






This Privacy Notice explains how Redditch Nightstop collects and uses your personal information and who we share it with.
Redditch Nightstop will respect and protect your privacy by handling any information that we collect from you or have about you from other sources in line with The Data Protection Act 2018 (DPA) and General Data Protection Regulation 2018 (GDPR).
This notice applies to visitors to our website and social media platforms, subscribers, donors, fundraisers, supporters, event attendees, volunteers, job applicants, and people who receive advice, support or housing services from us. If you are an employee or consultant who works for us there is a separate policy and privacy statement which applies to you regarding how we process your data.
We regularly review this Privacy Notice, please check our website for the most up to date version.
If you are providing information to non-Redditch Nightstop Services, you will need to contact the specific Nightstop service to ask for a copy of their Privacy Notice.
For further information about our privacy practices please contact our Data Protection Lead who is Charlotte Shepard by writing to:
Redditch Nightstop,
Unit 4 & 5, Britten House
The Old Needle Works
Britten Street
Redditch
B97 6HD
or phoning 01526 66036
or emailing: charlotte@shepardconsulting.co.uk
Redditch Nightstop helps people who are homeless, vulnerable and disadvantaged. We are a Data Controller registered with the Information Commissioner’s Office (ICO) under registration number Z8606917.
Redditch Nightstop Registered Charity Number: 1138158, Company Number: 07302871 (Registered in England and Wales).
We collect your personal information when you interact with Redditch Nightstop. This could be when you tell us information on the phone, go onto our website, correspond with us by email or letter, complete a form or tell us information in person.
We also collect information from third parties where it is relevant to our relationship with you and where there is a legal basis for doing so.
The type of information we collect and how we use it depends upon why you are providing it and your relationship with us. We aim to be clear with you when we collect your information and will only use it fairly, lawfully and in a way that you would reasonably expect us to.
We may also process sensitive personal information, known as special category data. This includes information about your race, ethnic origin, politics, religion, trade union membership, gender, health, sexual orientation and we may also process information about your criminal convictions/ background. We will process this data where it is necessary to comply with legal requirements or we have a legal basis to do so.
When you apply to access a Redditch Nightstop accommodation and/or support service we will process your personal information and special category data.
We will use this information to safely deliver our services to you and in order to meet your assessed needs.
Your information is held in a client file and on our client database, and/or on paper-based records which are held in a locked cabinet with restricted access.
We will also use your data for statistical reports for monitoring purposes to see how our services are performing and how we can improve them, and to report to funders. Statistics will not include any information that could be used to identify any individual.
We process this information because it is necessary in the performance of a contract, to fulfil our legal and regulatory obligations, and because it is in our legitimate interests to do so.
We use Google Analytics (GA) to track site user interaction. We have GA code installed on our site which creates one or more text files on your computer (called a “cookie”). The cookies contain an ID number which is used to uniquely identify your browser and track each site you visit that has GA enabled.
We use this data to determine the number of people using our site and to better understand how they find and use our web pages. With this information we can continually improve the information that we provide on our site and the processes for actions such as contacting us and donating. We can also use it to increase the number of new people finding our site.
Google also collects information about you from its DoubleClick tracking and profiling service, from ad-supported apps on your Android or iOS device, from your YouTube and Gmail activity and from your Google account. This data is put together and used to make inferences about your age, gender, interests, hobbies, shopping habits and living circumstances.
If you already have GA cookies, they will be updated with the latest information about your visit to the site.
As we cannot access any personal data about you ourselves, we are not the Data Controller for your Google Analytics or DoubleClick profile data. You would need to contact Google directly for this information.
You have the right to object to this tracking and to stop it happening.
If you would like more detail about the methods used however, please get in touch at dataprotection@depaulcharity.org.uk
How do I prevent being tracked by Google Analytics?
If you are uncomfortable with this tracking, you can take the following actions:
We use social media to inform, educate and engage new potential supporters. We may target ads using social media at audiences that look like they have an interest in Redditch Nightstop’s work.
If you have given us consent to use your image or become a case study to help promote our work, we may post this on our Social Media outlets.
We want to remind you that information shared on social media, on our pages or in private messages may be used or sold by the provider, such as Facebook, Twitter or YouTube, for commercial purposes.
If you subscribe to our mailing list, you will be automatically be subscribed to receive email updates. You will only receive information that you have opted in to receive.
Depending on your preferences, we will contact you for the following reasons:
You can change your email marketing preferences at any time, by contacting: info@redditchnightstop.co.uk
We collect and process information about you if you choose to support us. This could be when you make a donation, volunteer for us, register to fundraise for us, sign up for an event or sign up to receive a publication.
