Cambridge Breastfeeding Alliance is a registered charity (Charity No. 1161678). For the purposes of data protection law, we are a “Data Controller”. This Privacy Notice explains how we use any personal information we collect about you when you use our website, visit one of our drop-in sessions or communicate with us via our website or Facebook.
If you would like to contact us about this notice, including if you wish to received further information about any aspect of it, you can contact us at firstname.lastname@example.org.
1. What information do we process from or about you?
This is what we normally process about you at our drop-ins, or when providing support via our website or Facebook, in order to help us to provide you with breastfeeding support services and to improve them, where we can:
1.1 Your Name(s)
1.2 Child’s name
1.3 Child’s Date of Birth
1.4 House no. and Postcode
1.5 Email address (if you choose to give it)
1.6 GP surgery
1.7 Information about how you heard about us (if you choose to give it)
1.8 If you contact us via Facebook, we will have access to your Facebook Profile to the extent that it is public.
From time to time we may also process information about the reason(s) why you are seeking support from us. This may include information about your baby’s health. This will happen, for example, when you send us an email or Facebook message including such information. We do not routinely collect or note this information at drop-ins. Information relating to health is treated by data protection law as “special category” personal data.
2. Lawful processing
The General Data Protection Regulation (GDPR) requires all organisations that process personal data to have a lawful reason (referred to in data protection law as a “lawful basis”) for doing so. We will use your personal data only for the purposes for which it was provided to us, unless we fairly consider that we need it for another reason that is compatible with the original purpose.
Our lawful reasons for processing your personal data are as follows:
Consent, for the purpose of receiving our fundraising newsletter. Please note that you can remove yourself from our mailing list at any time by clicking the “unsubscribe” button at the bottom of our emails.
Processing is necessary for the purpose of the legitimate interests pursued by us, namely the provision of breastfeeding support services to you and your child(ren) by us.
In relation to health data, on the basis that it is carried out in the course of our legitimate activities with appropriate safeguards, and on condition that it relates solely to solely to the provision of breastfeeding support services by us and will not be disclosed to any third party without your consent.
3. Using your information
Processing this information helps us better understand what you need from us. We
use it to provide you with the support you need, and improve the service we provide.
The main uses of your information are:
3.1 To help provide our breastfeeding support service.
3.2 To carry out statistical analysis and research to help us review, develop and improve our service.
3.3 To contact you to keep you informed of our activities and for fundraising purposes.
4. Sharing your information
Here’s when we may provide information about you:
4.1 Within our organisation for the purposes of providing our services to you.
4.2 Within our organisation (in anonymised form) for the purposes of carrying out statistical analysis and research to help us review, develop and improve our service. “In anonymised form” means in such a way that you are not identified in it or identifiable from it.
4.3 To healthcare professionals (only with your consent).
4.4 We will not pass on your personal information to third parties except:
(a) in the circumstances stated in this Notice;
(b) in anonymised form;
(c) where we are required by law to disclose that information, including to safeguard you or your child.
5. Retaining and protecting your information
5.1 It is our policy not to keep any personal data, other than our mailing lists, for longer than 6 months. We may keep personal data for longer where we are required by law to do so or where necessary in order to deal with any complaint, claim or dispute.
5.2 We keep the sign-in sheets from our drop-in sessions securely until we have extracted anonymised data for statistical and research purposes from them. They are then destroyed.
5.3 Any information sent to us electronically is encrypted (scrambled) using Secure Socket Layer (SSL) technology. This is industry standard encryption technology that protects data whilst being sent over the internet from being intercepted and misused by third parties. When it reaches us, we then store it on a secure server so that it can only be read by authorised personnel. Although we make every effort to create a secure environment for personal information, CBA cannot guarantee the safety of any personal information you transmit to CBA online. Any emails or Facebook messages sent to us are permanently deleted within one year.
5.4 We do not transfer any personal data to third countries or international organisations, other than MailChimp which we use to send email newsletters. MailChimp – https://mailchimp.com/ is GDPR compliant and behind the US Privacy Shield.
6. Your rights
6.1 The GDPR gives you a number of rights in relation to your personal data. For example:
You have to be informed about the information we hold and what we use it for;
You can ask for a copy of the personal data we hold about you;
You can ask us to correct any inaccuracies with the personal data we hold; and
You can ask us to stop processing your personal data.
You can require us to stop sending you emails.
If you wish to exercise any of these rights, please email us at: email@example.com. You will not be charged for this. Please note that these rights are subject to certain limitations that exist in law.
6.2 You can unsubscribe from our mailing list at any time by clicking the “unsubscribe” button at the bottom of any email from us.
We will occasionally update our Privacy Notice. When we make significant changes, we will announce this on our website and Facebook page, together with a copy of the updated Notice. We will also notify all those on our mailing list.
9. What should you do if you have a complaint?
We hope that you will be satisfied with the way in which we approach and use your personal data. Should you find it necessary, you have a right to raise a concern with or make a complaint to the information regulator, the Information Commissioner’s Office: https://ico.org.uk/
However, we hope that if you have a complaint about the way we handle your personal data, you will contact us in the first instance at firstname.lastname@example.org. so that we have an opportunity to resolve it.
END OF PRIVACY NOTICE