Privacy Policy

Foundation for Nature CIC is a Private Limited Community Interest Company (CIC) registered in England and Wales 15958645. Our registered address is Low Bramley Grange Farm, Bramley Grange, Grewelthorpe, Ripon, North Yorkshire, United Kingdom, HG4 3DN.

We are registered as a Data Controller with the ICO: Ref No ZB878980

Foundation For Nature is committed to protecting the privacy and personal data of all those whose data we are handle and work within the guidelines set out by data protection law. This privacy information notice aims to provide you with information about how and why we use information about you. It also explains how you can exercise the rights you have in law and how you can contact us if you have any concerns or questions about data protection.

We take the protection of your personal data very seriously and respect your privacy in accordance with data protection legislation and best practice. You have rights relating to your personal information. You can find more information about your privacy rights on the Information Commissioner’s Office website www.ico.org.uk

You have the right to be informed about how and why we process your personal information. Any time you give us personal information you have the right to be informed about why we need it and how we'll use it.

You can find most of the information you need in this Privacy Notice.

This notice tells you:

What information we may collect about you.
How we store your personal information and for how long.
What we use your personal information for.
Who (if anyone) we pass it on to and how they use it.

You can use most of the features of our website without disclosing any personal information. We will collect your details if you would like to subscribe to hear more about work and if you register to attend our events and activities (e.g. name and address, occupation, company name, e-mail address).

We will analyse information provided by you in order to determine which communications are most effective. If we wish to use your personal information for an additional purpose, we will always ask you to agree at the point of collection.

If you have already supplied us with personal information, you can change your instructions at any time by emailing admin@foundationfornature.org

This notice focuses on information about the organisation’s customers. If you are one of our suppliers, please see the suppliers section at the end of this statement.

Information we may collect from you

The type of information collected from you and obtained about you will vary depending on your relationship or intended relationship with us, the products or services you are requesting and your chosen method of contacting us.

We may collect, use, store and transfer different kinds of personal data, these include (but not strictly limited to):

Name
Address
Business name
Job title
Profession
Email address
Phone/ Mobile number
Bank Details – note we do not store credit card details
Social media identifiers
Site details
Records of communication
Details of your visits to our website including your IP address, pages visited, dwell time, and page referred from i.e. search providers.

We do not routinely collect any Special Categories of Personal Data about you, this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.

Should we require to process such data about you, for example; to make reasonable adjustments because of any health-related conditions which may affect e.g. meeting locations we will inform you in advance why we need this information.

We do not collect any information about criminal convictions and offences, and we do not carry out automated decision making or any type of automated profiling using your personal data.

We need all the types of personal information listed above to enable us to work together and to enable us to comply with our legal obligations.

We may get this information from:

You.
Publicly available materials e.g. electoral roll, or from trusted third parties e.g. marketing and research partners.
Anyone you ask to give this information to us on your behalf (such as your family or friends).
Anyone who has a Power of Attorney to act as your attorney.

Where we store your personal information

We are committed to holding your personal information securely. This means only staff that need to see it have access. In such instances all staff have signed Data Protection agreements with the organisation.

Where possible we hold all information in electronic format, on our computer system which can only be accessed by us. Any information passed electronically is encrypted and protected.

Where we receive information from you in paper format we make electronic copies and securely shred the paper originals. If we need to keep information about you on paper, for example due to HMRC rules, this is held securely.

How long we store information

We will only use and store information for so long as it is required for the purposes it was collected for. How long information will be stored for depends on the information in question and what it is being used for. For example, if you ask us not to send you marketing emails, we will stop storing your email address for marketing purposes (though we’ll keep a record of your preference not to be emailed).

We continually review what information we hold and delete what is no longer required. We never store payment card information.

What we use your personal information for

Communications about work.
Event and activities registration.
Customer audience research and satisfaction surveys.
In house research, analysis and reporting.
Quality management.
Where permitted by law, for example for crime prevention or detection, prosecution, or risk assessment or management.
For the resolution of complaints or other issues. Information we receive about you from others may be confidential to them (not you) until it has been considered.

How we legally process your data

We are processing your data on a ‘legitimate interest’ basis.

Legitimate interest involves a three-part test:

Identify the legitimate interest. This includes why we collect your data, what we do with it and what information you receive from us as part of our purpose to inform you regarding the organisation’s interests.

Show that processing your data is necessary. This means we will process your personal information only to meet our legitimate interest.

Balance this against all individual’s rights. We have to let you know what we are doing with your data and ensure that any data we hold, and process, would not cause you harm in any way.

