At the Women’s Fund for Scotland, we’re committed to protecting any personal information you share with us, or that we receive from other organisations, and keeping it safe.
Please read the following notice to understand how your personal information will be treated.
We are subject to the legal jurisdiction of Scotland and any data protection legislation that applies in that jurisdiction.
For the purpose of the Data Protection Act 1998 (DPA) and the General Data Protection Regulation 2016(GDPR), the Data Controller is the Women’s Fund for Scotland.
the Women’s Fund for Scotland is a Scottish Charitable Incorporated Organisation registered with the Office of Scottish Charity Regulator [registration number SC049217].
We were established to make grants to projects that benefit women and girls the length and breadth of Scotland.
In order to do this effectively we work with a range of individuals, groups, and businesses. We use the knowledge we have about people – personal data – only for the purpose of furthering the work of the Women’s Fund for Scotland now and in the future.
We actively participate in fundraising in order to make grants and understand our responsibilities as stewards of this data and will protect your privacy. This notice describes how we do this.
We hold data on individuals who have given financial or other support to the Women’s Fund for Scotland, those who might do, and those who hold grants made by us, whether on behalf of an organisation or personally.
The majority of the information we hold about you has been provided directly to us by you. Examples include when you enquire about our activities; make a donation; set up a fund; apply for funding; apply for a job or volunteer Panel position or attend events organised by us.
We may also receive information about you from someone else. Examples include where existing supporters feel you may be interested in supporting our work and suggest your name to us or data collected via a service provider like CAF, Just Giving or Enthuse.
In some cases, we may collect data from publicly available sources. Examples include information gathered from news articles or on-line media, including social media like Facebook. LinkedIn or Twitter. We may also use publicly available directories and similar information such as the Royal Mail’s National Change of Address database and Companies House.
The data we collect depends on the nature of our relationship with you. At any time you can ask us to see what information we hold about you, ask us to correct or update information or ask us to delete the information we hold.
For Donors and Supporters.
In order for us to ensure that your contact details are up to date, to help plan our development activities and to ensure that appropriate due diligence is carried out to safeguard the assets and reputation of the Women’s Fund for Scotland, we may need to keep the following information about you:
• Your name
• Contact details including your address, telephone number(s) and email address
• Information about how you like to be contacted
• Information about your interests
• Profiling information such as your age, sex and ethnic group
• Information about organisations you may have links to
• If you are a current UK tax-payer (for Gift Aid purposes)
This information will be stored in a way that enables us to keep track of your donations, process gift aid declarations, and monitor fund balances where applicable. It helps us to ensure any money you donate is spent in accordance with your wishes.
For Grantees and their representatives
In order to solicit and process applications for funding from Foundation Scotland we collect personal information from people representing the groups we support or who apply for funds or about individuals who apply for funds. This will include:-
• Your name
• Contact details including your address, telephone number(s) and email address
• Information about how you like to be contacted
• Information about your connection to the beneficiary or applicant organisation
• Profiling information such as your age, gender identify, and ethnic group
• Information about other organisations you may have links to
Communications
We will from time to time use this information to communicate with our donors and supporters. When we do so, we will be processing your data in line with one of the legal bases permitted by current data protection legislation. In most cases, this will be because we have a legitimate business interest in contacting you as a donor, supporter, or fund recipient (or a representative of a fund recipient), but in a small and very specific number of cases, you have given us specific consent to do so. You can withdraw consent at any time by following the unsubscribe link in our emails, or by contacting us.
What is a Cookie?
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
What information is captured by cookies?
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
You have the ability to accept or decline cookies by modifying the settings in your browser. For example, in Internet Explorer, you can go to Tools and Internet Options, where there is the option to change your settings to disable cookies. However, you may not be able to use all the interactive features of our site if the cookies are disabled. You also have the ability to delete cookies that have been installed in the cookie folder of your browser. To do this you should search for “cookies” in your “Help” function for information on where to find your cookie folder. Unless you have adjusted your browser settings so that it will refuse cookies, our system will issue cookies when you log on to our Site. To prevent Google Analytics cookies being set, you may install the Google Analytics Opt-Out Browser Add-On by clicking on this link https://tools.google.com/dlpage/gaoptout and following the instructions. Most web browsers allow some control of most cookies through the browser settings.
How do we use Cookies?
We sometimes use ‘pop up’ messages (like the one that tells you about the cookies on this site) to make sure our visitors are aware of important information. If you choose to acknowledge the message, the pop up will no longer appear when you visit the site. These kinds of messages include a cookie that ‘remembers’ you have already acknowledged the message when you visit.
