Privacy Policy (DRAFT)

Who we are

We are SERV OBN only collects and processes information where we need to for the running of the charity, or are required to by law. We will not keep any data that we have collected longer than necessary or process that data in any way other than outlined in this document.
We process personal information to enable us to provide a voluntary service for the benefit of the public within Oxford, Buckingham, Berkshire and Northampton, in association with other SERV/Bloodrunner charities

Our website address is: http://serv-obn.org.uk.

Type/classes of information processed

Website visitor information through the use of Cookies.
Membership information including Login Details and personal information.

We do not process any sensitive classes of information, such as:

Who the information is processed about

We process personal information about:

Who the information may be shared with

We sometimes need to share the personal information we process with the individual themself and also with other organisations. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA) and General Data Protection Regulation.

Where necessary or required we share information with:

Information is only shared for the purposes of fulfilling our charitable purposes or where required by law. Any other information sharing is only undertaken with the consent of the individual.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Any Cookies used on the site are for your convenience. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We use Google Analytics to analyse the use of our website. Our analytics service provider generates statistical and other information about website use by means of cookies.

The analytics cookies used by our website have the following names:
_ga, _gat, __utma, __utmt, __utmb, __utmc, __utmz and __utmv.

The information generated relating to our website is used to create reports about the use of our website. Our analytics service provider’s privacy policy is available at: http://www.google.com/policies/privacy/.

How long we retain your data

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

How we protect your data

Your data is encrytped at rest within the sites database and through SSL certificates during transit over the Internt.

What data breach procedures we have in place

The site is protected against unautorised change using security applications that actively block attempts to make unauthorsied changes to files on the system. Blocks may also be applied to IP Addresses and Domains.

We may also report abuse to the relevant domain owners if we belive the entity is constantly attempting to gain unauthorised access to the site.