Idle Women
Privacy Policy
January 2022
Next review January 2023
Privacy Policy
This is the privacy notice for Idle Women CIC; registered office Unit D5/D6 Mount Street, Accrington BB5 0PJ United Kingdom; CIC number: 09796415
Idle Women is committed to protecting your personal information and being transparent about what information we hold about you.
Using personal data allows us to provide people with information about the work that we do and as a charitable company to engage with potential donors and supporters.
The purpose of this policy is to give you a clear explanation of how we collect and use your information.
We use your information in accordance with all applicable laws concerning the protection of personal information. We regularly review our privacy policy and will place any updates on this web page. The policy was last updated June 2019.
Please contact us if you have any questions about our privacy policy or information we hold about you by email to info@idlewomen.org
Personal DataPersonal data is any information that relates to a living person who can be identified from that data (or from that data plus other data that is held).
We have a commitment to protecting the privacy of personal data submitted to Idle Women and follow the guidance of the General Data Protection Regulation 2018.
Personal data that we hold will be:
Third PartiesThere are certain circumstances under which we may disclose your personal information to third parties. These are as follows:
Your Rights to Your Personal InformationYou have the right to request a copy of the personal information that we hold about you and to have any inaccuracies in this data corrected. Please use the contact details given at the top of this policy if you would like to exercise this right.
List of WebsitesIdle Women administrate a number of websites including:
There are links out to websites not controlled by Idle Women given on our websites. These links should not be taken as endorsements of these third party websites. We are not responsible nor do we have control of the content of these sites and we do not have input to their privacy policies.
Website CookiesCookies are text files placed on your computer to collect standard internet log information and visitor behaviour information.
This information is used to track visitor use of the website so as to improve our site and content, and also so that we can compile statistical reports on website activity to report to our funders, in particular our main funder: Arts Council England. These cookies can not identify you personally, but they use your computer’s IP address to locate where geographically you are accessing this site from.
The collection method used at current is Google Analytics.
We also embed content from third-party websites included but not limited to YouTube, Vimeo, and Soundcloud. When you access a page with this embedded content, these third party websites may place cookies on your computer and Idle Women do not control how they do this. To find out more about each of their privacy policies, please visit their websites.
You can set your browser not to accept cookies and you can remove cookies from your browser. However, in a few cases some of our website features may not function as a result.
If you would like to disable cookies, here is more information on how to do so for the most popular browsers: There is also a Google Analytics Opt-out Browser Add-on which can be installed on all of these browsers to opt out of Google Analytics cookies across all websites.
Mailing List Subscribers’ DataThe data we collect from our mailing list subscribers are:
For subscribers who consent to receive fundraising messages the information is used to provide them with information about donating to Idle Women
For subscribers who consent to receive surveys the information is used to send them surveys about projects and to enter them into a prize draw if they complete a survey. The surveys ask for ethnicity, sex and disability details but this is not required. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and subscribers are not required to provide it.
The information is also used in aggregate data analysis such as tracking the effectiveness of communications through email opening rates.
The lawful basis for processing these data is Article 6 (1)(f) – legitimate business interests and/or Article 6(1)(a) – consent. We only collect and process your personal data for purposes that are in our legitimate organisational interests (to keep you informed about our work) if there is no overriding prejudice to you by using your personal information in this way. For any situations where it is not appropriate we will ask for your explicit consent.
The data and consent are stored and recorded via MailChimp. The data is securely stored with access controls in place to prevent unauthorised access to the data. It will not be shared.
Subscribers may submit a Subject Access Request to access their personal data and are entitled to have it rectified if it is incorrect or incomplete. They may request the deletion of their personal data at any time or to block further processing. They may object to their personal data being used for direct marketing and every communication provides a link to unsubscribe online. Minimal personal data will then be held in a “suppression list” and will no longer be processed but will be used to ensure subscribers’ preferences are followed.
Once a year, mailing list subscribers who have not opened the last 50 campaigns will be unsubscribed. Those who have not opened the last 20 in a row will be asked to opt in to continue to receive correspondence, failing this, they too will be unsubscribed.
Job Candidates’ DataThe data we collect from job candidates are:
The lawful basis for processing items 1 and 2 is Article 6(1)(b) – contract. The lawful basis for processing item 3 is Article 6(1)(a) – consent. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and job candidates are not required to provide it.
