We collect personal information about you with your consent. 

And where we have a legitimate interest in the personal information.  This is principally to support RESTART Lives’ charitable purposes.  This includes delivering our programs to guests, communicating and working with our volunteers, mentors, employees, partners and the fundraisers engaged with our work and also with our donors and supporters.

We also collect personal information under contractual arrangements, principally from our employees, consultants and other paid workers and in accordance with legal obligations to which we are subject. 

Website information is collected through cookies where it is necessary for us to store a small amount of information to deliver the functionality you expect.

Where information is of a more sensitive nature, for example information about gender, ethnicity, health or personal history, and criminal records we will only collect it with your consent and in order to provide the best support for you and to keep people safe.  We will not share that information with anyone without your consent, except as set out in the section on “When we share your personal information”, below.  One exception is where we believe that someone is at risk of real and significant harm, and the sharing of appropriate information with relevant authorities will safeguard and protect them. 

We will only use your personal information in a manner that is appropriate, considering the basis on which the personal information was collected as outlined above.

More specifically, depending on how you interact with us, we may process personal information for the following reasons:

• to record drop in attendance and provide a friendly service to guests
• to help us identify guests who wish to become involved in our programs
• to help us determine and monitor the numbers of rough sleepers and those temporarily and permanently housed
• to record personal details shared during conversations with RESTART Lives’ employees, volunteers and mentors
• to process personal details required for the administration of RESTART Lives’ programs, including those run jointly with our partner organisations
• to process information as required by law in relation to our employees and paid workers
• to process job applications or volunteer placements
• to record and contact you regarding donations you make to RESTART Lives
• to process donations and administer Gift Aid for any donation you make to RESTART Lives
• to communicate with you regarding RESTART Lives’ work and events when you have consented to this
• for our own internal administrative purposes, and to keep a record of your relationship with us
• to manage your communication preferences
• to obtain information to improve RESTART Lives’ services and user experiences
• to deal with enquiries and complaints
• to comply with applicable laws and regulations, and to comply with requests from statutory agencies
• to verify compliance with the terms and conditions governing the use of our website (including monitoring private messages sent through our website private messaging service)
• private and anonymised information obtained through website cookies or social media sites may be used to monitor visitor traffic and to understand our visitors’ preferences in order to update and improve our website.

We do not share, sell or exchange personal information relating to our supporters to any other organisation for their marketing or other purposes

Guests’ private information will only be shared with others, for example mentors and our partner charities, with your specific consent for the purpose of increasing the benefit to you of our programs. 

The only occasions on which we will share your information without your consent are as follows:

• We are using third party providers as set out below for the purposes of processing data on our behalf and we have in place a data processing agreement with that third party that fulfils our legal obligations in relation to the use of third-party data processors
• If required in connection with a police investigation or if required by a court of law
• Where we believe that someone is at risk of real and significant harm, and the sharing of appropriate information with relevant authorities will safeguard and protect them.

We share personal information in relation to our employees and paid workers with your consent and in accordance with relevant employment and tax and benefit legislation

We do not share Volunteers’ private information without consent, except in very limited circumstances for example where there is a serious safeguarding issue relating to you where we have a duty to refer it to the Disclosure and Barring Service.

In relation to technology and social media:

• We use GibboNet to host our website, supported by Ionos who also host our emails.
• Jetpack supported by WordPress gives us limited anonymised information on the use of the website.
• We use JustGiving to receive donations online
• For social media, we use Facebook and Instagram

For details of each of these providers’ privacy policies, please visit their websites.

We store your personal information on In-Form, a client relationship management online database, which is password protected and only accessible to employees.  Where information is stored on individual employees’ hard drives, it is password protected. 

We store hardcopy material in lockable cabinets which are only accessible to employees.

We use appropriate technical, organisational measures and precautions to protect your personal information and to prevent the loss, misuse or alteration of your personal information. 

How long we keep your personal information

We keep information in relation to Guests for as long as they use our services.

For volunteers, donors and partners, we keep personal information for as long as they continue to support our programs or work with us as partners.  We send an email every 6 months to ensure that they continue to want to be involved and to receive information from us.

We keep donors’ personal information for so long as you continue to support us and for as long thereafter as is necessary to satisfy statutory requirements, for example in relation to Gift Aid declarations.   

You have many rights under data protection (GDPR) legislation. These include:

• Right to be informed

You have the right to be informed about how your personal information will be used. This Privacy Policy is intended to provide you with this information

• Right of Access

You can write to us asking what personal information we hold about you and ask for a copy of that information.  This can be done by writing to the contact details set out below.

Once we are sure you have the right to see the requested records, for example you may be asked for proof that you are who you say you are, we will have one calendar month to reply. 

• Right of rectification

You have the right to ask that we correct and update factually inaccurate information that we may hold about you.

• Right of erasure

In some cases, you have the right to be forgotten (i.e. to have your personal information deleted from our database). Where you have requested that we do not send you marketing materials, we will need to keep some limited information to ensure that you are not contacted in the future and to comply with, for example, HMRC requirements in relation to Gift Aid.

• Right to withdraw consent

Where we process your personal information based on your consent (for example, to send you marketing texts or emails), you can withdraw that consent at any time. To do this, or to discuss this right further with us, please contact us using the details in the ‘Contact us’ section below.

• Right to restrict processing

In certain situations, you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.  For further information in relation to this right, please contact us using the contact details below.

• Right to data portability

Where we are processing your personal data because you have given us your consent to do so, you have the right to request that the data is transferred from one service provider to another.

• Right to object

You have the absolute right to stop the processing of your personal information for direct marketing purposes, even in circumstances where we may be processing that information under the legitimate interest basis referred to above. 

If you wish to exercise any of the rights referred to above please contact:

nick.gandon@aureus-sv.com or by post to RESTART Lives, Upper Highwood, London Road, Hertford Heath, Herts SG13 7PR.

You can find further information relating to your rights in respect of your personal information on the Information Commissioner’s website: https://ico.org.uk