Escape2Make (“we“, “our” and “us”) is committed to protecting and respecting your privacy.
Please read the following carefully to understand how we may use and store your personal data.
This Privacy Policy applies to the personal data that we collect from and about you as part of enabling us to fulfil the published aims of our charity.
We are Escape2Make, a Charitable Incorporated Organisation, registered in 2019.
You can contact us in writing at Escape2Make, Marshrange, Castle Park Lancaster LA1 1YQ, or by email at info@escape2make.org.
Any changes you make to your communication preferences will be processed by us within ten working days of our receipt of your instruction; however, you may still receive non-essential communications in the intervening time between the submission of your change and when we process that change.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance by contacting our office.
In this Privacy Policy:
A “Participant” in E2M activity means a young person who is involved in any way in the workshops, courses or events organised by E2M.
“Personal data” means any personal data relating to an identified or identifiable natural person;
“Process” or “Processing” means anything that we do with your personal data, including collecting, sharing, storing, using and/or deleting the personal data;
“Services” means the activities, art and enterprise initiatives and other services provided for Participants at Escape2Make; and
“You” refers to: an individual who visits our website; a Participant and/or the parent/guardian of a Participant; a supporter; funder; or member of staff or volunteer of Escape2Make, in respect of whom we process personal data; and
“Escape2Make” means one of our activity venues or centres which are open to our Participants.
Privacy is very important to us. We will only use your personal data in a way that is fair to you and in a clear, honest and transparent way. We will only collect your personal data where it is necessary for us to do so and if it is relevant to our dealings with you.
We may need to process personal data about you for many essential purposes. We could give lots of example, but we have set out below a list of the main reasons that we may need to collect and use your personal data. We may not use your personal data for all of these purposes; it will depend on the nature of your relationship with us, and how you interact with Escape2Make.
Delivery of core charitable services: Delivery of our core charitable activities may require us to record your contact details, eligibility for our charitable services, records of financial transactions and other communications with you.
Communication about, and administration of, your Participation: Where you are a Participant (or the parent/guardian of a Participant) of E2M where you are a Participant will need to process your personal data in order to send you essential information about your Participation and/or the Services and to help us effectively carry out our charitable activities. For example, E2M may need to use your personal data to keep you updated about your Participation, to send you information generally relevant to the Services (including informing you about developments or changes to the Services) and to identify any misuse or abuse of our Services.
Due diligence on donations: Our trustees have a duty to ensure that there is no reputational or financial risk to accepting a donation or other kind of support. Where you are a supporter or potential supporter, we may therefore use publicly available sources to carry out due diligence on you to ensure that we are fundraising within the law. For more information on the circumstances this may apply in and the type of information required please visit https://www.gov.uk/government/publications/charities-due-diligence-checks-and-monitoring-end-use-of-funds. If we cannot process your personal data for these purposes, then we may be unable to accept your donation or other support.
Research: We may collect data to carry out research on our supporter base. This is in order to improve our communications and ensure that we understand how best to interact with our valued supporters. The primary way in which we do this is from publicly available sources such as Companies House, the electoral register and the media. Information we gather from individuals as part of this process is only used for our internal research purposes.
Management of volunteers: If you are one of our valued volunteers we may need to use your personal data to manage your volunteering activities, deliver training, involve and update you on our projects and campaigns and to ensure your safety. This may include sending you newsletters or information about our fundraising appeals so that you are best equipped to perform your role and advise the public about our work. If we cannot process your personal data for these purposes, then we may be unable to involve you in our volunteering activities.
People administration: Escape2Make employs staff who are crucial to both delivering our projects and raising the funds to provide our charitable services as well as providing a range of professional and technical support. We process the personal data of our people for recruitment, administration and management purposes.
We may also process personal data about you for other optional purposes. We have set out a list of examples below. This usage of your personal data is on an opt-in basis. If you have opted in, you can choose to opt out of your personal data being used for any of these purposes by contacting us on info@escape2make.org’
Fundraising, campaigning and marketing: We have a range of fundraising and marketing activities that are designed to raise income or promote the aims and objectives of the organisation. Where you have opted-in to receive such communications, we may use your personal data to contact you about projects, campaigns, competitions, commercial trading activities, sponsorships, events or volunteering opportunities, which we think you may be interested in. If you confirm that you are interested in supporting Escape2Make projects we may share your information with other parties with whom we cooperate to fulfil the core aims of the charity. We may also ask if you are able and prepared to Gift Aid any of your donations.
Analysis, targeting and segmentation: In order to fund our charitable work giving young people somewhere safe and inspiring to go in their leisure time, we have to communicate our aims and objectives and ask people for financial support. Efficiency is very important to us, as we value every single donation. Therefore, we only want to send communications that are genuinely interesting and relevant to you. We will make use of information you have given us and your interactions with our Services, to help us predict your interests and tailor and personalise our communications in the future. This may also involve the use of focus groups to understand our supporters better.