The data is currently collected via google forms. It is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted one month after the closing date for applications. It will not be shared.
Contractors’ DataThe data we collect from contractors are:
The lawful basis for processing items 1 – 3 is Article 6(1)(b) – contract. The lawful basis for processing item 4 is Article 6(1)(a) – consent. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and contractors are not required to provide it.
The data is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted one year after the contract has ended. It will not be shared.
Contractors may submit a Subject Access Request to access their personal data and are entitled to have it rectified if it is incorrect or incomplete.
Potential Contractors’ DataThe data we collect from potential contractors are:
The lawful basis for processing these data is Article 6(1)(b) – contract.
The data is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted one year from the date of receipt. It will not be shared.
Directors’ / Trustees’ DataThe data we collect from directors / trustees are:
The lawful basis for processing data items 1 and 3 are Article 6(1)(c) – legal obligation and data item 1 will be shared with. Data items 2 and 3 will not be shared.
The lawful basis for processing data item 2 is Article 6(1)(a) – consent. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and directors/trustees are not required to provide it.
The data is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted one year after the resignation of the director/trustee.
Directors / trustees may submit a Subject Access Request to access their personal data and are entitled to have it rectified if it is incorrect or incomplete. Where the legal basis for processing is consent, directors/trustees have the right to withdraw this at any time.
Project Participants’ DataThe data we collect from project participants are:
The lawful basis for processing item 1 is Article 6(1)(b) – contract.
The lawful basis for processing item 2 is Article 6(1)(a) – consent. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and project participants are not required to provide it. This data will not be shared.
The data is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted three months after the completion of the project.
Next review January 2023
Privacy Policy
This is the privacy notice for Idle Women CIC; registered office Unit D5/D6 Mount Street, Accrington BB5 0PJ United Kingdom; CIC number: 09796415
Idle Women is committed to protecting your personal information and being transparent about what information we hold about you.
Using personal data allows us to provide people with information about the work that we do and as a charitable company to engage with potential donors and supporters.
The purpose of this policy is to give you a clear explanation of how we collect and use your information.
We use your information in accordance with all applicable laws concerning the protection of personal information. We regularly review our privacy policy and will place any updates on this web page. The policy was last updated June 2019.
Please contact us if you have any questions about our privacy policy or information we hold about you by email to info@idlewomen.org
Personal DataPersonal data is any information that relates to a living person who can be identified from that data (or from that data plus other data that is held).
We have a commitment to protecting the privacy of personal data submitted to Idle Women and follow the guidance of the General Data Protection Regulation 2018.
Personal data that we hold will be:
- Processed lawfully, fairly and transparently
- Collected for limited and specific purposes
- The minimum required for those purposes
- Accurate
- Stored for a limited time
- Kept updated and secure
Third PartiesThere are certain circumstances under which we may disclose your personal information to third parties. These are as follows:
- To our own service providers who process data on our behalf and on our instructions (for example our ticketing system software provider). In these cases we require that these third parties comply strictly with our instructions and with data protection laws, for example around security of personal data.
- Where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example for Gift Aid purposes).
Your Rights to Your Personal InformationYou have the right to request a copy of the personal information that we hold about you and to have any inaccuracies in this data corrected. Please use the contact details given at the top of this policy if you would like to exercise this right.
List of WebsitesIdle Women administrate a number of websites including:
- idlewomen.org
- physicgarden.network
- womenonthewater.space
There are links out to websites not controlled by Idle Women given on our websites. These links should not be taken as endorsements of these third party websites. We are not responsible nor do we have control of the content of these sites and we do not have input to their privacy policies.
Website CookiesCookies are text files placed on your computer to collect standard internet log information and visitor behaviour information.
This information is used to track visitor use of the website so as to improve our site and content, and also so that we can compile statistical reports on website activity to report to our funders, in particular our main funder: Arts Council England. These cookies can not identify you personally, but they use your computer’s IP address to locate where geographically you are accessing this site from.
The collection method used at current is Google Analytics.
We also embed content from third-party websites included but not limited to YouTube, Vimeo, and Soundcloud. When you access a page with this embedded content, these third party websites may place cookies on your computer and Idle Women do not control how they do this. To find out more about each of their privacy policies, please visit their websites.
You can set your browser not to accept cookies and you can remove cookies from your browser. However, in a few cases some of our website features may not function as a result.
