Duncan Place will not record any personal data about you simply by browsing this website except your IP address.
Your IP address is the individual identification number assigned to your computer when it is connected to the Internet. Our servers require it to enable you to browse the website. Our hosting service - BlueHost, also stores it in logs for up to a month to investigate any errors.
We also use some third-party sites: Google Analytics, Meta (Facebook), Monster Insights, and Jetpack which also use cookies to track how the website is used but personal data is not recorded and your internet (IP) address is anonymised.
You can find out more about the cookies that we use, how third party sites use cookies, and how to access their privacy policies in our cookie policy.
In accordance with the General Data Protection Regulation (GDPR), we have implemented this privacy policy and privacy notices to inform you of the types of data we process about you, the reasons for processing your data, the lawful basis that permits us to process it, how long we keep your data for and your rights regarding your data
For ease we have developed the following privacy notices:
Our Details
- Duncan Place is a Scottish Charitable Incorporated Organisation (SCIO)
- Our Scottish Charity Registration Number is SC048100.
- Registered Office: Duncan Place Community Hub, 4 Duncan Place, Leith, Edinburgh, EH6 8HW.
- Telephone: 0131 364 4350
- Email: info@duncanplace.org
- Duncan Place is registered as a Data processor with the Information Commissioners Office (ICO) Registration reference: ZB780531
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
- Your right to rectification- You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
- Your right to erasure- You have the right to ask us to delete your personal information. You can read more about this right here.
- Your right to restriction of processing- You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
- Your right to object to processing- You have the right to object to the processing of your personal data. You can read more about this right here.
- Your right to data portability- You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
- Your right to withdraw consent– When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this privacy policy.
Our lawful bases for the collection and use of your data
| This is an overview – please see relevant notice for full details | |||
| Purpose | Data | Legal Basis | Time Scales |
| CCTV | Images | Legitimate interests – it is necessary for us to read and store your message so that we can respond in the way that you would expect | Thirty days |
| Donations | Name, Contact Details, Payment Information, Details of item donated | Legitimate interests – it is necessary for us to read and store your message so that we can respond in the way that you would expect | Seven years |
| Enquiries & Surveys | Name, contact details, dates, times, activities, attendees | Legitimate interests – it is necessary for us to read and store your message so that we can respond in the way that you would expect | Two years |
| Events | Name, job title, organisation, contact details, access/dietary requirements, age and emergency contact details, images, voice | Consent | Two years |
| Media | Name, contact information, photographs, film, words, and quotes. | Consent | 5 years although photograph, film, words and quotes may be selected for inclusion in our historical archive and be retained indefinitely |
| Membership | Name, address, phone, email | Consent | Six months if unsuccessful / annual renewal / six years from cessation. |
| Recruitment | Personal details, next of kin, disability, medical, right to work, equality monitoring information, recruitment information supplied, references, education & employment, driving licence, bank details, NI and tax details, PVG and convictions | Legitimate interests – it is necessary for us to read and store your message so that we can respond in the way that you would expect. Legal obligation We are required under the PVG Act 2007 to check that individuals are suitable for some types of regulated work. Consent will be sought prior to processing any data relating to Disclosure records, unless we have legal obligations to make a referral. | six to nine months if unsuccessful /seven years from cessation of employment. |
We may modify the Privacy Policy or notices from time to time and will publish the most current version on our website. If a modification meaningfully reduces your rights, we’ll notify people whose personal data we hold and is affected.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