For a detailed definition of legitimate interest, please click this link directing you to the Information Commissions Office (ICO).

We ask you for your contact preferences. These will be used to deliver information to you in the way you prefer.

Who else we may pass on your information to and receive information from

Normally, we will be the only people who are able to access your personal information. However, there may be times when we need to give your details to others: where other companies are used to capture data or undertake fulfilment services on our behalf. These activities are carried out under contract in compliance with the General Data Protection Regulations requirements.

Examples include:

Freelance consultants (where these are needed to help with additional staff needs). We ensure that our freelance consultants are registered with the ICO.
Our professional advisors and providers of financial services.
Banking service providers who provide single payment systems.

We also receive personal information from third-party platforms e.g. Eventbrite.

We may sometimes be required to disclose your personal data by law such as by a regulator with appropriate power, or court order.

We will not share your personal information with anyone who claims to represent you unless we are satisfied that you have appointed them, or they act in some recognised official capacity. There may be a delay to us dealing with requests whilst we confirm the caller’s identity or check that we have your approval to deal with them.

We will not sell, distribute or lease your personal information to third parties unless we are required by law to do so.

Your rights

You have the right to ask us not to process your personal information; however, we may be unable to provide our services to you if we are unable to record and process certain details.

We want to ensure you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:

the right to confirmation as to whether or not we have your personal data and, if we do, to obtain a copy of the personal information we hold (this is known as subject access request);
the right to have your data erased (though this will not apply where it is necessary for us to continue to use the data for a lawful reason);
the right to have inaccurate data rectified;
the right to object to your data being used for marketing or profiling; and
where technically feasible, you have the right to personal data you have provided to us which we process automatically on the basis of your consent or the performance of a contract. This information will be provided in a common electronic format.

Accessing the information, we have about you

You have a legal right to access information that we hold about you. You can write to our Data Protection Officer at our registered office address (see below).

You can contact us at any time by email, letter or telephone to change or update your details or obtain a copy of your record.

If you have any problems or queries about your data, please contact us by emailing admin@foundationfornature.org or writing to Foundation For Nature, Low Bramley Grange Farm, Bramley Grange, Grewelthorpe, Ripon, North Yorkshire, United Kingdom, HG4 3DN. We will respond to your request with within one month of receipt. We may not be able to provide you with your request if your personal information contains details about another person and we do not have their permission to give it to you.

Cookies and tracking

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added, and the cookie helps analyse web traffic or lets you know when you visit a particular site. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. Cookies allow non-identifiable personal data to be stored and used to analyse visits to web pages and usage of our websites.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may limit the functionality of the website.

Overall, cookies help us provide you with a better website experience, by enabling us to monitor which pages people find useful and which people do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. The website also uses demographic tracking to identify the overall behaviour of different demographic groups, based on age, gender, location, and interests, to help shape our website, advertising channels, create website reports, and tailor information based on your needs.

Financial security

All online transactions are currently processed through websites that use the SSL (Secure Sockets Layer) protocol for encryption. Most browsers (Microsoft Explorer, Mozilla Firefox, Safari, etc.) support SSL. The link between your browser and the server is secure if your browser displays a small padlock or key symbol somewhere in the frame, or the address bar shows a web address beginning https:// (rather than http://).

We do not take any payments via our website. However, we do use third party payment service providers e.g. Eventbrite for payments for attending our events and activities.

Notification of change of Privacy Notice

Foundation For Nature reserves the right to amend this Privacy Notice at any time. Notice of any change will be posted on our website and will be deemed effective on publication. Your continued use of this website after changes are posted constitutes your acceptance of these Terms and Conditions.

Complaints

You can complain to the Foundation For Nature by contacting our Data Protection Officer using the details set out above. If you are not happy with our response, or you believe that your data protection or privacy rights have been infringed, you can complain to the UK Information Commissioner’s Office which regulates and enforces data protection law in the UK. Details of how to do this can be found at www.ico.org.uk

Suppliers

If you are one of the organisation’s customers, you do not need to read this section.

If you are one of our suppliers, we will collect, store and use information as follows:

We will collect such personal information about your staff that you provide to us or that we need for us to work together.
We will store the information collected in accordance with the “Where We Store Your Information” section, above.
We will use the information collected as required so that we can work with you.
We may pass the information on to third parties as required in accordance with the “Who else we may pass on your information to” section above

If you want to request further information about this privacy notice or exercise any of your rights, please contact us at admin@foundationfornature.org