Privacy policy and cookies

Privacy Policy

This privacy policy tells you what to expect when CashBack for Communities collects your personal information.  CashBack for Communities is a Scottish Government programme.  Inspiring Scotland are appointed Delivery Partner for the CashBack for Communities programme and manage this on behalf of Scottish Government.

Why do we collect personal data?

We gather this information in order to:

• improve the site by monitoring how you use it
• respond to any feedback you send us, if you’ve asked us to send out email alerts to those who have requested them
• record and/or publish your response to a survey or consultation
• publish your comment on a blog or discussion site
• The personal data you send us can be viewed by authorised people in the Inspiring Scotland and Scottish Government

What data do we collect?

1. Visitors to the CashBack for Communities website

We use a third party service, Google Analytics, to collect information on how you use the site, using cookies and page tagging techniques.

The information we – and Google – collect doesn’t identify anyone and is kept for a maximum of 38 months. If we do want to collect personally identifiable information through the site, we will be up front about it.

2. E-newsletters

If you submit your email address to receive the CashBack e-newsletter we will add your address to our subscription list, there will always be an opt out option if you wish to stop these newsletters.  Once you have unsubscribed, your details will be deleted immediately from the system.

3. CashBack for Communities funded organisations

If you work with an organisation CashBack for Communities funds:

• We will collect details such as your name, work address, phone number & email address.
• We will only collect data which is necessary for us to do our job and where we have a legitimate interest in doing this. This might be for activities like sending you updates & reports on our work together, or to arrange training or learning events.
• We might use your details as part of case studies to highlight the work you do. This could also include photos or videos; however, we will always ask for consent to do this.

4. CashBack for Communities service users

If you use the services of CashBack for Communities:

• We may seek to use case studies/photos/videos which the charity you are associated with provides us for reports and publications, but we will always ask for permission to use them, from you, or the charity.
• We will not collect any personal details from you.

5. Enquiry forms

If you have completed an enquiry form on the Cashback for Communities website:

• We will collect your name, email address & phone number.
• We will use this information to contact you about your enquiry.
• Your details will be stored on our website host servers, where they will be stored for 3 months. They may also be stored on our internal systems if necessary as part of your enquiry.
• We will not use your details for any other purpose unless agreed with you during any follow-up discussions.
• We will not share your details with anyone unless agreed with you during any follow-up discussions.
• We will not enter your details on any marketing databases.

 

Links to other websites

Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

In addition, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that third-party site

 

Your rights

You have several rights regarding your data and how it is processed. A summary of these is shown below.

Right to be informed

We have a duty to inform you if we are processing your personal data and why. This information is available in section 3 of our Privacy Statement. If you have any concerns about this you can contact us at enquiries@inspiringscotland.org.uk

Right of access

You have the right to obtain confirmation of any personal data we are processing and to access it. We will provide you with a copy of any data we hold in an electronic and/or paper format and let you know why we have it, who (if anyone) it has been shared with, and how long we will store it. We will provide this information free of charge, within 30 days of receiving your request.

You can make a request by writing to the Data Protection Officer, Inspiring Scotland, Suite 2, 14 New Mart Road, Edinburgh, EH14 1RL, or by emailing enquiries@inspiringscotland.org.uk

If we feel that requests are manifestly unfounded or excessive, we may choose to charge a reasonable fee or refuse to respond.

If we choose to refuse to respond to a request, we will explain why and make sure you know about your right to complain to the supervisory authority. We will do this within 30 days of your original request.

Right to rectification

You have the right to have your data rectified if it is inaccurate or incomplete. We will do this within one month of you telling us about any rectifications or inaccuracies, although this can be extended by two months if the request is complex.

If your data has been disclosed to third parties, we will inform them of the rectification where possible.

Right to erasure

Or the right ‘to be forgotten’ You can request deletion or removal of your data if there is no compelling reason for us to continue using it.

The right to erasure does not provide an absolute ‘right to be forgotten’. You have a right to have personal data erased and to prevent processing in specific circumstances:

• Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed.
• When you withdraw consent.
• When you object to the processing and there is no overriding legitimate interest for continuing the processing.
• The personal data was unlawfully processed
• The personal data must be erased to comply with a legal obligation.
• The personal data is processed in relation to the offer of information society services to a child

Right to restrict processing

You can request processing of your data be restricted. This means your data may still be held by us, but no further processing is permitted.  We will be required to restrict the processing of personal data in the following circumstances:

• Where someone contests the accuracy of the personal data
• Where someone has objected to the processing (where it was necessary for the performance of a public interest task or purpose of legitimate interests), and we are considering whether your organisation’s legitimate grounds override those of the individual.
• When processing is unlawful and the individual opposes erasure and requests restriction instead.
• If we no longer need the personal data but the individual requires the data to establish, exercise or defend a legal claim.

If we have disclosed your personal data in question to third parties, it must inform them about the restriction on the processing of the personal data, unless it is impossible or involves disproportionate effort to do so.

We must inform individuals when we decide to lift a restriction on processing.

Right to portability

You can obtain and reuse the personal data we hold on you for own purposes or for different providers.  We must provide this in a structured, commonly used and machine-readable form. This includes CSV files.

 

If requested, we may have to transfer personal data to another organisation, if technically feasible.

The right to data portability only applies:

• to personal data you have provided to us;
• where the processing is based on your consent or for the performance of a contract; and
• when processing is carried out by automated means.

We will aim to provide any data within 30 days, however, this may be extended by two months where the request is complex. We will inform you within one month of the receipt of the request and explain why the extension is necessary.

Where not taking action in response to a request, we will explain why to you, and make you aware of your right to complain to the supervisory authority without undue delay and at the latest within one month.

Right to object

You have the right to object to

• Processing based on legitimate interests or the performance of a task in the public interest
• Direct marketing
• Processing for purposes of scientific/historical research and stats

We must stop processing your personal data unless:

It can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms; or, the processing is for the establishment, exercise or defence of legal claims.

 

Cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes.  Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

 

Measuring site usage

We use Google Analytics to collect information about how you use www.cashbackforcommunities.org. We do this to help make sure the site is meeting your needs and to help us make improvements.

We store information about:

• the pages you visit and how long you spend on each page
• how you got to cashbackforcommunities.org
• what you click on while you’re visiting cashbackforcommunities.org
• Any information we get is received in a way that we can’t identify anyone by it. For example, we never receive your name or address.

We don’t make any attempt to find out the identities of people visiting www.cashbackforcommunities.org, and we don’t allow Google to do this either.

All information we get through cookies and analytics will be treated in confidence. We will never sell, trade or give your details to third parties, unless we’re required to do it by law.

Find out more about security and privacy in Google Analytics.

Opt out

You can opt out of Google analytics cookies.

Accessibility

This web site has been designed to comply with the international web accessibility standards issued by the World Wide Web Consortium (W3C) as part of their Web Accessibility Initiative.

All reasonable efforts have been made to ensure that top level and main content pages are compliant to a minimum of AA of the Web Content Accessibility Guidelines (WCAG) 2.0 standards.

Content Disclaimer

We seek to ensure that the information published on this website is up to date and accurate. However, the information on the website does not constitute legal or professional advice and the we cannot accept any liability for actions arising from its use. We cannot be held responsible for the contents of any pages referenced by an external link.