Last updated: October 2019
At Power to Change we respect the privacy of visitors to our website (www.powertochange.org.uk).
This policy is concerned with how we collect information, what we do with it and what controls you have over your personal information. We take our duty to protect your personal information very seriously. This policy explains how we collect, manage, use and protect your personal information and what controls you have over your information.
Power to Change uses information collected through our grant applications, surveys, events, or partner referrals. This information is collected for the promotion of Power to Change’s charitable purpose through our projects and programmes.
- Information We Collect
Power to Change collects your information to process applications for our programmes and projects; to enhance and develop our programmes and projects; and to widen wherever possible participation in those programmes and projects from communities across England. We aim to provide you with the best experience when working with us and our partners.
Some of this data will be provided by you. For example, when you complete an application form for a grant or project, you fill in a website contact form, or you hand a business card to us at events.
Some of this data will be collected about you, for example, via cookies, from third-party public sources or when you open one of our emails. We may also, from time to time, ask for your participation in one of our surveys and/or research interviews, by way of web-based survey management tools. These surveys are always optional, consent will be sought before asking for your participation, and at no time is any of your personally identifiable information asked for, processed or stored.
Information you provide to us:
- Information provided as part of a grant or project application, either directly or via one of our carefully selected partners (including, but not limited to; name, address, email address, direct dial phone number, mobile phone number company/organisation name, job title, areas of interest, financial data pertaining to the organisation you are applying on behalf of, and other information deemed necessary in order to process the application.
- Information that you provide to us when contacting us through our websites (including name, address, email address, direct dial phone number, mobile phone number company/organisation name and job title)
- information that you provide to us for the purpose of requesting information, including programme and marketing communications, subscribing to our email notifications or newsletters (including name, address, email address, direct dial phone number, mobile phone number company/organisation name and job title)
- information contained in or relating to any communication that you send to us or send through our websites (including the communication content)
- any other personal information that you choose to send to us.
Information that we may collect about you:
- information about you that we collect from other public sources such as your Twitter handle or LinkedIn profile. For example, Company Name, Company Address, Sector, Job Title and Company Size
- information provided to us by our email service provider which includes when you open one of our emails and the links you clicked on.
- Use of Your Data
We may use your data for the purposes specified in this policy or the relevant pages of the websites to provide you with the information that you have requested of us. We may also use your personal information to comply with our legal obligations.
We may use your personal information to:
(a) administer our websites, and business;
(b) personalise our websites for you;
(c) enable your use of the services available on our websites;
(d) send you email notifications, newsletters and sales and marketing communications that you have specifically requested;
(e) deliver a better or more tailored application experience;
(f) deal with enquiries and complaints made by or about you relating to our websites;
(g) keep our websites secure and prevent fraud;
(h) verify compliance with the terms and conditions governing the use of our websites.
(i) to optimise our marketing campaigns.
- Your Rights
You have a number of rights about how the personal information you provide can be used.
- Transparency over how we use your personal information (right to be informed).
- The ability to request a copy of the information we hold about you, which will be provided to you within one month (right of access).
- Update or amend the information we hold about you if it is wrong (right of rectification).
- Ask us to stop using your information (right to restrict processing).
- Ask us to remove your personal information from our records (right to be ‘forgotten’).
- Object to the processing of your information for marketing purposes (right to object).
- Obtain and reuse your personal information for your own purposes (right to data portability).
- Not be subject to a decision when it is based on automated processing (automated decision making and profiling).
If you would like to know more about your rights under data protection law, you can find out more at the Information Commissioner’s Office website.
- Our Legitimate Interests
Power to Change is a charity funded by an endowment made by the Big Lottery Fund (now The National Lottery Community Fund) in 2015. Power to Change uses most of its endowment to directly support community businesses. We distribute our funding through open and targeted programmes, to help new community businesses start up and existing ones to be more resilient. Power to Change also runs a community business Research Institute. The Research Institute seeks to support the charity’s charitable purposes and vision of ‘better places created through community businesses by commissioning high-quality research, promoting rigorous analysis and stimulating critical scrutiny and debate. In doing so we aim to shape both policy and practice. To enable Power to Change to distribute and manage grants, we need to market our programmes and projects to new potential applicants (prospects), make existing applicants aware of new programmes and projects, and report both to the funders and the public as to the success of the charity and its successful applicants.
Power to Change may also identify potential applicants who are in job roles that are likely to require its programmes and projects and communicate this to them, either by phone, email or post. This communication will be in accordance with PECR (Privacy and Electronic Communications Regulation 2003). If you choose not to receive these communications, we will update your permissions accordingly.
Subject to this, we will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing.
- Disclosing Personal Information
We may disclose your personal information to our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy. Where we use any such sub-processors, we undertake prior due diligence to confirm that they meet recognised adequacy standards for data protection including confidentiality; this includes any that are located outside of the EEA.
Where relevant, and as stated previously, we may disclose your personal information to our selected partners who work with us insofar as reasonably necessary for the purposes set out in this policy. Your personal information will only be shared with the relevant partners with regards to your application and/or grant, information will not be passed to these partners where there is no good cause.
The list of Power to Change Trust’s grant management partners are available upon request by emailing email@example.com
We may disclose your personal information:
(a) to the extent that we are required to do so by law;
(b) in connection with any ongoing or prospective legal proceedings;
(c) to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);
(d) to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
Except as provided in this policy, we will not provide your personal information to third parties.
- Data Retention
This Section sets out our approach to data retention, which is designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal information.
Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that specific purpose or those purposes.
Notwithstanding the other provisions of this Section, we will retain documents (including electronic documents) containing personal data:
(a) to the extent that we are required to do so by law;
(b) if we believe that the documents may be relevant to any ongoing or prospective legal proceedings; and
(c) in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).
- Security of Personal Information
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
We will store all the personal information you provide on our secure (password and firewall protected) servers.
You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
You are responsible for keeping the password you use for accessing our websites confidential; we will not ask you for your password (except when you log in to our websites).
- Changes to This Policy
- Third Party Websites
Our websites include hyperlinks to, and details of, third party websites.
We have no control over, and are not responsible for, the privacy policies and practices of third parties information.
- Data Protection Registration
Power to Change Trust Limited is registered as a data controller with the UK Information Commissioner’s Office. Our data protection registration number is ZA169594.
- Contact Us
If you wish to raise a complaint on how we have handled your personal information, you can contact our Lead Data Manager who will investigate the matter. If you are not satisfied with our response or believe we are not processing your personal information in accordance with the law, you can complain the Information Commissioner’s Office (ICO).
Our Lead Data Manager can be contacted in writing at:
Power to Change, Clarence Centre For Enterprise & Innovation, 6 St. Georges Circus, London, SE1 6FE. or you can email firstname.lastname@example.org with “Data Protection” as the email subject.
We are a registered Charity in England and Wales under registration number 1159982.
You can contact us by writing to the business address given above, by using our websites’ contact forms, by email to email@example.com or by telephone on 020 3857 7270.