person or organisation of your choice. Wherever possible, we will provide the personal data to you in your preferred format.
Correcting or deleting your personal data
If you know that we are holding your personal data and believe that it may be wrong, or if you want it to be deleted or for us to stop using it, you have a right to request that it can be deleted or amended. Please make your objection in writing to hello@haringeycircle.com, or send it by post to Haringey Circle, Tottenham Town Hall, Town Hall Approach Road, London N15 4RX.
Complaints about how we look after or use your information
If you feel that we have not met our responsibilities under data protection legislation, you have a right to request an independent assessment from the Information Commissioner’s Office. You can find details on their website.
Our contact details and key roles
Haringey Circle is a Community Interest Company (CIC). The data controller of personal data collected via this website is Haringey Circle CIC. Any issues relating to the processing of personal data by or on behalf of Haringey Circle may be addressed to Haringey Circle, Tottenham Town Hall, Town Hall Approach Road, London N15 4RX.
Call us on 020 3196 1894 between the hours of 08:30 – 17:30 Monday to Friday. Alternatively, you can email us on hello@haringeycircle.com.
Information about people who use our website
Please note that this statement does not cover links within this website to other websites.
When you browse through the information on this website, it does not store or capture your personal data. We do log your IP address (as it is automatically recognised by the web server) but this is only so you can download this website onto your device rather than for any tracking purpose; it is not used for any other purpose.
We will only collect personal data provided by you, such as:
- information collected from online forms
- feedback from surveys
- email addresses
- phone number
- postcode
- preferred means of communication.
Cookies
Please be aware that some systems on our website require the use of cookies, but we will always state if this is the case. We will never collect and store information about you without your permission.
Find out more about our use of cookies
How we will use your personal information
Personal information about you can be used for the following purposes:
- in our day-to-day work
- to send you our newsletter where you have requested it
- to respond to any queries you may have
- to provide you with the right kind of support
- to refer you where necessary
This may include any personal data that you choose to share with us, but we will treat this as confidential and protect it accordingly.
We will never include your personal data in survey reports.
Signing up to our newsletter
We use a third-party supplier, MailChimp, to provide our newsletter service. By subscribing to this service you will be agreeing to them handling your data.
The third-party supplier handles the data purely to provide this service on our behalf. This supplier follows the requirements of the GDPR and Data Protection Act 2018 in how they obtain, handle and process your personal data and will not make your data available to anyone.
Information about people who share their personal details with us by other means
Sometimes we also receive phone calls and requests for information from members of the public.
When personal data is collected we will ensure that we have your consent to keep it and we will be clear on how we intend to use your information. We will aim to anonymise information where we can but there may be instances where this is not possible in order to make change happen on your behalf. There may be exceptional circumstances where we can and will keep the data without consent but we must have a lawful basis for doing so, such as for safeguarding purposes.
We ensure that where consent is required it will be freely given, used only for agreed specific and unambiguous purposes and that you are well informed about how the personal data will be kept. This includes where it will be stored, details on security and for how long it will be kept. We will comply with GDPR and the Data Protection Act 2018 at all times. Where we rely upon your consent to process personal data, you have the right to withdraw that consent at any time.
Personal data may be collected with your consent when we receive feedback by phone or through research.
Personal data received from other sources
On occasion we will receive information from the families, friends and carers of people. We use this personal data to inform providers and commissioners to help them deliver services that work for you.
Where it is practically possible, we will make sure that we have your consent to use personal data that is about you. We will only process your personal data where there is a lawful basis to do so under current data protection legislation.
Publishing information
We anonymise our data to ensure that a person cannot be identified, unless this has been otherwise agreed and consent has been given.
Our data systems
We use a secure digital system to manage our data and the data. Haringey Circle employ other specialist organisations to process the data contained within the system and we have Data Processing Agreements in place with these organisations to ensure that this is held securely and according to current data protection legislation.
These organisations must comply with all legal requirements and, under our agreements with them, are not permitted to reuse any data for any other reason or make it available to others.
Information about our own staff and people applying to work with us
We need to process personal data about our own staff (and people applying to work for us) so that we can carry out our role and meet our legal and contractual responsibilities as an employer.
The personal data that we process includes information about racial or ethnic origin, religion, disability, gender and sexuality. We use this information to check we are promoting and ensuring diversity in our workforce and to make sure we are complying with equalities legislation.
Our employees decide whether or not to share this monitoring data with us, and can choose to withdraw their consent for this at any time. Employees who wish to withdraw their consent for us to process this data can let us know.
Other personal data that we are required to process includes information on qualifications and experience, pay and performance, contact details and bank details.
We check that people who work for us are fit and suitable for their roles. This may include asking people to undertake Disclosure and Barring Service (DBS) checks.
We have a legal obligation to comply with the Freedom of Information Act 2000 and this may include the requirement to disclose some information about our employees – especially those in senior or public-facing roles. We also publish some information about our staff, including the names and work contact details of people in some roles.