Privacy Policy

Privacy Policy

This Privacy Policy outlines Blyth Star Enterprises’ policies and procedures on the collection, use, disclosure and protection of personal data.

We regularly update our Privacy Policy and this version was last updated in April 2024. 

Our Privacy Policy is supported by our Data Protection, Confidentiality and Record Keeping Policy, a copy of which can be supplied on request.

Confidentiality and Security

We take our duty to protect your information very seriously and work to ensure that it is kept confidential at all times. We ensure that the confidentiality and security of personal data both computerised and on paper, is protected and that the most appropriate people have access to it.

‘Personal data’ is defined as any information that relates to an identifiable living person; this can be a name, identification number (e.g. National Insurance Number) or Date of Birth.

For the purposes of data protection law, the term ‘personal data’ also includes personal information that has been “pseudonymised”. This means data that has been changed so that it cannot be directly connected to you.

Why we collect personal data

Blyth Star Enterprises collects personal data for many reasons, including to provide services, communicate with you and send you information you have requested. Depending on your relationship to the Organisation, we may process data for many reasons, including but not limited to:

  • to administer services Blyth Star Enterprises provides to you
  • to communicate with you regarding our work, latest news and fundraising activities
  • to process donations and administer Gift Aid information for any donation you make to Blyth Star Enterprises
  • for our own internal administrative purposes, and to keep a record of your relationship with us
  • to manage your communication preferences
  • to process job applications or volunteer placements
  • to obtain information to improve our services and user experiences
  • to address and resolve complaints about Blyth Star Enterprises and our services
  • to comply with applicable laws and regulations, and requests from statutory agencies
  • to comply with our contractual obligations to our funders

Here are some examples of the type of personal information we collect depending on your relationship with us.

  • your full name and date of birth
  • contact details – including your postal address, telephone number(s), and email address
  • National Insurance number
  • details of your case when providing you with services
  • your bank details
  • records of your correspondence and engagement with us
  • donation history and Gift Aid details
  • photographs, video or audio recordings
  • occupation
  • biographical information
  • other information you share with us

This information may be collected via:

  • any paper forms you complete
  • information from IT systems we and our associates have
  • telephone, email conversations, or face-to-face interactions
  • digital forms completed via our website, or online surveys
  • third-party companies and websites such as Just Giving
  • publicly available sources
  • communication via social media

Collecting Personal Data

When we collect your personal data we will:

  • ensure you know and understand why we need it
  • only ask for what is necessary for the service we’re providing to you
  • protect it and make sure nobody has access to it who shouldn’t have
  • ensure you know if you have a choice about giving us information
  • make sure we don’t keep it for longer than is necessary

We ask that you give us accurate information, tell us about any mistakes e.g. a name which is spelt incorrectly and to tell us as soon as possible of any changes.

Using Personal Data

The amount and type of personal data we collect depends on how and why you contact us and the service we provide to you. In some cases, we will need to collect sensitive personal data. For some services, we’ll use your data under a contract (eg an Independent Supported Living (ISL) tenancy agreement). Where we need to share your personal data with third parties (eg social landlord), we have received confirmation from them that they also keep your data secure in line with the Data Protection Act (2018). These providers must therefore keep your details safe and secure, and use them only to provide the service. We may be required or permitted, under data protection legislation, to disclose your personal data without your explicit consent. For example, if we have a legal obligation to do so, such as law enforcement, regulation and licensing, criminal prosecutions and court proceedings. We’ll keep your personal data for as long as we are legally obliged to do so or in line with our document retention policy and when we no longer need to keep it, we will delete it or destroy it securely.

Further processing of Personal Data

Before we use personal data for a new purpose, for example if we need to share it with somebody who we haven’t already told you about, we’ll contact you to set out the reason for this and tell you about how we will process your personal data. Where necessary, we’ll ask for your consent before any new processing of your personal data.

Usage Data

Usage Data is collected automatically when accessing web assets owned and managed by Blyth Star Enterprises eg the Blyth Star Enterprises and The Woodfuel Centre websites.

Usage Data may include information such as your device’s Internet Protocol address (IP address), browser type, browser version, the webpages that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access our websites through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile internet browser you use, unique device identifiers and other diagnostic data.

We may also collect information that your browser sends whenever you visit our website or when you access the Service by or through a mobile device.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on our website and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyse our website. The technologies we use may include:

Cookies or Browser Cookies – A cookie is a small file placed on your device. You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. Our website does not use cookies for the general running of the website, but does use them to enable requested services and to remember choices made whilst visiting the website. Anonymous information about page visits and video views is collected using Google Analytics.

We are the sole owner of the information collected via our website. It does not store or capture personal data of users with general public access, (but does log the IP address of a visitor). This enables us to see which pages people look at and helps us to improve our services.

