The Lighthouse – Privacy and Cookie Policy
Effective date: 24 October 2023
Introduction
Your privacy at The Lighthouse. We want to let you, our users and supporters, know about our work and that of our partners. However, we only want to do this in ways you’re comfortable with.
As such, we promise to only contact you in a way that works for you and make it easy for you to tell us how you would like to receive information. This ensures you will feel comfortable with how we gather and use your data. We also follow all applicable fundraising and data protection legislation and guidelines.
Please take a minute to read this document that, together with our Cookie Policy (the ‘Privacy Policy’), explains how we use your personal information and your choices. By proceeding to use this site, you consent that we process your personal information per this Privacy Policy.
About The Lighthouse Community Mental Health Hub
Your data (which is any data that identifies you or which can be identified as relating to you personally) is referred to as ‘personal data in this Lighthouse privacy policy and will be collected and used by the following parties (known as ‘data controllers):
The Lighthouse Community Mental Health Hub (‘the Lighthouse’) with Charity No. 1183893, Stricklandgate House, 92 Stricklandgate, Kendal, Cumbria, LA9 4PU.
How Do We Use Your Information
As a valued user or supporter of the Lighthouse, we collect personal information about you, store your record in our user and supporter records and database and use it for administration, communication and marketing purposes in the following ways:
When You Give Us Information
When you engage with us as a user or supporter, we may ask for personal information when you register for a service, activity, event or campaign, make a donation to us, subscribe to a newsletter, engage with our social media or communication services, or provide us with personal information in any other way. This information may include:
- Your name, postal address, email address and telephone number.
- Financial data (such as bank account details and whether your donations are gift-aided).
- A record of the financial donations that you have made and data about your tax status for Gift Aid purposes.
- Details of your indicated interests, opinions, preferences and how you support or have supported us – e.g., any campaigns, events or fundraising schemes you have participated in. When you receive a communication, we may collect data about how you respond to or interact with that communication, which may affect how we communicate with you in the future.
When you provide your personal information to the Lighthouse, please ensure that it is accurate and current. This will allow us to contact you effectively and courteously to deal with your questions and donations or provide you with data about our work. Please contact us if you would like to change the personal details we hold about you by contacting our team at info@thelighthousecmhh.org.
Using Our Website
When you use our website, we collect data about the services and features you use and how you use them, including how you interact with its content and any advertisements.
When you provide your details when filling out a registration, making a donation, communicating with us or signing up for or receiving service on our website, we will collect this data and store it in your record to fulfil your request, answer your enquiries and keep a record of our correspondence with you.
Our website uses cookies. Cookies are files sent to the computer or device through which you access this website, and they collect small amounts of data. Our website uses them to store information on computers or devices and your preferences so that our site doesn’t have to keep asking you for them. We use cookies on the Lighthouse website as follows:
- This allows us to collect statistical and performance data about how the website is used. We may collect data about your geographic location and the mobile device used. You may also confirm what browser and operating system you are using. This data doesn’t contain any identifiable information about people. We use this data to improve the functionality of our website and ensure you have a good experience when browsing it.
- The Lighthouse may use X (formerly known as Twitter) and LinkedIn. X and LinkedIn pixel cookies are used to collect data about which sections of the website are accessed by people who are registered users of these social media services. These service providers collect this data, which then allows the Lighthouse to reach new audiences. Potentially, the Lighthouse only has access to aggregated data from these companies, not identifiable personal information. For further details about this, see our Cookie Policy.
Questions About Your Personal Information
Any questions you have in relation to this policy or how we use your personal information should be sent to our data protection team or addressed to info@thelighthousecmhh.org.
Children
The Lighthouse will not knowingly contact anyone under the age of 18 to ask them for donations or other forms of financial contribution.
We would like to give young people the opportunity to be involved in campaigning for change in areas that affect their lives. To achieve this, we may sometimes send emails and other communications about campaigns that relate specifically to children and young people aged 13–17 years.
The consent of those children and young people will be requested using appropriate privacy notices to receive this type of campaign information. To help us confirm your age, when you agree to receive this information, your date of birth may be requested – this must be provided in order to allow you to be involved. We also reserve the right to ask for verification of age if we think it necessary.
