Privacy

Children’s Health Scotland is a Registered Charity No. SC006016 and a Registered Company No 100114 with its registered office at 22 Laurie Street, Edinburgh EH6 7AB.

Children’s Health Scotland is registered with the Information Commissioner’s Office (ICO) registration reference Z9730402.

We are committed to safeguarding the privacy of our website visitors. When you provide personal information to us, we will meet our obligations under the Data Protection Act 1998 and the EU General Data Protection Regulation (GDPR) to keep it safe. Please read this document to learn how we use and protect the information you provide.

Cookies – A cookie is a file that attaches to the hard drive of your computer by websites that you visit. They collect standard internet log information and visitor behaviour information. They can provide a better experience when you browse the site.

We use Google (Universal Analytics) Name: gat,_ga, _gid to collect this information. Google’s privacy policy can be found at http://www.google.co.uk/intl/en/policies/privacy/  This information does not identify individual visitors to our website, nor do we make any attempt to find out the identities of those visiting our website.  Read Google’s overview of privacy and safeguarding data

If you prefer you can set your web browser to disable cookies, but by doing so you may be unable to access certain parts of our site. For more information about cookies, including how to see what cookies have been set and how to manage and delete then visit:

We have added an IP anonymisation code to our Google Analytics script which means that we do not gather the IP addresses of those visiting our site.

To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout (https://tools.google.com/dlpage/gaoptout

Other third party websites – Our website contains links to and from third party websites which we think may be helpful or informative. Such websites may send their own cookies to users, or otherwise collect data or solicit personal information. Please note that these websites may have their own privacy policies. We are not responsible or liable for these policies so please read their privacy policies before disclosing any personal data.

Using our social media – If you follow us on our twitter or facebook page you have voluntarily provided us with your twitter address and facebook home page.

News mailing sign up form – The legal basis for processing your personal information when you sign up to our news mailings is that that you have given your consent.

By subscribing to our website news subscription facility, you provide us with your name and email address.  We will only use your details for that purpose.  You can ask us to remove your name from our mailing list at any time by unsubscribing at the foot of our newsletter, or by emailing enquiries@childrenshealthscotland.org

We may use Mailchimp to process and store your name and email address and to send your news mailing. Mailchimp has certified its compliance with the EU-US Privacy Shield Framework.  Read their privacy policy (https://mailchimp.com/legal/privacy/)

The new Data Protection Law means that young people from their 13^th birthday can consent to share their information online.  This means they can sign up for our news mailing. Children aged 12 and under will need the consent of their parents/carers to do so.

Website contact form – In using this you provide us with your name, email address, possibly your phone number and/or home address.  Some information you provide may be sensitive category information connected with your query (e.g about a health condition).  This information will only be used to help us answer your query or provide information requested. You won’t be added to our news mailing unless you request this. The legal basis is consent.

Email – If you contact us via our website email facility you will provide your email address and name and possibly special category information. The legal basis for this is consent.  We will only use this to answer your query and not for other purposes.  You won’t be added to our news mailing list without your consent.

The security of your personal information is very important to us. Information we process will not be kept longer than is needed unless we have to do so for legal or security reasons. Otherwise we keep records as long as we need to in order to deliver a service to you. When your information is no longer required we will dispose of it in a secure, confidential manner, including any information on back-ups, beyond any reasonable possibility of restoration.

Our website is hosted on UK servers managed by Flywheel, a US company registered with the EU-US Privacy Shield.  The Graphics Coop processes data collected through our website via forms and cookies and from emails we send to them directly.  Read their Privacy Information notice at https://graphics.coop/privacy-information-notice/

Transmission of information via the internet is not however completely secure and at one’s own risk.  Once information is received we will use strict procedures and security features to try and prevent unauthorised access.

We may on occasion need to use the services of a service provider outside the European Economic Area (EEA). If so we will ensure that your information is held in compliance with the European data protection regulations

Your personal information will only be disclosed to those in our organisation who need this to provide you with the service you require.

We will only share information with other third parties/service providers where it is necessary for a legitimate reason to help us to provide you with our services, where we have your permission to do so, or where we are required to do so by law or regulation.

Where we use service providers such as payment processors, direct mailing companies, software platform providers, (among others) we require them to meet with data protection controls to protect personal information. They will only have access to your personal information to the extent needed for them to perform their services for us.

We will never sell, exchange or rent your data to any third party. Other than as indicated in this policy, we will not share your personal information to third parties unless we check with you first or unless the law asks us to.

Third party data processors – This list will be updated as necessary.

• The Graphics Coop –  Visit https://graphics.coop/how-we-process-personal-data-on-behalf-of-clients/ to find out how they process data on our behalf.
• Virgin Money Giving – by using our secure online donation button, you will be taken to our payment gateway charity page to provide your credit card details and contact information to make your donation. We do not have access to your credit/debit card details. Read Virginmoneygiving’s privacy policy http://uk.virginmoneygiving.com/giving/terms/privacy-policy.jsp
• Mailchimp stores your name and email address should we use this to send your news mailing.  Mailchimp has certified its compliance with the EU-US Privacy Shield Framework.  Read their privacy policy (https://mailchimp.com/legal/privacy/)
• Eventbrite stores name, email addresses and enable you to pay for our conference we may hold. Children’s Health Scotland does not have access to your credit/debit card details Eventbrite has certified its compliance with the EU-US Privacy Shield Framework https://www.eventbrite.co.uk/support/articles/en_US/Troubleshooting/eu-us-privacy-shield-notice?lg=en_GB
• Google Analytics – Google’s privacy policy can be found at http://www.google.co.uk/intl/en/policies/privacy/
• Flywheel https://getflywheel.com/legal/privacy-policy/ CHS website is hosted on their servers.

Under the GDPR you have the following rights – You have the right to be informed about your personal information: to request access to your personal information; to ask us to rectify the information if incorrect; to ask for it not to be erased where it is no longer necessary for the purpose for which it was collected; to restrict our processing of your information; you can object to the use of your personal information where the processing of your data is based on consent; you have the right to data portability; and rights in relation to automated decision making and profiling.

There may be reasons why we are unable to delete, change, stop or restrict how we use your data depending on the law. If this is the case we will explain this to you.  To find out more about your rights visit the ICO website. https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

To make any of these requests contact us at enquiries@childrenshealthscotland.org  with the subject heading Data Protection Request.

You also have the right to complain to the ICO if you have any concerns about the way your personal data is being handled and we have been unable to resolve it for you.

Information Commissioners Office www.ico.org.uk

We do not make decisions using automated processes or profiling with personal data.

The provision of personal data by website users is not part of a statutory or contractual requirement or obligation.

The organisation has separate privacy notices for employees; volunteers; family participation group members; and categories of service users.

We may update this notice to ensure we are compliant with the GDPR, so check this page from time to time to make sure you are happy with the changes.

Any questions regarding this policy and our privacy notices should be directed in writing to the registered office address, or by email to enquiries@childrenshealthscotland.org or by telephone on 0131 553 6553.