Web Beacons – Certain sections of our website and emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Email

Emails that we send to you or you send to us, may be retained as a record of contact and your email address stored for future use in accordance with our record retention policy and procedures. If we need to email sensitive or confidential information to you, we may perform checks to verify the correct email address and may take additional security measures.

Marketing and Fundraising Activities

We would love to keep you up to date with our latest news, fundraising and marketing activities. We use a range of marketing activities and channels to contact our supporters – including our website, direct mail, email, and social media. We will seek to obtain your consent to contact you by email for marketing purposes.

We will send you marketing by post, on the basis of it being within our legitimate interests to do so, unless you specifically opt out.

Our Ethical Fundraising Promise

We will never sell or rent your data, and we promise to keep your details safe and secure. We will treat your details with utmost care and respect, we will not pass on your details, cold-call you, or ask for donations on the high street (known as ‘chugging’).

We send the following marketing materials:

  • Updates about our work – including newsletters, email bulletins and other publications informing you about our work
  • Fundraising activities – including requests for donations, information about how you can leave us a gift in your will, how you can raise money on our behalf, attend or take part in a fundraising event and updates on the impact that fundraising activities have had on our work
  • Volunteering – information about how you can help support Blyth Star Enterprises by giving up your time or using your influence to help us, along with updates on the impact of your work.

We will never share or sell your personal data to a third-party organisation for its marketing, fundraising or campaigning purposes. You can withdraw your consent, unsubscribe from or update your marketing preferences at any point by contacting us directly. Any electronic communications, such as emails we send to you, will have a link to unsubscribe from future electronic communications, so you can manage your own communication preferences.

If you make any changes to your consent, we will update your record without undue delay and at the latest within one month of receipt. Email communications will, however, be stopped immediately. If you tell us you do not wish to receive marketing communications, you may still receive transactional and service-based communications confirming and servicing other relationships you have with us.

Applying for a job at Blyth Star

When you apply for a job with us, your personal data will be collated to monitor the progress of your application, and the effectiveness of the recruitment process through the statistics collected. Where we need to share your data – such as for gathering references or obtaining a Disclosure and Barring Services check, you will be informed beforehand, unless the disclosure is required by law. These checks are only done after a position has been offered only to the successful candidate. On the application form, you are asked to complete the referee details. Once offered a role, we will automatically send out reference requests unless advised otherwise.

Personal data about unsuccessful applicants is held for 12 months after the recruitment exercise for that vacancy is complete. You, as an applicant, can ask us to remove your data before this time if you do not want us to keep it.

Once you have taken up employment with Blyth Star Enterprises, we will compile a file relating to your employment. The information contained in this will be kept secure and will only be used for purposes directly relevant to your employment. Once your employment with us has ended, we will retain the file in accordance with our retention and disposal procedure and any relevant employment legislation and then disposed of securely.

CCTV

We have installed CCTV systems in some of our premises for the purposes of service user, staff and public safety and also crime prevention and detection. CCTV is also installed on the outside of some of our buildings for the purposes of monitoring building security and crime prevention and detection. The purpose for processing this information is for security and safety reasons. The lawful basis we rely on to process your personal data is article 6(1)(f) of the GDPR, which allows us to process personal data when it’s necessary for the purposes of our legitimate interests.

Why we gather CCTV footage and how we use it

The main purpose of the CCTV system is to provide a safe environment for anyone on the premises. However, if necessary it will be used to

  • detect, deter and prevent crime and disorder
  • to help identify, apprehend and prosecute anyone committing a criminal offence;
  • to provide the Police/Blyth Star Enterprises with evidence to enable criminal and/or civil proceedings to be brought in the courts.

Some examples of how we use your data are provided below (please note this is not an exhaustive list):

  • monitoring for Health and Safety purposes
  • detection and prevention of anti-social behaviour
  • the investigation and detection of crime
  • providing evidence in criminal proceedings (police and criminal evidence act 1984 and criminal procedure and investigation act 1996)
  • the prevention and reduction of crime and disorder
  • Performance management including the investigation of any staff performance or disciplinary issues

Monitoring of footage

CCTV footage is monitored by Blyth Star Enterprises staff based in Project Offices.

Positioning of CCTV cameras

Whilst each project has its own requirements for the positioning of cameras, Blyth Star Enterprises will ensure that no cameras impact on an individual’s personal privacy.

For this reason, CCTV cameras are only located in shared and communal areas which are accessed by all clients, visitors and staff. These include places such as entrances, exits, corridors, communal rooms and staff offices.

Appropriate signage is displayed to inform people that CCTV is in operation on the premises.

The type of information collected

Video recording images of an identifiable individual.

Who your information may be shared with

Information may be shared with other agencies such as the police, ambulance, fire service, and other relevant agencies as required in the event of an emergency and the prevention or detection of crime.