The Lighthouse will not knowingly send communications about campaigns to children aged 12 years or under.
Legal Basis
The Lighthouse relies on the following legal conditions that are described in the EU General Data Protection Regulation to use your personal information in the ways described in this privacy policy:
Consent
When you consent or opt-in to receive information and marketing by email or mobile phone text message, we use this consent to offer you marketing using email and mobile phone text, as well as targeted advertising, including through social media sites, such as X and LinkedIn.
Legal Obligations
Where we are under a legal obligation to process your personal data for a particular purpose. For example, obligations we have to hold information about donations or manage Gift Aid information in compliance with applicable tax laws. We may also sometimes need to process personal information for the purpose of being able to establish or exercise our legal rights or to defend legal claims.
Legitimate Interest
Where we have a legitimate interest – this is the legal basis that we rely on to send information and marketing by post or telephone when you support the Lighthouse’s mission by making a donation or requesting information about our work, marketing, campaigns, events or other services.
We will also have a legitimate interest in being able to use and process personal information for internal administrative purposes and when it is necessary to take measures to protect our IT network and data security or to protect ourselves (and our beneficiaries and supporters) from risks to our charity such as fraud, criminal conduct or reputational damage.
When processing your personal information, we will ensure that we exercise it proportionately and balance it against your privacy rights and other rights as an individual.
Contract
Where we agree to provide any products or services to you, we will use your personal information in order to arrange for the provision of those products or services as well as for performing obligations to you or enforcing our rights under any contract we have with you.
At the Lighthouse, if we are processing any personal information that is regarded as ‘special category’ or ‘sensitive’ as referred to in this privacy policy, we will only do this with your explicit consent or, where needed, to protect your vital interests (or those of someone else) in an emergency; or, where you have already publicised such information (such as your political affiliations); or, where we have a need to use such data in connection with a legal claim relevant to us.
Anonymised Data
The Lighthouse may aggregate and anonymise personal information to no longer link it to any particular person. We can use this anonymised data for various purposes (such as recruiting new supporters) or identifying trends or patterns within our existing supporter base. This data helps inform our actions and improve our campaigns, products, services and materials.
You Are In Control
You can change your personal information and preferences about how we contact you whenever you choose.
How To Change Or Stop Us Contacting You By Post, Telephone, Email or Text Message
You can change your contact preferences anytime by contacting us at info@thelighthousecmhh.org.
How To Unsubscribe From Our Email Newsletters
If you have previously opted-in to receive email communications from the Lighthouse but no longer wish to receive email communications, please click the unsubscribe link at the bottom of any of our emails to be removed from our list.
How The Lighthouse Protects Your Privacy Data
The Lighthouse considers keeping your privacy information safe to be vitally important. We employ various physical, organisational and technical measures to ensure we do this and prevent unauthorised access to – or use or disclosure of – your personal information.
Secure computer systems store electronic data and databases containing participant and supporter personal data. The Lighthouse manages who has access to that data (using both physical and electronic means). Our staff receive data protection training, and we have a set of detailed data protection procedures and policies which staff must follow when handling personal information.
Lockable and access-restricted storage helps us manage all hard-copy records and data.
Storage
The Lighthouse is based in the United Kingdom (UK). Wherever possible, we store our data in the UK or within the European Union (EU). Some organisations and companies that provide services to us transfer personal data to territories outside of the EU, such as Canada, a country whose legal system the EU Commission considers to have adequate data protection standards, or to the United States, which does not have such EU approval in relation to its data protection standards. However, in that case, we will only allow such a transfer when there is recognised assurance, such as the service provider being a member of the EU-US Privacy Shield Framework (e.g. Facebook, X, LinkedIn) or we have put other legally appropriate safeguards or contracts in place to ensure that your data is adequately protected in accordance with EU privacy standards.
How Long We Store Data
We will only use and store personal information for as long as the purposes for which we collect it require.
We will use and store personal information only for as long as it is required for the purposes for which it was collected.
As part of the Lighthouse Privacy Policy, we have adopted a data retention protocol (available on request) that sets out the different periods we retain personal information for in respect of these relevant purposes in accordance with our duties under applicable data protection law. The criteria we use for determining these retention periods are based on various legislative requirements, the purpose for which we hold data, and guidance issued by relevant regulatory authorities, including but not limited to the Information Commissioner’s Office (ICO). We securely dispose of or anonymise personal information that we no longer need, so it can no longer identify you. We may retain some personal information in archives for historical research purposes, although we will do this in a manner that complies with applicable data protection law.