Google Analytics – Google – sets these cookies on our Website. These cookies are used to collect information about how visitors use our site. Google stores the information collected on servers in the United States. Google may transfer this information to third parties where required to do so by law, or where third parties process the information on Google’s behalf. Google state that they will not associate your IP address with any other data held by them.
We sometimes embed videos from YouTube using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. To find out more please visit YouTube’s embedding videos information page: https://support.google.com/youtube/answer/171780?hl=en-GB
We will keep data for as long as is needed to complete the task for which it was collected. Relationships between donors, fund recipients and Women’s Fund for Scotland are often long term, and so we expect to keep your data for as long as the relationship exists, or until we no longer need it.
We store personal data primarily in electronic form with paper records being scanned- and then destroyed – wherever possible. Electronic records are all held in secure servers with strong password protection. Paper records are held securely in our office or, in the case of archived information held for legal compliance, in a secure area of our office buildings.
The primary electronic systems we use to process your personal information include:
- Our customer relationship management system and related systems such as email provision services
- Our financial system
- Emails, documents, and spreadsheets held on local devices or cloud-based servers
Non-sensitive details, such as your email address, when transmitted normally over the internet, can’t be guaranteed to be 100% secure. Whilst we take all possible means to protect your personal information, we cannot guarantee the security of any information you transmit electronically to us, and you do so at your own risk.
Where we have given you a password to access certain parts of our website, you are responsible for keeping this password confidential, we ask you not to share this password with others.
Staff, Board and Committee Members at the Fund will be granted access to your personal information only where it is necessary for them to carry out their duties as employees, Trustees or Committee members.
All staff are given training in data protection and are required to comply with our internal data protection policy.
We will only ever share your personal information with third parties where it helps us to carry out our business functions and charitable activities or where we have a legal obligation to do so. We will never sell or trade your information with third parties.
Third parties we may share your data with include:
- Our software suppliers, for example in processing communications sent to you
- Our Web Masters, who collect, process and store data in the performance of their contract with us
- Our bankers (for payments to fund recipients who are individuals)
- UK Community Foundations, for grant monitoring purposes
- HMRC on Gift Aided donations since we have a legal obligation to provide this information
- We may pass data to other organisations, known as Data Processors, to provide specific services to us. An example would be providing data to a mailing house in order to send a newsletter. A contract is always in place with a Data Processor, and they are not allowed to do anything with your data other than that which we have requested
- We may share basic information on the attendees at an event or function or meeting with the host or other people who are a supporter of the Women’s Fund for Scotland
When donating you are using our chosen secure online facility, your donation is processed by a third party who specialise in the secure online capture and processing credit/debit card transactions. If you have any questions regarding secure transactions, please contact us.
Some of our suppliers run their operations outside of the European Economic Area (EEA). Although they may not be subject to the same data protection laws as companies based in the UK, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to this transfer, storing or processing at a location outside of the EEA.
The law requires us to tell you the basis on which we process your data.
Some activities may require your consent. If the law requires your consent to process data in a certain way then we will obtain it before carrying out that activity.
Other activities are carried out to fulfil a contract or agreement. Examples include holding funds or organising an event. Each requires us to know who you are and to process your information in order to do the thing you have asked us to do. In these instances, we will process your data based on that contract.
If personal data is required to be collected and processed in order to comply with the law, then consent is not required. This is the case for some data related to taxation.
In all other cases, the law allows us to process your data if it is in our legitimate interest to do so, but only so long as we need to and your “interests or your fundamental rights and freedoms are not overridden”. Practically speaking this means we carry out an exercise to check that we will not cause you harm by processing your data, that the processing is not overly intrusive and that we will only do so in a way which is described in this privacy notice.
We will keep data for as long as is needed to complete the task for which it was collected. Relationships between donors, fund recipients and the Women’s Fund for Scotland are often long term, and so we expect to keep your data for as long as that relationship exists, or until we no longer need it.
The law requires us to tell you that you have a variety of rights about the way we process your data. These are as follows:
Where our use of your data requires consent, you may withdraw this consent at any time.
Where we rely on our legitimate interest to process data, you may ask us to stop doing so.
You may request a copy of the data we hold about you.
You may change or stop the way in which we communicate with you or process data about you, and if it is not required for the purpose you provided it, then we will do so. Activities like processing Gift Aid donations, or managing Fund Agreements, may mean we can’t entirely stop processing your data. However, we will always endeavour to comply with such a request.
If you are not satisfied with the way we have processed your data then you can complain to the Office of the Information Commissioner. https://ico.org.uk/
If you have any questions about this privacy policy, about the way in which we process your data, or if you wish to change the way we use your data, including how we communicate with you, then please contact us:
Executive Director, Women’s Fund for Scotland, 17 – 21 East Mayfield, Edinburgh, EH9 1SE
E: shona@womensfundscotland.org
