Introduction

Community Foundation for Leeds is a registered charity that has been awarding grants since 2005; our vision is to create opportunity for all communities of Leeds and Bradford. We form partnerships between community groups that are making a difference and the people who wish to invest in a better future for our cities.

 

We take our duty to process your personal data very seriously. This policy explains how we collect, manage,use and protect any information we collect about you to ensure you remain informed and in control of your information.

 

In this policy, references to Leeds Community Foundation, the Foundation, LCF, orto ‘we’ and ‘us’ are to Community Foundation for Leeds, which is a registered charity in England and Wales (1096892) and Company Limited by Guarantee (04443312).

 

GFS Community Enterprise (GFS) is a wholly owned subsidiary of Community Foundation for Leeds and is a registered charity in England and Wales (1169462) and Company Limited by Guarantee (10042412).

This policy applies equally to GFS;where differences occur, this will be clearly specified. GFS is not a grant making charity, so references to grant making do not apply to this charity.

 

Bradford District Community Foundation (BDCF) is a wholly owned subsidiary of Community Foundation for Leeds and is a registered charity in England and Wales (1131588) and Company Limited by Guarantee (06852262).This policy applies equally to BDCF; where differences occur, this will be clearly specified.

 

LCF is corporate trustee of The BG Campbell Trust Fund(BGC),which is a registered charity in England and Wales (255369). This policy applies equally to BGC; where differences occur, this will be clearly specified.

 

References to LCF throughout the policy include reference to the othercharities, unless otherwise stated.

 

We may change this document from time to time to reflect the latest regulations on what we should lawfully do with your information. Please check back frequently to ensure that you are happy with any changes.

What information we collect

LCF is what’s known as the ‘controller’ of the personal data you provide to us. We will usually collect basic personal data about you, like your name, postal address, telephone number and email address if you are supporting us; if you have applied for a grant with us, we collect the data provided on the grant application.

 

We may also collect details of your interests and preferences (such as campaigns, the ways you support us or types of causes you care about). Your activities and involvement with LCF will result in personal data being created. This could include details of how you’ve helped us by volunteering or being involved with our campaigns or events.

 

We may collect information about certain supporters (e.g. particularly well known or influential people) from public sources. This could include public data bases (such as Companies House or LinkedIn), news or other media.

 

We may conduct research and analysis on the information we hold, which can in turn generate personal data.For example, by analysing your interests and involvement with our work,we may be able to build a profile which helps us decide which of our communications are likely to interest you. Our section on Research and Profiling contains more detail about how we may use information for profiling and targeted marketing.

 

We do not normally collect or store sensitive data (such as information relating to health, beliefs or political affiliation)about supporters or grant recipients. However there are some situations where this will occur including, but not exclusively, if:

• Anaccident or incident occurs on our property, at one of our events or involving one of our staff (including volunteers).
• If you are attending one of our events and have disclosed specific access or dietary needs.
• For individuals who apply for grants where data around health is directly relevant to the awarding of the grant (e.g. BGC), we will also collect and store this sensitive data.

If this does occur, we will be very clear with you that we wished to collect such information, our reason for collecting such information, and that we would only do so with your specific consent and permission. We’ll also take extra care to ensure your privacy rights are protected.

How we collect your information

We collect information about you when you enquire about using any of our services, as part of us providing you with our services, or when you register an interest in supporting us.

We collect your personal information in a number of ways:

• When you provide it to us directly. Your activities and involvement with LCF will result in personal data being created. This could include details of how you’ve helped us by being involved with our campaigns and activities, or grants applications you have submitted.
• When we collect it as you use our websites;please see our Cookiepolicy for details.
• When you provide permission too the organisations to share it with us (including Facebook or Twitter).
• When you have given it to a third party, for example, if we are partnering with another organisation (e.g.you provide your information to another charity we’re collaborating with).
• From publically available sources to keep your information up to date (e.g.from Companies House, LinkedIn, news or other media).

How we use your information

We will only use your information for the purpose or purposes for which it was collected (or for closely related purposes). These purposes include:

• Where the information is needed to fulfil your request or to enable us to provide you with a more personalised service. Sometimes,with your consent, we will process your personal data to provide you with information that you have requested about our work or our activities, or that you are expecting.
• We use personal data for administrative purposes (i.e. to carry out our charity work). This can include receiving donations, processing and distributing grant applications, maintaining a database of supporters and friends and helping us respect your choices and preferences (e.g.if you ask not to receive marketing material, we’ll keep a record of this).

• Wherewe need to do this to fulfil a contract, or where we are required to do this by law or other regulations.
• When it is in our legitimate interests to do this and when these interests do not override your rights. These legitimate interests include providing you with information on our campaigns, Membership, services, fundraising, newsletter requests,feedback, events, room hire and other activities. Please see section on 'Legitimate Interest' for more information.
• We carry out research and analysis on our supporters and potential donors to determine the success of campaigns and appeals, better understand behaviour and responses, and identify patterns and trends. This helps inform our approach towards campaigning and makes LCF a stronger and more effective organisation. Understanding our supporters, their interests and what they care about also helps us provide you with a better experience (e.g.through more relevant communications).
• We evaluate, categorise and profile personal data in order to tailor materials, services and communications, and prevent unwanted material from filling up your inbox.
• We use personal data to communicate with people, to promote LCF and to help with fundraising. This includes keeping you up to date with our news, updates, campaigns and fundraising information. This includes all our marketing communications (the term marketing is broadly defined and, for instance, covers information about LCF and its work in Leeds and Bradford).

Marketing

You can decide not to receive communications or to change how we contact you at anytime. If you wish to do so, please contact us using the details in the How to Contact Us section below.

• When you receive a communication, we may collect information about how you respond to or interact with that communication, and this may affect your communication preferences.
• We run events for our supporters or for those whom we believe would be interested in the work of LCF.We collect information about how you respond to or interact with our invitations, and this may affect your event processes. (BGC does not run events).
• As a charity, we rely on donations and support from others to continue our work. From time to time, we will contact members and supporters with fundraising material and communications. As with other marketing communications, we’ll only contact you specifically about fundraising if you’ve opted into receiving marketing from us (and you can, of course, unsubscribe at anytime). (BGC does not fundraise).

Sharing your information

We only disclose information to third parties or individuals when obliged to do so by law, for purposes of national security, taxation and criminal investigations, and the following:

• If you have agreed that we maydo so.
• When we use other companies to provide services on our behalf e.g.sending mail and emails, when using auditors/advisors, or processing credit/debit card payments.
• If we receive a complaint about any content you have posted or transmitted to or from one of our sites,to enforce or apply our website Terms & Conditions (see below for links) or if we believe that we need to do so to protect and defend the rights, property or personal safety of LCF, ourwebsites or our visitors and for other lawful purposes.
• For LCF:TermsandConditions|LeedsCommunityFoundation(leedscf.org.uk)
• For BDCF:TermsandConditions|GiveBradford
• If we merge with another organisation to form a new entity, information may be transferred to the new entity.
• If we run an event in partnership with other named organisations,your details may need to be shared. We will be very clear what will happen to your data when you register.

 

And we will never sell or rent your personal information to other organisations.

Research and Profiling

We evaluate personal data in order to tailor materials, services and communications and prevent unwanted material from filling up your inbox. Understanding our supporters, the irinterests and what they care about also helps us provide you with a better experience.

 

Research can help us target our resources more effectively through gaining an insight into the background of our potential supporters and help build relationships that are appropriate to their interests and capacity to give. This increase inefficiency helps us ensure we are maximizing the good we can do in our cities.

 

To do this,  we may use additional external sources of data to increase and enhance the information we hold about you. This may include obtaining details of changes of address, telephone numbers and other contact details, and information related to your wealth. It may also include information from public registers and other publically available sources.

How we store and retain your information securely

Retention

We hold your information only as long as necessary for each purpose for which we use it.We regularly review what information we hold and delete what is no longer required. For successful grant applications, we will retain your data for up to 7 years, in line with financial and reporting obligations, for example, HMRC requirements.

 

If you decide not to support LCF any longer, or request that we have no further contact with you, we will keep some basic information in order to avoid sending you unwanted materials in the future and to ensure that we don’t accidentally duplicate information.

 

Data Security

We employ a variety of physical and technical measures to keep your data safe and to prevent unauthorised access to, or use or disclosure of, your personal information.

 

Electronic data and databases are stored on secure computer and cloud systemsandwe controlwho has access to information (using both physical and electronic means). Our staff receive data protection training and we have a set of detailed data protection procedures which staff are required to follow when handling personal data.

 

Our electronic data is stored within secure cloud servers in the United Kingdom and the United States. We publish information on 360Giving about grants awarded, under a Creative Commons Attribution- ShareAlike 4.0 International License (no personal data is included in the published data); this data is stored within secure cloud servers in the United States and United Kingdom.Paper copies of any personal data are stored in secure locked cabinets.

 

Payment security

LCF specific -if youwish tomake donations to LCF, we would never request your bank details directly. BACS payments can be made directly to our business bank account (details of which are available upon request), or via our secure online donation pages (provided by JustGiving).

 

GFS specific- if you use a credit card to pay for room hire or event tickets or donate in person or over the phone, we will input your credit card details securely into our card terminal, operated by our payment provider (Worldpay). GFS complies with the payment card industry data security standard (PCI-DSS) publishedby the PCI Security Standards Council, and will never store card details.

 

Of course, we cannot guarantee the security of your home computer or the internet, and any online communications (e.g. information provided by email or our website) are at the user’s own risk.

 

CCTV

Some of our premises have CCTV and you may be recorded when you visit them. CCTV is there to help provide security and to protect both you and LCF. CCTV will only be viewed when necessary (e.g. to detect or prevent crime) and footage is only stored temporarily. Unless it is flagged for review, CCTVwill be recorded over.

 

LCF complies with the Information Commissioner’s Office CCTV Code of Practice, and we put up notices so you know when CCTV is in use.

Keeping you in control

We want to ensure you remain in control of your personal data. The UK General Data Protection Regulation (UK GDPR): the retained EU law version of the General Data Protection Regulation ((EU) 2016/679)) and the Data Protection Act 2018 give everyone a number of very important rights. These include:

• The right to ask us to remove your personal data from our records (though this will not applywhere it is necessary for us to continue to use the data for a lawful reason).
• The right to have inaccurate data rectified.
• The right to request a copy of the information we hold about you.
• The right to ask us to stop using your information for marketing or profiling.
• Where technically feasible, the right to obtain and reuse your personal data for your own purposes.

Remember, you can change the way you hear from us or withdraw your permission for us to processyour personal data at any time by using the contact details in the How to Contact Us section of this policy.

Cookies and website

We use traffic log cookies to identify which pages of our website are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs.We only use this information for statistical analysis purposes and then the data is removed from our system. Find out more about our Cookie Policy here.

Legitimate interest

Under the UK GDPR, we have a number of lawful reasons that we can use (or'process') your personal information. One of these lawful reasons is called 'legitimate interest'.

 

Broadly speaking,‘legitimate interest’ means that we can process your personal information if we have a genuine and legitimate reason to do so and we are not harming any of your rights and interests.

 

So, what does this mean? When you provide your personal details to us, we use your information for our legitimate business interests to carry out our charity work in Leeds and Bradford. Before doing this, we will also carefully consider and balance any potential impact on you and your rights.

 

Some typical examples of when we might use this approach are for preventing fraud; directmarketing; maintaining the security of our systems; data analytics; enhancing, modifying or improving our services;  identifying usage trends; and determining the effectiveness of our campaigns and fundraising.

 

LCF will use various methods to support our charitable objectives; we believe that people who share our values would love to know how to support us. We will process the personal information you have supplied to us to conduct and manage our business to enable us to give you the most appropriate marketing, information, service and products and provide the best and most secure experience. These are what we consider to be our 'legitimate interests' for holding and processing your data.

 

When we process your personal information for our ‘legitimate interests’, we will consider and balance any potential impact on you and your rights under data protection and any other relevant law. Our legitimate business interests do not automatically over ride your interests– we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent, or are otherwise required or permitted to by law).

 

Remember, you can change the way you hear from us or withdraw your permission for us to process your personal details at any time by contacting us. For our contact details, please see How to Contact Us section of this policy.

Changes to the policy

We’ll amend this Privacy Policy from time to time to ensure it remains up-to -date and accurately reflects how and why we use your personal data. The currentversion of our PrivacyPolicy will always beposted on our website.

How to contact us

If you have any questions about the policy or how we use your data, please get in touch using the details below.

• For LCF: emailing info@leedscf.org.uk, writing to Leeds Community Foundation, First Floor, 51a St Paul’s Street, Leeds, LS1 2TE, or telephoning 0113 242 2426
• For GFS:emailing reception@theoldfirestationgipton.org.uk, writing to The Old Fire Station, Gipton Approach, Gipton, Leeds, LS9 6NL, or telephoning 0113 213 6813
• For BDCF: emailing info@givebradford.org.uk,writing to Bradford District Community Foundation, First Floor, 51a St Paul’s Street, Leeds, LS1 2TE, or telephoning 01274 037300.
• For BGC: emailing info@leedscf.org.uk, writing to Leeds Community Foundation, First Floor, 51aSt Paul’s Street, Leeds, LS1 2TE, or telephoning 0113 242 2426

Making a complaint or giving positive feedback

If you are dissatisfied with our organisation or our work and would like to raise a concern or make a complaint, please view our complaintspolicy. Alternatively, if you would like to give us some positive feedback on any aspect of our work, please email us using the contact details above.

This policy and procedure document was accepted by the trustees at its meeting on 2 February2023. It will be reviewed every three years.

 

HMThomson     

H M Thomson(Feb21, 202315:26 GMT+1)

Signed.......................................... Chair of the Board of Trustees

 

Feb 21,2023

Date........................................... Review Date:February2026