The Lighthouse will continually review what personal information and records we hold and delete what is no longer required. We never store payment card data.
Your Rights to Privacy at The Lighthouse
You can make your own choices about how we use your personal information. You need to ensure you understand your data protection rights, set out as follows:
The General Data Protection Regulation
The General Data Protection Regulation (GDPR) gives EU & UK citizens the following rights: please familiarise yourself with them.
Your Rights
- Right to be informed. You have the right to know how we use your personal information. This privacy policy attempts to make that process very transparent.
- Right of Access. You can request copies of your personal data from the Lighthouse. We may charge you a small fee for this service. This is to cover the required administration time to deliver on your request.
- Right to Rectification. You have the right to request that the Lighthouse correct any information you believe is inaccurate or incomplete.
- Right to Erasure. You can request that the Lighthouse erase your personal data under certain conditions.
- Right to Restrict Processing. You have the right to request that the Lighthouse restrict the processing of your personal data under certain conditions.
- The right to object to processing – You have the right to object to us processing your data under certain conditions.
- Right to Data Portability. You can request the Lighthouse transfer data to another organisation or directly to you under certain conditions.
- Right to Object. You have the right to object to your data processing, including profiling when it is on relevant grounds. We do not perform direct marketing, but if we did, if you unsubscribe from marketing emails, the Lighthouse is not allowed to send you any more emails unless we get your consent.
- Rights related to Automated Decision-Making, including Profiling. At the Lighthouse, we do not use any automated decision-making tools and avoid profiling any of our data subjects. However, it is important for you to know that, as one of your data rights under the GDPR, you can avoid automated decision-making and request the removal of any profiling.
How to exercise your rights
To exercise any of these rights, please contact us at info@thelighthousecmhh.org.
You can find information specific to the services we use or our activities in the relevant sections of this document. We will respond to all requests within 28 days of receiving them. If necessary, we may ask for information to verify your identity (or to clarify the information that you are seeking).
You can, if dissatisfied with any response from us, contact the UK Information Commissioner’s Office (ICO) as follows:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline number: 0303 123 1113.
Contact Us
If you no longer want to receive marketing information from us, follow the ‘unsubscribe’ link in the email. Even if you unsubscribe, we may send you information about any account or business relationship we may still have. For example, a request you have made about our services or activities.
To exercise any of your statutory rights or if you have any comments or complaints, please contact us at info@thelighthousecmhh.org.
Changes To The Lighthouse Privacy Policy
We keep the Lighthouse Privacy Policy under regular review. The Lighthouse will publish any policy revisions on this webpage.
Cookies
Like most websites, we use cookies.
You are provided with a good online experience via a small cookie file placed on your computer. It’s the standard way of distinguishing you from other users of the site and enables us to make improvements.
How We Use Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when browsing and also allows us to improve our site. By continuing to browse the site, you agree to our use of cookies.
We store a cookie on your browser or computer hard drive, subject to your agreement. Your computer’s hard drive receives information from our cookies, which it then processes.
You can update the cookie setting on our site.
We use the following cookies:
Strictly Necessary Cookies
Our website requires these to operate. They include, for example, cookies that enable you to, where available, log into secure areas of our website.
Analytical/Performance Cookies
These allow us to recognise and count the number of site visitors. They also record how visitors move around our website when using it. This helps improve how our website works by ensuring that users find what they are looking for.
Functionality Cookies
Our website uses these to recognise you when you revisit us. They enable personalised content, allowing us to greet you and remember your preferences (e.g. your choice of language or region).
Targeting Cookies
These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and any advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
These are standard uses of cookies, and we don’t feel that they record any more information than they need to. If you wish, you can restrict or block browser cookies set on your device. Your browser settings Help function should tell you how. Alternatively, you may wish to visit AboutCookies.org. This site contains comprehensive information on how to adjust settings on a wide variety of desktop browsers.
For general questions about how we use cookies or the Lighthouse Privacy Policy generally, please contact our team at info@thelighthousecmhh.org.
