We promise to respect all personal information. That includes any personal information you share with us, or that is shared with us by other organisations. We will keep your data safe and secure and not use it for any purpose you would not reasonably expect us to.
Personal information means any information that may be used to identify you, such as your name, title, telephone number, email address, or mailing address, etc.
Given the work that we do, we may also ask you about sensitive information (special category data) such as details about mental health issues, diagnoses, etc.
You may also choose to share photos, videos or stories with us, which also count as personal information.
As with all of our activities, the aim of us collecting and retaining data is to be able to provide a service of the the greatest benefit to the Heads Above The Waves community. We only retain data where there is a legitimate interest and lawful basis to do so. The lawful basis on which we process your data is that of a contract – e.g. to provide a service to you, at your request.
Listed below are examples of the ways in which we may use your personal data. The list is not exhaustive but is aimed to give you an overview of the types of ways we may use your data.
We will always check with you that you are happy with us retaining and using any data about you before we do so.
You have the option to say no to us retaining your information or for us to remove the information that you have shared with us, though please bear in mind that if you choose not to agree to this, it may affect our ability to carry out the tasks above for your benefit, or the work of Heads Above The Waves.
You have the right to be informed about the collection and use of your personal information. Before we collect personal information from you, we will always give you the opportunity to confirm you are happy for us to do so, and provide you with privacy information.
There are two main ways in which we collect personal information about you: directly or indirectly (including the use of third parties).
You may give us your information in order to:
Your information may be shared with us by other organisations, when you have consented for them to do so. You should check the privacy information for these organisations when providing consent to understand how they may use your data. These organisations may include third party organisations such as:
We will also ensure that organisations are complying with the relevant legislation when sharing your information with us. We may also use publicly available information. For example, we are subject to many legal and regulatory obligations and standards.
We may ethically screen supporters to minimise the risk of associating ourselves with an individual or organisation that conflicts with our values.
We are committed to storing your data securely, and ensuring that it is accessible only by those working on behalf of the Heads Above The Waves, who have agreed to work with data responsibly and securely according to our policies. We ensure that all locations in which your data are stored are secure and compliant with the relevant legislation.
We only store information as long as it is required for the purpose it was originally obtained for. Therefore, the length of time we store your information for depends upon what the information is and what purpose it is retained for. We regularly review the information that we hold and will ensure that any data no longer required is securely deleted or disposed of.
We ensure that the appropriate safe guards are in place to ensure that the information you share with us is kept safe, and only accessed by those who have permission to do so. We check that all places where we store data are compliant with the latest legislation (GDPR), and in keeping with our high standards. For example, all digital information is password protected through trusted services that are compliant with the latest legislation, and any physical information is securely locked away, and only accessed by those working on behalf of Heads Above The Waves who have agreed to work with data responsibly and securely according to our policies.
We never have, and never will share data with other organisations for marketing purposes. There are only very specific situations in which we may share your information. We may share your information, with your consent, to other professionals we work with as part of our service to you.
For instance, with your permission, we may contact a parent, teacher or a professional working with you, as part of our workshops. This will always be with your explicit agreement. The exceptions to this are if there is a safeguarding concern or we are bound by law and in these circumstances we will still seek to gain your consent first, but if you choose not to consent we must follow our safeguarding policy or legal obligations. A copy of our safeguarding policy can be provided on request.
Sometimes if you are sharing a photo or story with us, we will ask whether you are happy for us to share this publicly via ‘all media’. We use all media sources available to us as a charitable organisation to inform, raise understanding of mental health issues and to generally raise the profile of the work of the Heads Above The Waves.
We will always make this clear to you where we are asking whether you are happy for us to share information in this way.
We use Google Analytics to gain usage information about our website, so that we can better understand the need for our services and improve the site. We also collect domain information (e.g. IP address) as part of our analysis of the use of the website. This data enables us to become more familiar with how people visit our site, how often they visit and what parts of the site they visit most often. This information is collected automatically and requires no action on your part. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
You should also check the settings on your browser, devices and/or operating systems to check what information you are giving permission to share when you browse the internet.
Where we are providing an information and advice service to children and young people, or they otherwise wish to be involved in our charitable activities, we will only process their personal information if we have written parental consent and if we need the data in order to provide a service to them. In relation to fundraising, we will always take the appropriate precautions if young people are interested in supporting us, and seek guidance from best practice organisations (such as the Institute of Fundraising).
In addition to this, schools, youth groups, colleges etc, may share information with us in order to provide support to a student. If it’s still relevant, prior to the child turning 16, we will contact them to find out if they would like us to retain this information and stay in touch with them. If they do not opt-in, then we will delete this information accordingly.
You have the right to be in control of your information. Outlined below are your legal rights and information on how you can act upon them. If you would like to speak to us about any of these issues, you can contact us on firstname.lastname@example.org
You have the right to request a copy of the personal data we hold on you. We will fulfil any requests within one month.
The accuracy of your personal information is important to us, if the information we hold is inaccurate or incomplete, please let us know and we will update it as soon as possible.
You do have the right to request the deletion or removal of your personal information where there is no compelling reason for its continued processing. We will review each request on a case by case basis.
We will endeavour to comply with your request without delay and in any event, within one month of receiving your request.
You can always speak to us about issues relating to data protection. This includes if you wish to ask a question, make a complaint or raise a concern about how we process your personal information. You can contact us on email@example.com
If you are not happy with how we have handled your complaint, or you believe that your data protection or privacy rights have been infringed, or for other reasons would rather not contact us, you have the right to complain to the Information Commissioner’s Officer (ICO), which oversees the protection of personal data in the UK.
You can change your contact preferences by contacting us. You can also change your preferences through links in the bottom of emails we send to you.
We reserve the right to update this policy and will review it regularly. You should check this policy which will always be available on our website or by request. If there are any major changes to our policy, if appropriate we will add a notice on our website or contact you.
If you post or send any content that we believe to be in breach of any laws or otherwise inappropriate, such as defamatory content, we may use your personal information to inform relevant third parties such as the police.
We are Heads Above The Waves – a non-profit Community Interest Company, based in Cardiff. We exist to raise awareness of self-harm and mental health issues in young people, and promote positive, creative alternative coping techniques.
Our registered office is Unit 3, Douglas Buildings, Royal Stuart Lane, Cardiff, CF10 5EL.
We are registered as a CIC in England and Wales with company number 9534155