Blyth Star Enterprises staff

Information may also be shared with specific teams within Blyth Star Enterprises for the purposes of staff training, performance management and the investigation of any disciplinary issues.

How long we store CCTV footage

On average we will keep footage for between 21 and 28 days although evidence supplied to the police for criminal cases may be retained for longer.

Accessing recorded data

Recorded material is not provided to members of the public or media organisations for profit, gain or commercial exploitation.

This does not affect the right of individuals to access any personal data under the provisions of the Data Protection Act 2018. Any request for personal data is known as a ‘Subject Access request’.

All requests for CCTV material will be in writing, logged and subject to a signed handover detailing the basis for the request and authorising officer. This process is subject to regular review.

Transferring Personal Data Abroad

If we process your personal data using Information Technology (IT) services hosted outside the European Economic Area, we will only use those services which have a data processing agreement to make sure that any organisation we share data with complies with the General Data Protection Regulation/Data Protection Act (2018).

Your rights relating to your Personal Data

You have a number of rights under data protection law depending on the basis for collecting your data.

The right to be informed

You have the right to be told how your personal data is processed. This applies whether or not you supply your personal data to us, or whether we obtain your data from a third party. We’ll inform you how we’re processing your data using privacy or consent notices to explain what we are doing with your personal data and why we are using it.

The right to access your Personal Data

You have the right to request access to personal data held about you; this is known as making a ‘Subject Access Request’ (SAR). If you want to do this please contact us for a form to complete which will help us to process your request.

The right to rectify your Personal Data

If your personal data isn’t accurate or complete, you have the right to ask for this to be rectified. We’ll always comply with a request, unless there is a legal reason why we can’t. Where we can’t rectify your information we’ll give you an explanation.

The right to have your Personal Data erased

In certain circumstances you have the right to ask for any information held about you to be erased. We must legally erase any information where there is no compelling reason for us to be processing it. Where we cannot comply with a request to erase your information we’ll provide an explanation.

The right to restrict the processing of your Personal Data

In certain circumstances you have the right to ask for the processing of your personal data to be restricted. This is similar to asking for your data to be erased, but in this instance, it means that we can only store/hold your information and can’t process it in any other way. For example,

  • where you have asked a question about the accuracy of your information and processing is restricted until this is verified
  • where you have objected to processing and we are considering the legal implications of complying with your request

We’ll provide an explanation to you where we cannot comply with a request for restriction of processing because there is a legal reason not to.

The right to object to certain types of processing

You have the right to object to certain types of processing of your personal data. If you object to the processing of your information and there is a legal reason why we cannot comply we’ll provide an explanation.

The right to have your Personal Data ported to another Organisation

There are some limited circumstances where you have the right to ask us to transfer your personal data to another organisation. However, to exercise this right:

  • you must have given your information to us directly
  • we must only be processing your data on the basis that you have given your consent or we are processing it to fulfil a contract.
  • the processing of the data is carried out by automatic means

In such cases, we’ll always comply with requests to provide your data where possible, and if we cannot we’ll explain why we can’t.

The right to object to automated decision making

Blyth Star Enterprises does not use automated decision making, but for clarity, automated decision making is where a decision has been carried out by a computer system with no human intervention. If this ever was the case, you have the right to object to this and have a member of staff look at the decision that had been made. We’ll tell you where we are making automated decisions about you and how to get us to look at any decisions again.

The right to raise a complaint with the Information Commissioner’s Office (ICO)

If you have a concern about the way we handle your personal data, you can contact the Information Commissioner’s Office.

If the Information Commissioner’s Office (ICO) thinks we have not complied with legal obligations they can give us advice and ask us to solve the problem. The ICO cannot award you compensation, their main aim is to improve the information rights practices of organisations. The ICO will not usually investigate concerns where there has been an undue delay in bringing it to their attention and so you should raise your concerns with them within 3 months of your last contact with us about your issue. There are some circumstances where other laws prevent us from complying with some of your rights and where this is the case, we’ll provide an explanation. Find out more about your legal rights from the Information Commissioners Office (ICO).

Further Information

If you have questions about this Privacy Policy, want to exercise any of your legal rights, or you have a complaint about how your personal data has been used, please:

  • Email: l.tonks@blythstar.org.uk
  • Phone: 01670 338500
  • Write to: Leanne Tonks, Philanthropy and Marketing Manager, Blyth Star Enterprises, The Old Chandlery, 30 Ridley Street, Blyth, Northumberland, NE24 3AG

Contact Us

If you are interested in any of our products, or how you can be involved in the centre, please contact us…

Phone

Call us on:

01670 857138

Location pin

Visit us at:

The Woodfuel Centre
Unit 7 Fergusons Business Park
West Sleekburn
Northumberland
NE22 7DD

Envelope

Email us at:

n.hedley@blythstar.org.uk