At YMCA Bournemouth, we are committed to protecting and respecting your privacy. Whenever you provide personal information to us, we will treat your information in accordance with this privacy notice and in accordance with the Data Protection Act 2018 (as supplemented by the General Data Protection Regulations). This privacy notice explains how we use any personal information we collect about you.

If you have any questions regarding this process, please contact our Data Protection Officer at jonathan.chadd@ymcabournemouth.org.uk or on 01202 290451.

What information do we collect about you?
We collect information about you including your name, age/gender (where necessary for safeguarding or other legitimate purposes), address, telephone number, email address and debit/credit card or direct debit details (where necessary for transactions). This information is collected when you purchase or use our products or services, donate to us, take part in our projects or sponsored events or request information about our work. Anonymous website usage information is collected using cookies.

How will we use the information about you?
We collect information about you to: process and deliver the products or services requested; adhere to legal, accounting or safeguarding requirements; enable us to coordinate events or projects you have agreed to take part in; process a donation you have made; respond to correspondence you have sent us, and – where we have a lawful basis for doing so – send you further information about our work and how you can help support it. We will not use your information for any other purposes.

YMCA Bournemouth is a diverse organisation and both the purposes of data processing and its lawful basis will vary between departments. For details regarding data usage in specific areas of our work, please follow these links:

Housing
Business Development
Sports & Leisure
Chaplaincy
Sandyholme
Children’s Centres
Youth Services
Teddy’s Pre-school
Child Contact Centre

Unless required for specific lawful purposes described via the links above, your data will be retained for a maximum of two years unless you indicate otherwise prior to that period ending or where we need to keep a record of you having given consent for a specific use of your data during that period, such as permissions for the use of your name or image in our publicity. Please also note that due to the nature of the internet, the deletion of information you permit us to publish online is limited to that within our own control.

Case studies and photography
The retention and use of testimonials, quotes and photography from and of our service-users are essential components of our communication aims. Where a person is kind enough to help us promote the work of YMCA Bournemouth, we provide them with a permissions form detailing how their data will be used and asking if they would be happy to give this consent for a period of five years. We apply this longer period to such information due to the overwhelming usefulness of such material to our work, the fact that certain case studies are difficult to replicate and the reality that many of our service-users will be difficult to contact to renew their permissions.

Our lawful basis of processing this data will be CONSENT, and the lawful basis of processing/retaining the data included in the consent forms themselves, potentially for a longer period, will be our LEGAL OBLIGATION to prove that consent has been given. This latter lawful basis also applies to consent records created prior to the introduction of the 2018 GDPR legislation.

Disclosure of personal information
We will keep your personal information confidential and will not disclose it to any third party without your express consent, unless we are obliged to do so by law.

We limit access to your data to a small group of essential data processors and ensure that it remains secure at all times. Digital data is retained on secure, password-protected systems and physical data is stored in locked areas or cabinets when not in use. Audits are undertaken to ensure our data processes are regularly checked and updated.

We sometimes use third parties to process your information on our behalf (for example, a payment gateway to process a donation or Mailchimp/Ez-Runner to store data and send emailshots). However, we require them to adhere to European regulations and to keep your information secure and not use it for their own business purposes.

When destroyed, digital data will be deleted securely and physical data will be cross-shredded and/or removed by licensed data disposal professionals.

Access to your information and withdrawing consent
You have the right to know what personal data we hold on you, to make a complaint or to have your personal data deleted AT ANY TIME by contacting us on the details below or by emailing jonathan.chadd@ymcabournemouth.org.uk.

We want to make sure that your personal information is accurate and up to date. Please ask us to correct or remove information you think is inaccurate.

Marketing
We would like to send you information about our services, charitable work and events/opportunities which may be of interest to you. However, unless it is justified by a ‘legitimate interest’ as explained in the specific departmental links above, we will only contact you if you have given us your express consent for us to do.

You may opt out of receiving marketing communications or change your preferences (e.g. your preference for email, phone, text or mail) AT ANY TIME.

To opt out or change your preferences please contact jonathan.chadd@ymcabournemouth.org.uk or write to us at the address below.

An opt-out list will be created for each activity to ensure we do not market to anyone who has requested otherwise.

Cookies
YMCABournemouth.org.uk uses cookies. These are files placed on your computer to collect standard internet log information and visitor behaviour information to compile statistical reports on website activity. We use Google Analytics and the resulting information is stored by Google and subject to their privacy policy.

The site also makes use of session cookies. Those cookies are necessary for site functionality and contain no personally identifiable information. They are deleted when the browser is closed. For further information visit www.aboutcookies.org or www.allaboutcookies.org.

You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.

Other websites
Our website contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies.

Changes to our privacy policy
We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 13 May 2018.

How to contact us
Please contact us if you have any questions about our privacy policy or information we hold about you: