Policies

Privacy Policy

Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the Data Controller’s possession or likely to come into such possession. The processing of personal data is governed by the UK General Data Protection Regulation (the UK GDPR).

Who are we?
Cill Chuimein Legacy Project is the Data Controller and decides how your personal data is processed and for what purposes.

How does Cill Chuimein Legacy Project process your personal data?

By keeping personal data up to date
By storing and destroying data securely, not collecting or retaining excessive amounts of data
By protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data

Cill Chuimein Legacy Project uses your personal data for the following purposes:

To administer membership records
To fundraise and promote the interests of the charity
To maintain our own accounts and records
To operate the Cill Chuimein Legacy Project website and deliver our objectives
To inform individuals of updates on the progress of Cill Chuimein Legacy Project’s objectives

What is the legal basis for processing your personal data?

The following forms the legal basis for processing your personal data:

Processing is necessary for the legitimate interests of the Data Controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject
Processing is carried out by a not-for-profit body and relates only to trustees, members or former members (or those who have regular contact with it in connection with those purposes); and there is no disclosure to a third party without consent

Sharing your personal data

Your personal data will be treated as strictly confidential.

We will only share your data with third parties outside of Cill Chuimein Legacy Project with your consent.

How long do we keep your personal data?

We keep your personal data for no longer than reasonably necessary but in some cases for the lifetime of Cill Chuimein Legacy Project in order to maintain the membership list and run Cill Chuimein Legacy Project as per our articles.

Your rights and your personal data

Unless subject to an exemption (under the UK GDPR), you have the following rights with respect to your personal data:

The right to request a copy of your personal data which Cill Chuimein Legacy Project holds about you
The right to request that Cill Chuimein Legacy Project corrects any personal data if it is found to be inaccurate or out of date
The right to request your personal data is erased where it is no longer necessary for Cill Chuimein Legacy Project to retain such data
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing
For more information about your information privacy rights or to make a complaint, you can contact the Information Commissioner's Office.

Further processing

If we have to make changes to this policy which are inconsistent with the original purposes for which your data was collected then we will notify you in advance wherever possible and give you the opportunity to withdraw consent for your information to be held or processed.

If Cill Chuimein Legacy Project wants to use your personal data for a new purpose, not covered by our Data Protection Policy, you will be provided with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.

Where and whenever necessary, Cill Chuimein Legacy Project will seek your prior consent to the new processing.

Policy review

This policy will be reviewed annually or sooner if required due to changes in legislation or organisational practice.

Contact details

Jennifer Findlay, Data Protection Officer: jen.findlay@cclegacy.co.uk

Cookie Notice

What are cookies?

Cookies are small text files that are placed on your computer or device as you browse websites. They can be broadly split into essential and non-essential cookies.

Essential cookies are vital to the smooth-running of a website – without them, some important functionality would be lost. Everyday examples of this include saving items in your basket while online shopping, or temporarily remembering your answers as you fill out a multi-page form. Under the UK General Data Protection Regulation (the UK GDPR), website users do not have to consent to the use of essential cookies.

Non-essential cookies do not affect the way a website works, but they do provide information about usage and preferences. They are used by website owners to gain insight into how you navigate and engage with their site, or by advertisers to target you with more personalised ads. Under the UK GDPR, website users must consent to the use of non-essential cookies, usually via a pop-up banner on your first visit.

Cookies can also be differentiated by the length of time they remain on your computer or device. Session cookies are generally deleted as soon as you close your browser (or shortly after), while persistent cookies have longer durations, which vary depending on their purpose, the browser you are using, and your privacy settings.

First-party cookies are set and read only by the website you are visiting, while third-party cookies are set and read by external websites (via advertisements, embedded content, or analytics tracking).

How we use cookies

Cill Chuimein Legacy Project uses cookies to ensure this site works properly, in order to give you the best user experience. We do not collect personal information from the cookies on our website, and cookie consent is obtained via a pop-up banner. The cookies we set on your computer or device are outlined in the table below.

Cookie name	Purpose	Duration
sessionId	To create a unique identifier in order to recognise you across multiple pages of our site during one session	Session (30 minutes or when you quit your browser)
u-gdpr-cookie	To remember your cookie consent preferences after responding via the pop-up banner on your first visit to our website	Persistent (maximum duration of 400 days depending on browser/preferences)
userId	To create a unique identifier in order to recognise you across multiple visits to our site	Persistent (maximum duration of 400 days depending on browser/preferences)

Policy review

This policy will be reviewed annually or sooner if required due to changes in legislation or organisational practice.

Complaints Procedure

The trustees of Cill Chuimein Legacy Project act with integrity, professionalism and respect in the course of our charitable duties, and we expect our volunteers to do the same, as outlined in our Trustee Code of Conduct and Volunteer Code of Conduct. If you have a complaint or concern about individual conduct or the way the charity is being run, we want you to let us know so that we can rectify the issue as soon as possible.

What to do

First, speak to a trustee. If you do not wish to talk to someone face-to-face, you can email contact@cclegacy.co.uk and your concern will be directed to the most appropriate person to deal with it.If you complain via email, please include the following information:

Your name and contact details
Details of the issue
Whether you have previously reported it (and when and to whom, if so)

Complaints must be made within six months of an incident happening or you becoming aware of a problem, unless exceptional circumstances have prevented this (for example, bereavement or serious ill health), in which case we will consider extending this deadline. In the event that we decide not to extend the deadline in exceptional circumstances, we will provide you with a clear explanation of the basis for this decision.

What happens next?

We will handle all comments and complaints sensitively. Cill Chuimein Legacy Project will record your complaint and follow relevant data protection requirements. Depending on the nature of your complaint, it will either require a frontline response, an investigation, or both.

Frontline response

If your complaint is straightforward and requires little or no investigation, we aim to respond and resolve it within five working days with an apology, explanation or other immediate action. These complaints are often dealt with in person at the time of the complaint, and will not necessarily require a written response. The complaint will be closed once it has been satisfactorily resolved.

Investigation

If you aren’t happy with the outcome of the frontline response, it will move to the investigation stage. You must ask us to escalate it to the next stage within six months of the incident happening or you becoming aware of a problem (or within two months of receiving your frontline response, if this is later). Certain complex, serious or high-risk complaints will automatically move straight to the investigation stage.

We aim to let you know in writing within five working days if your complaint will require further investigation, and we aim to resolve such complaints within 20 working days, but we will inform you if we need more time to investigate fully, and explain why. A trustee or trustees not directly involved with the situation will lead a full and fair investigation. We will follow up with a written response outlining any remedial actions we have deemed necessary.

Independent external review

If you feel that your complaint has not been properly investigated and/or resolved, there are some serious issues that can be escalated to OSCR, the Scottish Charity Regulator. A list of these, plus next steps, can be found at oscr.org.uk/raise-a-concern. Unresolved fundraising concerns can be escalated to the Scottish Fundraising Adjudication Panel: goodfundraising.scot/submit-a-complaint.

Policy review

This policy will be reviewed annually or sooner if required due to changes in legislation or organisational practice.

Privacy Policy

Cookie Notice

Complaints Procedure

Cookies & Privacy