Edinburgh Enlightenment Network Limited
Edinburgh Enlightenment Network Limited takes your privacy seriously and we will take care to safeguard any information you give us.
Edinburgh Enlightenment Network Limited is a not-for-profit company limited by guarantee (SC737003). The organisation is a data controller of your information under the conditions of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and is registered with the Information Commissioner’s Office. This notice covers all directors, staff, consultants and volunteers acting for the organisation.
Our contact details
Edinburgh Enlightenment Network Limited,
5 South Charlotte Street,
(Note: items requiring signature not accepted. Nor packages.)
What type of information we collect
We only collect information about you that you deliberately give us, which may include:
- your name
- your email address
- your postal address
- your telephone number
- payment details and donation amounts, if you make a donations to us
- information about which of our activities you have been involved with and how you have contributed.
How we get the information and why we have it
We get this information from you when you provide it to us by donating to us, emailing us or writing to us, attending a meeting, or taking part in our activities. We collect this information in order to be able to communicate with you about our work, and to allow you to be involved in out activities.
Ways in which we use your personal information
We will never sell your details to other organisations.
We will not disclose your personal data to other organisation unless you’ve given your specific consent for us to do so, or we are legally obliged to do so.
We will sometimes use approved third party data processors to process information on our behalf, such as Mailchimp for our email list, and Stripe for donations. Data processors with which we share your information are only authorised to use that information to fulfil their contractual obligations to us. They are not permitted to use it for any other purpose.
Lawful basis for processing personal data
All the data that we use is held in accordance with the requirements laid out in current data protection legislation.
We may rely on the following lawful purposes when we collect and use personal data:
- Contract – We may process personal data in order to perform our contractual obligations.
- Consent – We may rely on your freely given consent at the time you provided your personal data to us.
- Legitimate interests – We may rely on legitimate interests based on our evaluation that the processing is fair, reasonable and balanced. These include research and publication to deliver relevant, timely insights and speciality knowledge in pursuit of our mission and to support those who interact with us.
If you have any questions about your personal information, or how we manage our data, contact email@example.com
We have put appropriate technical and organisational security policies and procedures in place to protect personal data from loss, misuse, alteration or destruction. We aim to ensure that access to your personal data is limited only to those who need to access it. Those individuals who have access to the data are required to maintain its confidentiality.
This website and our donation page use industry-standard software protection for secure financial transactions. Your personal information, such as your credit card number, is securely encrypted so that it cannot be read as the information travels over the internet. We do not store any card information on our servers.
We will hold your personal information only for as long as is or no longer than is necessary for the purposes for which it is processed (for example, participating in an activity or making a donation). If you ask for your personal information to be deleted we will manage your request in a transparent way.
Under data protection law, you have various rights including:
- Access: You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
- Rectification: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
- Erasure: You have the right to ask us to erase your personal information in certain circumstances.
- Restriction: You have the right to ask us to restrict the processing of your information in certain circumstances.
- Objection to processing: You have the right to object to processing if we are able to process your information because the process is in our legitimate interests.
- Portability: You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You can make a request via an email to firstname.lastname@example.org
We will take steps to confirm your identity before processing your request. We will respond to your request within one calendar month of the request, unless there are exceptional circumstances.
Your rights and acceptance of this policy
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at email@example.com
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Adopted Friday October 6th, 2023