Privacy Policy
This privacy policy will explain how our organisation, Community Assets for Society and Housing (CASH), uses the personal data we collect from you when you interact with us and our online presence.
Approved: 2024Why do we collect data?
As a grassroots community organisation we have deep respect for privacy of our supporters, members, beneficiaries and other stakeholders. CASH collects data only when you explicitly consent to sharing it, and with a specific purpose such as getting in touch, reporting to the funder, internal reporting or sharing supporter/membership overall anonymised statistics with the public. CASH never shares personally identifiable or otherwise sensitive information with third parties.
What data do we collect?
- Supporter form personal identification information (name, address, email address and reason for supporting).
- If the Supporter is an organisation, the organisation’s name is collected as well as the details of the representative.
- Newsletter form email addresses.
After submitting initial expression of interest, Supporters, both individual and organisational, receive a randomly generated identifier, which allows them to anonymously fill a form describing their details. If the Supporter is an individual:
- Name
- Age
- Gender
- Gender identity
- Ethnicity
- Disability
- Neurodiversity
- Sexual orientation
- Religion or belief
- Class identity
If the Supporter represents an organisation, the form asks:
- What type of organisation are you representing
- Does your organisation aim to represent specific demographic groups
How do we collect your data?
You directly provide CASH with most of the data we collect via forms you submit. CASH collects data and process data when you:
- Become CASH Supporter.
- Sign up for our newsletter.
How will we use your data?
CASH collects your data so that we can:
- Process your membership application.
- Contact you with our newsletter updates.
- Analyse anonymised data to understand composition of our membership for the purpose of reporting and external communication.
Data collected for membership applications is not shared with third parties unless explicitly required by law or with the consent of the individual. Anonymised data may be shared externally for reporting purposes but will always be aggregated and stripped of personal identifiers.
How do we store your data?
- CASH securely stores your data on the server of our web application and cloud system with the same provider, located in the UK. CASH stores personally identifiable and potentially sensitive data in a pseudonanymised way, separated into two spreadsheets where records are linked by a random unique identifier.
- Sensitive data used for reporting or analysis is anonymised to prevent any individual from being identified directly or indirectly. CASH has a procedure where Governance circle administers separation of the data and Communication circle accesses anonymised set of data to facilitate analysis and appropriate reporting.
- CASH retains data only for as long as necessary to fulfill its stated purposes or as required by law. A clear retention policy ensures that data is not stored indefinitely without justification.
What are your data protection rights?
CASH would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
- The right to access - You have the right to request CASH for copies of your personal data. We may charge you a small fee for this service.
- The right to rectification - You have the right to request that CASH correct any information you believe is inaccurate. You also have the right to request CASH to complete the information you believe is incomplete.
- The right to erasure - You have the right to request that CASH erase your personal data, under certain conditions.
- The right to restrict processing - You have the right to request that CASH restrict the processing of your personal data, under certain conditions.
- The right to object to processing - You have the right to object to CASH’s processing of your personal data, under certain conditions.
- The right to data portability - You have the right to request that CASH transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you.
Breach Response
In the event of a data breach, CASH will:
- Conduct an immediate investigation.
- Notify affected individuals and relevant authorities within 72 hours if required by law.
- Implement corrective actions to prevent future breaches.
Cookies
We do not collect any information about the traffic on our website, hence we do not collect cookies.
Privacy policies of other websites
The CASH website contains links to other websites. Our privacy notice applies only to our website, so if you click on a link to another website, you should read their privacy policy.
How to contact us
If you have any questions about CASH privacy notice, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Email us at: contact@ldn.cash
Or write to us:
Community Assets for Society and Housing (CASH) Community Trust Limited
385 Queens Road,
>London, SE14 5HD
How to contact the appropriate authority
Should you wish to report a complaint or if you feel that Our Company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office.
Live chat: https://ico.org.uk/global/contact-us/live-chat
Website: https://ico.org.uk/make-a-complaint/
Address:
Information Commissioner's Office
Office Wycliffe House, Water Lane,
Wilmslow, Cheshire, SK9 5AF