Privacy Policy

At Brynawel House we are committed to protecting and respecting your privacy. 

 

Introduction

This Privacy Notice explains when and why we collect personal information about you, how we use it and the conditions under which we may disclose it to others. Your personal data is defined as any information that can directly or indirectly identify you. This notice also explains how we keep your data safe and secure and includes information you need to know about your rights and how to exercise them.

 

If you have any questions regarding our Privacy Notice and our use of your personal data, if you would like to exercise any of your rights, or if you are unhappy with the way we process your data, please get in touch via the following information:

 

Email us: contact@brynawelhouse.org

Telephone us: 01443 226 864

Write to us: Llanharry Road, Llanharen, Rhondda Cynon Taff, CF72 9RN

If you are unhappy with the way we process your data, you can also make a complaint to the Information Commissioner’s Office (ICO) which regulates the use of information in the UK. They can be contacted by:

Telephone 0303 123 1113

Write to the ICO: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Or by going online to www.ico.org.uk/concerns

If you are based outside of the UK, the complaint should be directed to the relevant Data Protection Supervisory Authority in that Country.

​

Who are we?

In this policy, references to ‘Brynawel House Alcohol and Drug Rehabilitation Centre’, 'we', 'us', 'our' or ‘BH’ means:

 

Brynawel House Alcohol and Drug Rehabilitation Centre LTD.

Llanharry Road, Llanharen, Rhondda Cynon Taff, CF72 9RN

Registration number of the charity: 1113952

ICO registration number: Z225514X

 

We are the data controller for the personal data relating to you that we collect and hold.

 

The Data Protection Lead is Sue Gwyn (CEO).

​

How and when do we collect information from you?

Information you give us directly

For example, we may obtain information about you when you enquire to receive help and support from us, if you attend one of our events, when you apply to work with us, if you volunteer or fundraise for us. We may occasionally collect information when it is available publicly from external sources and may help us to provide a better service or raise funds to continue our work.

 

Information your referrer gives us

For example, we may obtain information about you if you are interested in joining our residential program and your referrer has submitted the referral form on your behalf.

 

When you visit this website

We may, like many companies, automatically collect the following information when you visit our website:

 

Technical information, including the type of device you're using, your IP address, domain name, the date and time of your visit, the pages you accessed, documents you downloaded, the previous website you have visited and type of browser you are using.

 

We collect and use your personal information by using cookies on our website - more information on cookies can be found under 'the use of cookies' section below. Wherever we use non-essential cookies we will request your Consent.

 

Social Media

When you interact with us on social media platforms such as Facebook and Twitter, we may obtain information about you (for example, when you publicly tag us in an event photo). The information we receive will depend on the privacy preferences you have set on those types of platforms.

 

What type of information is collected from you?

​

In order to carry out our work and to reach the charity's objectives, we collect personal information about our service users, donors, volunteers, supporters and employees.

 

Depending on your relationship with us, this may include:

 

• Your name and contact details (including postal address, email address and telephone number).

• Your date of birth

• Information to process booking an appointment with one of the members of our team.

• If you have donated with us or make an ongoing donation, we may have records of previous support and donations.

• If you attend our events, we may have records of events bookings, including volunteers, supporters and beneficiaries, we may hold an image of you in a photo or video to use on our website or in other fundraising and marketing materials to promote the charity.

• A photo will be necessary for staff and volunteers to be used for DBS and right to work checks.

• Your bank details if you work for us

• Any other personal information that may be shared with us and information to assist us in providing our services.

 

Data protection laws recognise certain categories of personal information as sensitive or 'special categories of data' and therefore requiring greater protection, for example, information about your health, religion, sex life or sexual orientation.

 

In the nature of what our charity does, we actively collect special category data (health information) from our service users to achieve the objectives of the charity and to provide the help and support we give. For more information on how we handle data concerning our service users, please request a copy of our Service Users Privacy Notice.

​

Why is your information used?

We may use your information for a number of different purposes, which may include:

 

• Providing you with the best possible support if you access our services.

• Keeping a record of your relationship with us.

• Carrying out our obligations under any contracts entered into between you and us.

• Providing you with the services, products, or information you asked for.

• For internal administrative purposes, and to let you know about changes to our services or policies that may affect you.

• Seeking your views or comments on the services and information we provide.

• Notifying you of any changes to our services.

• Sending you communications which you have requested and that may be of interest to you. These may include information about events we may organise.

• Processing applications for job opportunities.

• Record an event that you attend.

​

How long is your information kept for?

We keep your information for no longer than is necessary for the purposes it was collected for. The length of time we keep your information for is determined upon our legal and operational considerations. For example, we are legally required to hold certain types of information to fulfil our statutory and regulatory obligations (e.g., Employment law, Health and Safety and tax/accounting purposes).

 

We review our retention periods on a regular basis, record these and update them accordingly. If you would like to know more about how long we hold your personal information for, please email contact@brynawelhouse.org.

​

Lawful Processing

​

Data protection law requires us to rely on one or more lawful basis for processing your personal information. Please see the following lawful grounds we use and believe are relevant and lawful under data protection laws:

 

Consent

Where you have provided your consent to use your personal information for a certain purpose, for example if we need to share your information with a third party.

 

Legitimate Interests

Where it is necessary to achieve our and others' objectives as a charity with good reason as long as we can demonstrate that the use is fair and with your reasonable expectations. This might include (but it’s not limited to) providing you with any support you need if you make an enquiry or if you are part of our residential program, using pictures for our publicity, sending you communication communications through the post which we believe might be of interest to you.

 

Whenever we use Legitimate Interest to process data, we perform a Legitimate Interest Balancing Assessment (LIA) to enable us to consider any potential impact on you (both positive and negative), and your rights under data protection laws. Your information will not be processed if our interests as a charity override your fundamental rights and freedoms according to the law.

