How we collect and use personal data.
The Institute for Voluntary Action Research (IVAR) is a small, independent charity. We work with other charities, foundations and public agencies to strengthen communities across the UK. We do this through action research – working with specific groups in communities and sharing findings more widely. As a team, we believe in the value of people and organisations working for social change – we see the difference they make every day.
Our website address is www.ivar.org.uk
When you interact with us in person, through correspondence, by phone, by social media, by signing up to an event, or through our website. We may collect personal data if it is considered to be of legitimate interest, and if this interest is not overridden by your privacy interests. Before data is collected, we make an assessment to ensure that there is an established mutual interest between you and IVAR.
We collect and use personal data for:
We also collect data about suppliers, partners and people seeking a job or working at IVAR.
We collect your data when you:
We may use your information for the following purposes:
If you would like more information please do get in touch with our Data Protection Lead: email@example.com
We collect your name, phone number, title and email address, in addition, your postal address, organisation name and contact information (if relevant). We may also collect feedback, comments and questions received from you in service-related communication and activities, such as meetings, phone calls, documents, and emails. From our website we may collect IP-address and actions taken on the site.
If you add posts or comments, etc. on our website, the information can be read by anyone with access to the site and used for purposes over which we or you have no control. Therefore, IVAR is not responsible for any information you submit to the website.
If you consent to take part in a research project with IVAR, then you will be notified what type of personal data will be collected before giving your consent. You will also be notified about how we will use this personal data and how long we will keep it.
We may ask for your consent to take photos or video of you for use in our communications.
If you apply for a job at IVAR, we collect the data you provide during the application process.
IVAR does not collect or process any special categories of personal data, such as public unique identifiers or sensitive personal data.
We will not store your personal data for any longer than necessary to fulfil the purpose for which the personal data was collected; while also considering our need to answer your queries or resolve possible problems, to comply with legal obligations, to attend to any legal claims/complaints, and for safeguarding purposes.
This means that we may retain your personal data for a reasonable period of time after your last interaction with us. When the personal data that we have collected is no longer required, we will delete it in a secure manner. We may process data for statistical purposes, but in such cases, data will be anonymised.
You have the following rights with respect to your personal data:
Any query about your personal data and privacy rights should be sent to firstname.lastname@example.org
This information is used to make websites work more efficiently, as well as to provide business and marketing information to the owners of the site, and to gather such personal data as browser type and operating system, referring page, path through site, domain of Internet Service Provider (ISP), etc., for the purposes of understanding how visitors use a website. Cookies and similar technologies help us tailor our website to your personal needs, as well as to detect and prevent security threats and abuse. If used alone, cookies and web beacons do not personally identify you.
For further information visit http://www.aboutcookies.org or http://www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.
Our website may contain links to other websites of interest. However, you should note that we do not have any control over these other websites. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
We do not sell, rent or trade your information with any third parties.
Unless we have your permission, we do not share your information with any third parties except from what is described below:
Connecting Health Communities
Your data may be shared with our trusted partners – these programmes are run by us in partnership with local steering groups, and funded by The National Lottery Fund. We will tell you when we collect your data whether it may be shared and with whom. We will provide only the information required to perform specific services.
If you have signed up to an event through Eventbrite, your details will be shared with the named organisers of that event. Your information will only be used for the organisation of that event and to notify you of follow up events, unless you consent to join our health partnerships mailing list. If you consent to join this mailing list, your details will be shared with Mailchimp (see below).
Facebook, Twitter, LinkedIn
Facebook, Twitter and LinkedIn are social networks. Integration of social network components allows them to track which page on our site you are accessing, but only if you are logged in to those accounts. If you do not wish this, please log out of your social network accounts before browsing the web.
When someone visits our website, we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
Google Analytics is further explained here: https://www.google.com/analytics/
When someone visits our website we use a third party service, HotJar, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as how far down the webpage users scroll. This information is only processed in a way which does not identify anyone. We do not make, and do not allow HotJar to make, any attempt to find out the identities of those visiting our website.
Further information about HotJar can be accessed here: https://www.hotjar.com/legal/policies/privacy
We use a third-party provider, MailChimp, to deliver our e-newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice: https://mailchimp.com/legal/privacy/
You can unsubscribe to general newsletter mailings at any time by clicking the unsubscribe link at the bottom of any of our emails or by emailing our Data Protection Lead email@example.com
It’s sub-processor is Google Cloud Platform, and you can review the full list of sub-processors on the Beacon sub-processor page.
SystemsIT is our IT systems provider. Your data is stored in Microsoft’s Office 365 public cloud with security controls and policies in place to protect this data. All data is stored within the United Kingdom. If you require further information, please contact firstname.lastname@example.org
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.
Your right to complain with a supervisory authority
If you are unhappy with the way in which your personal data has been processed, you may, in the first instance, contact IVAR’s Data Protection Lead email@example.com
If you remain dissatisfied, then you have the right to apply directly to your national supervisory authority for a decision. The supervisory authority for the United Kingdom is the Information Commissioner’s Office, which can be contacted at: https://ico.org.uk/concerns/
As a responsible organisation, we do not use automatic decision-making or profiling.
With thanks to Damien Rosser/Eden Project Communities for the photo used on this page.