Privacy Statement

• Data Protection Act 2018 

• UK General Data Protection Regulation 2021 

• Privacy and Electronic Communications Regulations 2003 

YMCA Brighton is committed to protecting your personal information.  As a Data Controller our registration number with the Information Commissioner is Z6047659.  We adhere to UK General Data Protection Regulations (GDPR) plus the Data Protection Act 2018 (DPA). 

How do we get your information? 

We obtain your personal information provided to us via our website, online platforms, e-mail, other correspondence or conversations.  

What personal data we process and why? 

• We collect your data such as: name, postal, email and IP addresses, bank account, donations and social media account.  This is so that we can collect donations and manage our mailing list to publicise events and our work with single homeless people. Your data is stored securely on YMCA’s Brighton system managed by Carden IT. 

What data is put on your computer 

This site uses Google Analytics to track user interaction. We use this data to determine the number of people using our site, to better understand how you find and use our web pages, to see user journeys through the website and enhance your online experience. 

Although Google Analytics records data such as your approximate geographical location, device, internet browser and operating system, none of this information personally identifies you to us. Google Analytics also records your computer’s IP address which could be used to personally identify you, but Google do not grant us access to this.  

Lawful basis for processing your personal data 

The legal basis for doing this under the General Data Protection Regulations differs depending on the data in question but may include Consent (if managing a mailing list), Legal obligation if complying with legislation when managing donations, or Legitimate interest if fundraising. 

How long we keep your personal data 

Your data is retained in accordance with our Data Retention Schedule.  Financial data on donors and donations must be kept for 6 years; publicity data is retained or 5 years; whilst our mailing list data is updated every 2 years. 

Data sharing 

If you send an email, none of the data will be stored by this website or passed to/ be processed by any of the third-party data. Instead, the data will be collated into an email and sent to us over the Simple Mail Transfer Protocol (SMTP). 

We share your data for publicity and marketing activities, if you have given consent.  Otherwise, we do not share your data unless there is a legal obligation to do so, such as for tax, accounting purposes, or to prevent and detect crime.   

However, the web platforms and IT service providers we use to maintain an online presence and process donations also collect your data.  They have their own privacy notices which detail with whom they share your data. 

Do we use any data processors? 

Website developers Michael Bell One host and manage our website; Just Giving host the donations platform, which is stored by Donorfy and the Make Change Count group campaign; Google analytics enable us to analyse website traffic and usage; Mailchimp enable us to send marketing mailouts; Give as you Live enable people to make donations to us when they buy everyday goods; YMCA England host our Sponsor a Room campaign; We use The Big Give; For communications via social media we use Twitter, Instagram, Facebook and YouTube. 

Your rights in relation to this processing 

Our cookies do not store financial information or information which is capable of directly identifying you (such as your name or address). You can decide whether to accept these cookies when you first open our website.  

You have certain rights: 

• Right to be informed – This notice advises you of what data we collect and why.  If we make any changes to this, we will advise you. If we plan to use personal data for a new purpose, we update our privacy information and communicate the changes to individuals before starting any new processing.   

• Right of access – you can request copies of your personal information 

• Right to rectification – you can ask for information which is inaccurate or incomplete to be amended 

• Right to restriction – you have the right to ask us to restrict the processing of your information in certain circumstances. 

• Right to object – you have the right to object to processing if it forms part of our legitimate interest. 

• Right to portability – This applies to data which you have given us via consent or under contract, upon request you can ask us to transfer it to another organisation, or to yourself.  If we are processing for law enforcement purposes your rights are slightly different.  

• Right to erasure – you have the right to be forgotten, but this only applies to certain data such as that on or mailing list. 

​Transfer of personal data and automated decision making 

Your data is stored in the UK and not transferred overseas except for the purposes of law enforcement.  Nor do we use your data for any automated decision-making or profiling purposes.  Our website is hosted on a server that is hosted in a UK data centre, and all data on this server is kept within the UK.   

Data breaches 

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, we shall promptly assess the risk to your rights and freedoms and where necessary report this breach to yourself and the Information Commission 

Making a Subject Access Request 

If you would like a copy of your data contact generalenquiries@brightonymca.co.uk 

or YMCA Brighton Central Office, 55 Old Steine, Brighton, BN1 1NX.  We will respond to you within one month, usually free of charge.   

Making a complaint 

If you are not satisfied with the way your data or request has been handled, you have the right to make a complaint.  In the first instance, pass your concerns to generalenquiries@brightonymca.co.uk 

If you are still unsatisfied with the way that we have handled your data, then you have the right to complain to the Information Commission via their website or (0303) 123 1113