 

Legal Obligation

We will use this condition to process personal information where we are required by law, such as to process information about employees.

 

Performance of a contract

Where we are entering into a contract with you, for example where purchase a ticket and attended to an event we have organized or where you have joined our organization as an employee.

 

Vital Interests

Where it is necessary to protect your life or your health. An example would be in the case of a medical emergency by an individual attending one of our events.

​

Who has access to your information?

We do not generally share your information with third parties for marketing purposes or any other purpose unless we have your consent to do so.

 

Authorised employees will have access to your information where it is necessary, all employees have undertaken data protection training and understand their obligations when taking care of information on behalf of the charity.

 

We may pass your information to our third-party service providers, suppliers’ subcontractors and other associated organisations for the purposes of completing tasks and providing services to you for example, to process a donation. Please be assured that your data will not be processed by these third parties for any other reason than that stated unless you have requested us to do so, or we are required to do so by law. For example, for the purposes of prevention of fraud or other crime or any other requirement by law.

​

Fundraising and Marketing Communications

Your contact details may be used to provide you with information about our services or our fundraising opportunities.

 

Post

We may use your Consent or our Legitimate Interest to send you fundraising or marketing communications by post. If you prefer not to hear from us this way, please get in touch by using any of the contact details listed at the top of this notice.

 

Phone/Email/Text or other electronic message

If you have provided us with your telephone number or email address, for example, when you contacted us directly and expressed interest in our charity, we may get in contact with you via phone, email or text to provide you with further information about our services.

 

We may contact you by phone with fundraising and marketing communication under our legitimate interest (unless you are enrolled to TPS or you told us not to do so).

 

We will only send you fundraising and marketing communications by email, text or other electronic message if you have explicitly provided your consent or if you have been involved in a commercial transaction with us.[em1]  You may opt-out of our fundraising and marketing communications at any time by clicking the unsubscribe link at the end of our marketing emails. Alternatively, you can get by using any of the contact details listed at the top of this notice.

 

When you give us consent to receive marketing and fundraising communications, we will monitor consent and ensure that you still wish to receive such communications by occasionally reaffirming your consent with us. Our approach is designed to uphold your privacy and information rights, to respect your choices, and to ensure we are not intrusive.

​

Your Rights

Under data protection laws in the UK and EU, you have certain rights over the personal information that we hold about you. Here is a summary of the rights we think apply:

 

Right to be Informed

You have the right to be informed as to how we use your data and under what lawful basis we carry out any processing. This Privacy Notice sets this information out however if you would like further information or feel that your rights are not being respected, please get in contact with any of the details listed above.

 

Right of Erasure

You may ask us to delete some or all of your information we hold about you. Sometimes where we have a legal obligation we cannot erase your personal data.

 

Right to Object

You have the right to object to processing where we are using your personal information such as where it is based on legitimate interests or for direct marketing.

 

Inaccurate personal information corrected

Inaccurate or incomplete information we hold about you can be corrected. The accuracy of your information is important to us and we are working on ways to make this easier for you to review and correct the information that we hold about you. We will also carry out an annual accuracy check. If any of your information is out of date or if you are unsure of this, please get in touch through any of the contact details listed in this notice.

 

Right of restriction

You have a right to restrict the processing of some or all of your personal information if there is a disagreement about its accuracy, or we are not lawfully allowed to use it.

 

Right to Access your information

You have a right to request access to a copy of your personal information that we hold about you, along with the information on what personal information we use, why we use it, who we share it with, how long we keep it for and whenever it has been used for automated decision making. You can make a request for access free of charge and proof of identity is required.

 

Automated decision making

Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. You have the right to question the outcome of automated decisions that may create legal effects or create a similar significant impact on you. We currently do not undertake automated decision making.

 

Portability

You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured. Commonly used, electronic form so it can be easily transferred.

​

​

Keeping your information safe

We take looking after your information very seriously. We have implemented appropriate physical, technical and organisational measures to ensure that your personal information is secure when under our control, both on and offline, from improper access, use, alteration, destruction and loss.

 

Any sensitive information (such as your credit or debit card details or any information that is classed as sensitive or 'special category data') is encrypted and protected. All debit and credit card details are passed securely to our payment processing partner, according to the Payment Card Industry Security Standards.

 

Our websites may contain links to other sites. While we try to link only to sites that share our high standards and respect for privacy, we are not responsible for the content or the privacy practices employed by other sites. Please be aware that advertisers or websites that have links on our site may collect personally identifiable information about you. This Privacy Notice does not cover the information practices of those websites or advertisers.

 

Use of 'cookies'

Like many other websites, Brynawel House Alcohol and Drug Rehabilitation Centre Ltd House website uses cookies. ‘Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. For example, we use cookies to store your country preference. This helps us to improve our website and deliver a better more personalised service.

It is possible to switch off cookies by setting your browser preferences. Turning cookies of may result in a loss of functionality when using our website.

​

Transferring your information outside of the United Kingdom

Where personal data is stored outside of the UK and the EU, safeguards to protect personal data may include but are not limited to the UK Addendum used in conjunction with the EU Standard Contractual Clauses (SCCs), or UK International Data Transfer Agreement (IDTAs). Such safeguards will be subject to Transfer Risk Assessments (TRAs).

.

Changes to this notice

Any changes we may make to this policy in the future will be posted on this website so please check this page occasionally to ensure that you're happy with any changes. If we make any significant changes, we'll make this clear on our website or we may contact you.

​

Review of this notice

​

We keep this policy under regular review. This notice was last updated in August 2022. Next review date is August 2023.