We do not store special personal information that you share with us unless there is a clear and valid reason for doing so and you have given your consent.
We may also use your personal information to detect and reduce fraud and credit risk, or for due diligence purposes.
We need to keep the details of financial transactions for 7 years after the financial year of a donor’s last gift, in the event of a tax or banking enquiry. We will only contact you to thank you. If you say that you would like to hear from us, you will be added to our email subscriber list and will receive regular updates and fundraising asks. You can change your preferences on these updates at any time.
When you apply for a job, volunteering opportunity or work for us we collect personal and special information about you and we may collect information about your criminal convictions. We do this to:
Your information is stored on our computer system and in a staff file held by the Charity Manager.
If you are unsuccessful in your job application, we will hold your personal information for 6 months after we’ve finished recruiting the post you applied for. After this date we will destroy or delete your information. We keep de-personalised statistical information about applicants to develop our recruitment processes, but this does not contain any information that could be used to identify individual job applicants.
The law requires us to tell you the basis on which we process your data. We will process your personal data on the following basis:
We may ask for your consent to process your information, such as to send you direct marketing. You can withdraw your consent at any time.
Where we have a contract or an agreement with you to provide goods or a service. You will not be able to opt out of providing this information because without it we would be unable to do the thing you have asked us to do.
We may process your personal information to comply with legal requirements, such as for fraud prevention purposes when claiming Gift Aid.
The law allows us to process your data if it is in our legitimate interests to do so, but only so long as it does not disproportionately affect your privacy rights, cause you any harm or is overly intrusive.
The law also says we must let you know what we consider our legitimate interests to be. Our legitimate interests are:
If we need to process your special personal data then we will usually obtain your consent. [In exceptional circumstances we may process this data without your consent if be believe that your life is at risk and you are not able to consent to data processing, eg to process your medical records.]
If you think that anything we do with your data affects you adversely, you can ask us to stop processing your data.
You can contact us to find out more about this.
We ensure that there are appropriate technical controls in place to protect your personal details. Online forms are always encrypted, our servers are secure and our network is protected and routinely monitored.
Where we hold paper records they are retained securely in a locked cabinet with restricted access.
Redditch Nightstop staff, volunteers and contractors are appropriately trained and will have access to your information in order to provide the services you have requested.
We do not trade personal data for commercial purposes and will only disclose it if required by law, or if there is a legal basis to do so.
We share some information with our data processors, which are organisations that carry out a service on our behalf, such as to process donations.
We carry out comprehensive checks on companies before we work with them. We have contracts and information sharing protocols in place that are clear about our requirements, especially regarding how they look after the personal data they collect or have access to.
The Redditch Nightstop website contains links to and from other websites.
This Privacy Notice only applies to Redditch Nightstop and does not cover any other websites that we link to.
As an individual whose personal data is processed by Redditch Nightstop you have the following rights:
Right to be Informed: You have the right to be informed about how we are using your data. If you think we are doing something with your information that we have not told you about in this Privacy Notice, you can object to this.
The Right of Access: You can request access to a copy of the personal data that we hold about you.
The Right to Rectification: If you think that the personal data we hold about you is inaccurate or incomplete, you have a right to request that it be rectified.
The Right to Erasure: You can ask us to delete your personal data where it is no longer necessary for us to use it, where you have withdrawn consent (if we process based on consent), or where we have no lawful basis for keeping it.
The Right to Restrict Processing: You can ask us to restrict the personal data we use about you where you have asked for it to be erased or where you have objected to our use of it.
Right to Data Portability: You can ask us to provide you, or a third party (if possible), with some of the personal data we hold about you in a structured, commonly used, electronic form, so that it can be easily transferred.
Right to Object: You can object to the processing of your personal data. You should note that this right does not apply in all circumstances, for example, where we are processing information because it is necessary in the performance of contract we will not be able to stop processing this information.
To exercise your rights please contact us – see the contact details in the Complaints Section below.
You can choose to stop email, telephone calls, addressed post and/or text messages directed to you personally from a selected charity or charities. For more information please visit https://www.fundraisingregulator.org.uk/the-fundraising-preference-service/
If you are not satisfied with the way that we have dealt with your personal data, please let us know by contacting our data protection lead Charlotte Shepard by writing to:
Redditch Nightstop,
Unit 4 & 5, Britten House
The Old Needle Works
Britten Street
Redditch
B97 6HD
or phoning 01526 66036
or emailing: charlotte@shepardconsulting.co.uk and we will try and resolve your concerns. If you are not satisfied with the outcome, you can make a formal complaint through our Complaints Policy which is available at [ ].
If you are still not happy with our response, you have the right to complain directly to the Information Commissioners’ Office https://ico.org.uk Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113.