Privacy

dovelight wellbeing is committed to protecting the privacy of clients who use dovelight wellbeing’s support services, non-client contacts, staff and volunteers. We have a legal duty under the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) to prevent unauthorized access to your personal data and to use it only for the purposes specified below.  We must also ensure that the information we hold about you is accurate, adequate, relevant and not excessive.  This statement explains how we look after your personal information and what we do with it.

dovelight wellbeing is a “data controller”. This means that we are responsible for deciding how we hold and use personal information, and what our legal basis is for doing so. Third party suppliers who store and process personal data for dovelight wellbeing are “data processors” and should only use data for purposes agreed with dovelight wellbeing as the data controller.

When you make contact with dovelight wellbeing

When you request information from dovelight wellbeing, using our direct phoneline or email.  Your personal information is stored on our secure systems which include:

·         Secure website servers

·         Trusted third party service providers.

You may also opt-in to receive information on other dovelight wellbeing activities or classes through our Client Contract form or by contacting us by phone or email. If you have subscribed to our newsletter we would send you information about updates, products or services. You can always choose to opt out at a later date by clicking on ‘Unsubscribe’ in our Newsletter or sending an unsubscribe request to info@dovelight.org.uk

How we collect and use your personal data

You directly provide dovelight wellbeing with most of the data we collect. We collect data and process them when you:

  • Send an online enquiry

  • Make an online booking for our services

  • Voluntarily provide us with your email address to subscribe to our marketing newsletter

dovelight wellbeing uses your personal details for the following purposes:

  • Client support (identity/contact details and health information) – to provide client support services and deliver positive outcomes for clients.

  • Client engagement (identity/contact details) – to provide clients with opportunities to shape support and services relevant to them.

  • Reporting and monitoring (postcode and date of birth) – to monitor and develop dovelight wellbeing client support services.

All personal information provided is confidential and will be used only for the purposes stated above. We will share personal information in specific circumstances (e.g. to protect vulnerable persons), or with your consent. We use some trusted third-party suppliers who provide us with services such as IT support. For your protection will ensure that they meet the requirements of UK, EU and any other relevant data protections laws.  We will never sell your details for marketing purposes or allow any of our suppliers to do so.

You do not have to provide us with any additional information unless you choose to. Where you choose not to provide all or some of this information, access to dovelight wellbeing services may be limited to public information available through our websites, printed information resources or through information events.

Normally the only information we hold comes directly from you. In some cases, your details may be passed to dovelight wellbeing as a referral by someone else, e.g. your GP. However, this can only be done with your consent.

How long do we keep your personal data?

Information is regularly checked to ensure it is accurate and up to date, and dovelight wellbeing only keeps your personal data for as long as is necessary to provide you with the support and/or information you have requested and for no more than one year following the end of that support.

How to update, remove or request access to the information we hold about you

You have the right to request that the information held about you is updated or removed from dovelight wellbeing’s systems. When you make a request for your information to be removed, your name, address and contact details will be removed from our system within one month. We will take all reasonable steps to remove you from all other systems where your information is stored by us.

You have the right to a copy of all the information we hold about you. In response to a valid request dovelight wellbeing will provide a copy of all personal data held at the time the application was made. Certain data may be withheld, including third party material, if any duty of confidentiality is owed to the third party. Requests will be handled within the legal time limit of one month.

You can submit a request about any of the above by contacting dovelight wellbeing via email info@dovelight.org.uk or by phone 0131 344 4191.