If you would like to disable cookies, here is more information on how to do so for the most popular browsers: There is also a Google Analytics Opt-out Browser Add-on which can be installed on all of these browsers to opt out of Google Analytics cookies across all websites.
Mailing List Subscribers’ DataThe data we collect from our mailing list subscribers are:
- Full name
- Email address
- Post code
- Country of residence
For subscribers who consent to receive fundraising messages the information is used to provide them with information about donating to Idle Women
For subscribers who consent to receive surveys the information is used to send them surveys about projects and to enter them into a prize draw if they complete a survey. The surveys ask for ethnicity, sex and disability details but this is not required. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and subscribers are not required to provide it.
The information is also used in aggregate data analysis such as tracking the effectiveness of communications through email opening rates.
The lawful basis for processing these data is Article 6 (1)(f) – legitimate business interests and/or Article 6(1)(a) – consent. We only collect and process your personal data for purposes that are in our legitimate organisational interests (to keep you informed about our work) if there is no overriding prejudice to you by using your personal information in this way. For any situations where it is not appropriate we will ask for your explicit consent.
The data and consent are stored and recorded via MailChimp. The data is securely stored with access controls in place to prevent unauthorised access to the data. It will not be shared.
Subscribers may submit a Subject Access Request to access their personal data and are entitled to have it rectified if it is incorrect or incomplete. They may request the deletion of their personal data at any time or to block further processing. They may object to their personal data being used for direct marketing and every communication provides a link to unsubscribe online. Minimal personal data will then be held in a “suppression list” and will no longer be processed but will be used to ensure subscribers’ preferences are followed.
Once a year, mailing list subscribers who have not opened the last 50 campaigns will be unsubscribed. Those who have not opened the last 20 in a row will be asked to opt in to continue to receive correspondence, failing this, they too will be unsubscribed.
Job Candidates’ DataThe data we collect from job candidates are:
- Personal and contact details
- Qualifications and employment history
- Ethnicity, gender, and disability details
The lawful basis for processing items 1 and 2 is Article 6(1)(b) – contract. The lawful basis for processing item 3 is Article 6(1)(a) – consent. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and job candidates are not required to provide it.
The data is currently collected via google forms. It is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted one month after the closing date for applications. It will not be shared.
Contractors’ DataThe data we collect from contractors are:
- Personal and contact details
- Qualifications and employment history
- Bank details
- Ethnicity, gender, sexual orientation, age and disability details
The lawful basis for processing items 1 – 3 is Article 6(1)(b) – contract. The lawful basis for processing item 4 is Article 6(1)(a) – consent. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and contractors are not required to provide it.
The data is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted one year after the contract has ended. It will not be shared.
Contractors may submit a Subject Access Request to access their personal data and are entitled to have it rectified if it is incorrect or incomplete.
Potential Contractors’ DataThe data we collect from potential contractors are:
- Personal and contact details
- Qualifications and employment history
The lawful basis for processing these data is Article 6(1)(b) – contract.
The data is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted one year from the date of receipt. It will not be shared.
Directors’ / Trustees’ DataThe data we collect from directors / trustees are:
- Personal and contact details
- Ethnicity, gender, sexual orientation, age and disability details
- Declaration of interests
The lawful basis for processing data items 1 and 3 are Article 6(1)(c) – legal obligation and data item 1 will be shared with. Data items 2 and 3 will not be shared.
The lawful basis for processing data item 2 is Article 6(1)(a) – consent. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and directors/trustees are not required to provide it.
The data is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted one year after the resignation of the director/trustee.
Directors / trustees may submit a Subject Access Request to access their personal data and are entitled to have it rectified if it is incorrect or incomplete. Where the legal basis for processing is consent, directors/trustees have the right to withdraw this at any time.
Project Participants’ DataThe data we collect from project participants are:
- Personal and contact details (including Emergency contact details)
- Ethnicity, gender, sexual orientation, age and disability details
The lawful basis for processing item 1 is Article 6(1)(b) – contract.
The lawful basis for processing item 2 is Article 6(1)(a) – consent. The lawful basis for processing this special category data is Article 9(2)(a) – consent. The data will only be processed in anonymised form and project participants are not required to provide it. This data will not be shared.
The data is securely stored with access controls in place to prevent unauthorised access to the data. It will be securely deleted three months after the completion of the project.