Privacy policy
Young Epilepsy will endeavour to ensure the privacy of its website visitors is safeguarded. This policy explains how your personal information will be treated.
Our website is managed and operated by an appointed company that is compliant with the Data Protection Act 2018 (DPA 2018) and the General Data Protection Regulation (GDPR) and only uses personal data as instructed by ourselves.
Personal data
Young Epilepsy may collect, store and use your personal information, which may have been obtained directly from you or from the use of cookies on this site.
This information is held in live website hosting and backups securely stored on DPA 2018 and GDPR compliant servers or storage systems.
Personal data submitted on this website will be used for the purposes specified in this privacy policy or in relevant parts of the website.
Information provided by you
You may directly provide us with information, for example, when completing forms, making information or contact requests, registering for activities/courses, subscribing to any e-mail notifications or using the video facility. This information will not be public on the Channel and will be securely destroyed after three years.
Information you upload onto the site, such as comments may be left on the Channel for six years.
The provision of your information in this context will be viewed as consent to allow us to process it.
Information obtained from cookies
We use cookies on the Channel, which can obtain information about your computer and your visits to this website such as your IP address, geographical location, browser type, referral source, length of visit and the number of page views.
One of the cookies we use is essential for parts of the site to operate and has already been set. You may delete and block all cookies from this site, but parts of the site may not work. Please see end of Notice for further details on our cookies.
What this information is used for
The personal information you provide us with may be used to provide you with services, for example to respond to information or contact requests.
The videos you upload will be stored by Young Epilepsy, but not used by us in anyway, unless we should later obtain your consent to do so.
Comments you upload are used to generated debate on the Channel
Information obtained from cookies, will be used to provide for administrative purposes, such as to provide a better user experience and to evaluate the Channel. This may involve a cookie being sent which may be stored by your browser on your computer’s hard drive. The information obtained from the cookie may be again used in the administration of the website
Our website management company solely use this information, under instruction from Young Epilepsy, for hosting, backup and support services.
Consent
Your use of this website and your agreement to enable the use of the cookies, is viewed as consent for us to collect and use your information as outlined in this privacy notice. If you wish to withdraw this consent please contact our Data Protection Officer using the contact details below.
Sharing your information
We will not routinely share your personal information with a third party unless we seek your consent to do so or if the third party is a data controller. We may also, disclose information about you to the extent we are required to do so by law, or to establish, exercise or defend our legal rights.
A data processor is an organisation responsible for processing personal data on behalf of Young Epilepsy. It does so under instruction from us and our contract ensures that Young Epilepsy’s, the DPA 2018’s and the GDPR’s standards are upheld at all times. Some data processors use anonymised personal data for their specific reasons, such as statistical, quality control, security, research or other purposes. Where this occurs, we can confirm the data is always anonymised and individuals cannot be identified from it.
The growth in cloud technology means that it is likely that the use of data processors will become more common. If you wish to know who are current data processors are please contact the Data Protection Officer.
Security of your personal data
We will take reasonable precautions to prevent the loss, misuse or alteration of your personal information, although we cannot guarantee the security of data sent over the internet. We will store all personal information you provide us with on secure and DPA 2018 & GDPR compliant servers.
Your rights
Under the Data Protection Act 2018 and the General Data Protection Regulation you have the right to:
- Be informed (the purpose of this Privacy Notice);
- Access your information;
- Rectify inaccurate or incomplete data;
- Request the erasure of your information;
- Restrict how your data is processed; and
- To object to the use of your information.
There are two additional rights with regard to automated decision making and data portability. With regard to these Young Epilepsy does not use information for automated decision making or profiling and will not undertake data portability.
Should you wish to exercise any of these rights or wish to discuss any concerns or queries please contact our Data Protection Officer using the contact details below.
Please note that should you be unhappy about the way we implement data protection you have the right to lodge a complaint with the Information Commissioner’s Office at https://ico.org.uk/ or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Third party websites
This website contains links to other websites. We are not responsible for the privacy policy of any third party websites.
Privacy Notice amendments
We may update this policy from time-to-time by posting a new version on this site website. You should occasionally check this page to ensure you are happy with the changes.
Other privacy notices
Please note that this Privacy Notice only covers information obtained from our website users. There are separate privacy notices that cover other areas of our work, such as Fundraising, Student Records etc. If you wish to view these privacy notices, please contact the Data Protection Officer using the contact details below.
Contact
If you have any questions regarding this privacy policy or the treatment of your personal data, please write to us using the contact details below:
- By e-mail to
dpo@youngepilepsy.org.uk; or - By post to
Data Protection Officer, Young Epilepsy, St Piers Lane, Lingfield, Surrey RH7 6PW; or - By phone
through the main switchboard on 01342 832243.