Website Privacy Notice
What is the purpose of this document?
Crossroads Caring Scotland (CCS) understand that the privacy and security of your information is extremely important. This privacy notice aims to inform you of what information we hold about you, why and what we do with it. The notice also informs you of your rights regarding the personal information we hold about you.
Who are we:
We are a registered charity (charity number SC0113081) and a company limited by guarantee (85401)
We provide support services into people’s homes or within their community across 22 locations in Scotland
We are registered with the Care Inspectorate Scotland
Crossroads Caring Scotland registered 24 George Square, Glasgow, G2 1EG is the Data Controller of the information covered in this privacy notice.
Data protection principles
We will comply with data protection law and principles, which means that your data will be:
Used lawfully, fairly and in a transparent way.
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
Relevant to the purposes we have told you about and limited only to those purposes.
Accurate and kept up to date.
Kept only if necessary for the purposes we have told you about.
The kind of information we hold about you
To enable us to provide services and to act as an employer we are required to collate data to enable us to fulfil these roles. Under the UK General Data Protection Regulations, we may process information to comply with our legal and contractual obligations, to perform a public task or where we have a legitimate interest. We may process some information based on your consent.
We collate information in relation to the following:
People We Support
Employees and Workers
To obtain further information about how we collate, store, use and retain information relating to People We Support please contact firstname.lastname@example.org
The privacy notice for Job Candidates is available on the Careers Page of this website.
When you click on the Donate button it will take you the ways in which you can donate to CCS. There are three options to donate:
By bank transfer to a named CCS bank account.
By clicking on the link to our Justgiving page (a third-party provider).
No payment or personal information is stored on our web server for any of the above.
If you donate to CCS by post or by bank transfer to a named CCS bank account, we will contact you via email or postal address to confirm receipt and thank you for your donation.
If you choose to donate through our Justgiving page, please refer to Justgiving’s own privacy statement for information on how they process personal information.
Justgiving will email you directly to thank you on our behalf for your kind donation. We will only contact you via email to thank you directly for your donation.
We will access our Justgiving account to receive updates on any donations made.
Your contact details and record of your donation are stored in our database for 6 years.
We are required to hold this information to record donations received and to comply with our legal obligations, which is the lawful basis under the UK General Data Protection Regulations.
Cookies are also used to retain information for a period of 30 days where you have started and saved an application for a job, but not submitted it. The data is encrypted in our web database for a period of 30 days and then deleted.
If you would like to stop our cookies from being stored on your computer in future, you can do so by following instructions on your Internet browser. You can do this by clicking on the Help menu. If you do turn off our cookies, you may not be able to access certain services or facilities we offer in the future.
Further information about deleting or controlling cookies is available at www.aboutcookies.org.
For further information please visit our Cookies Policy.
Access to Data
Personal data provided to CCS is only accessed by individuals who require access to carry out the function for which your data has been collated or to support that function. All employees are provided with regular training on Data Protection.
We do not sell or share your information with third parties for marketing purposes.
What security measures do we employ?
We employ reasonable security measures to keep your personal information secure.
When you give us personal data, we take steps to ensure that it’s treated securely. Our websites are protected with SSL certificates to secure and encrypt website traffic. Crossroads Caring Scotland has achieved the Cyber Essentials certification.
We have put in place appropriate physical, electronic and managerial procedures to safeguard the information you have given us.
Third parties will only process your personal information on our instructions and where they have agreed to treat the information confidentially and to keep it secure.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
How can I manage my information?
If your personal details change, please help us to keep those details up to date by telling us about any changes. If you want to see what information we have about you or need to tell us about any changes to the information that you have given to us, please contact us using the contact details below. You can also ask us to remove any information we have about you at any time.
Accessing your information
You have the right to access information we hold on you. You can do this by writing or verbally, by telephoning:
Data Protection Team Crossroads Caring Scotland 24 George Square
Glasgow G2 1EG
Telephone: 0141 226 3793
We will always respond to your request within 28 days.
Correcting your information
You have the right to correct your information if you believe it is inaccurate or incomplete.
Removing your information
If you believe there is no reason for CCS to continue processing your data, you may request its removal.
Restrict how we may use your information
In some cases, you may ask us to restrict how we use your information.
In some circumstances, you may request the transfer of your information to another party.
Objecting to how we may use your information
In some circumstances you may have the right to object to us processing your personal data.
If you want to verify, correct, or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact CCS on the details provided.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
Right to withdraw consent
In the limited circumstances where you may have provided your consent to the collection, processing, and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact Data Protection Team.
Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
How to Make a Complaint
If you have a complaint about our use of your personal data, please contact us using the details provided on page 1 of this document.
If you are not satisfied with our response or how we use your data, you have the right to complain to the Information Commissioner’s Office (ICO).
The Information Commissioner’s address is:
Information Commissioner’s Office Wycliffe House, Water Lane Wilmslow, Cheshire
Helpline: 0303 123 1113 ICO website: https://www.ico.org.uk
Reviewed August 2022