Profiling: In some limited circumstances we may combine the personal data a supporter gives to us with information available in the public domain to create a profile of a supporter’s interests and preferences where they are relevant to that individual’s potential engagement with Escape2Make. Information collected for these purposes may include information about your corporate directorships, shareholdings, published biographical information, employment, philanthropic interests and networks, charitable giving and relevant media coverage. We do this to help us understand the ways in which our supporters can support our work sooner, and more cost effectively.
It is lawful for us to process personal data where the following conditions apply:
Consent: This applies where you have given your consent to the processing of your personal data for one or more specific purposes.
For example, we will always ask for your consent to contact you for the purpose of direct marketing by email or SMS text message. Also, should we ever ask you to provide any special categories of personal data (or “sensitive personal data”) about yourself (for example, information about any health condition that may be relevant if you are participating in our activities) we will always seek your explicit consent to process this data. We will always ask for your consent to process your personal data as stated above at the time that we collect the relevant personal data.
Where we are relying on consent to process your personal data and you are aged under 16, we will ask your parent or guardian to give their consent to such processing.
Where you (or your parent or guardian, as applicable) have given us consent to use your personal data in any way, you (or your parent or guardian, as applicable) have a right to withdraw that consent at any time by contacting us on info@escape2make.org. In some cases, withdrawing your consent may impact on our ability to provide the Services to you.
Contractual Necessity: This will apply where you are a Participant, our people and/or in some cases a volunteer and the processing of your personal data is necessary for the performance of our service with you or in order to take steps at your request prior to entering into a contract with us. Where you are a Participant, we process personal data about you in order to make the Services available to you. We cannot provide the Services without access to this personal data.
Legal Obligation: This will apply where the processing is necessary in order for us to comply with a legal obligation which applies to us. This might include, for example, where we have a legal obligation in relation to a safeguarding issue or in relation to our statutory reporting requirements.
Your Vital Interests: This will apply where the processing of your personal data is necessary in order to protect your vital interests. For example, this would apply if you were ill and we needed to share your personal data with the emergency services.
Legitimate Interests: This will apply where the processing of your personal data is necessary for the purposes of the legitimate interests of Escape2Make (or a third party), provided that such processing is fair and balanced and does not have a disproportionate impact on your rights of data privacy. We have set out below a list of the legitimate interests that we may rely upon.
We may rely on the following legitimate interests in order to process your personal data:
Governance:
Publicity and income generation:
Processing for research purposes; and
Profiling, including the use of publicly available information.
Operational management:
Financial management and control:
Purely administrative purposes, which may include (without limitation):
When we use your personal data for the purposes of our legitimate interests (as set out above), we will always consider if it is fair and balanced to do so and whether it would be within your reasonable expectations that we would use your data in this way.
We will balance your rights and our legitimate interests to ensure that the way in which we use your data never goes beyond what you would expect and is not unduly intrusive or unfair.
Who do we collect it about? We may collect and use various personal data about:
Participants, Participants’ parents and/or guardians, enquirerss, volunteers, suppliers, customers, supporters and/or funders, participants at events, job applicants, and other professional contacts as required to carry out the operation of the charity.
What do we collect? We may collect and use some or all of the following types of personal data, which may include information that you provide to us, information that we may collect about you, for example, in relation to your use of the website and/or the Services, and information that we collect from third parties:
With regard to your visits to our website, we may collect the following information:
Special Categories of Personal Data relating to you that we may process may include (without limitation):
Personal data:
We may share your personal information within our funders and/or sponsors and within the E2M, where it is necessary for the provision of the Services or the delivery of our core charitable services or where you have asked us about an Escape2Make project.
We may also share your personal data with statutory and regulatory bodies (for example, the Charity Commission, Companies House, Health and Safety Executive, Information Commissioner’s Office) where there is a legal requirement to do so. This might include, for example, for the purposes of registration and maintenance of statutory information.
We may also pass personal data to various third parties who provide various goods and/services to us, or on our behalf, which we require in order to provide you with the Services. In all of these situations we ensure that we always have a written contractual agreement in place that will ensure that those organisations can only use the personal data provided for the specific purposes we direct them to do, and that they have in place strict security requirements in order to protect your personal data.
The table below sets out a non-exhaustive list of examples of some of the third party data processors that we share personal data with as at the date of this Privacy Policy. These third party data processors may change from time to time. You can request a copy of the current register of third party processors that we share personal data with by contacting us at info@escape2make.org.
Recipient | Purpose |
Cloud based database systems (Salesforce, Kronos) | Storing data |
Database system and application developers and consultants | Development of data storing systems including migration of data from one system to another |
Website developers | Development of website and linked functionality such as online payment systems |
Website analytics (Google Analytics) | Analysis of website activity |
Social media analytics | Analysis of social media activity |
Wifi tracking system provider (Purple wifi) | Analysis of centre usage using location tracking and targeting delivery and communications based on this usage |
Marketing, communication and PR consultants | Marketing, communication and PR support |
Consultants and evaluators | Assessment of the impact of charitable services, projects, needs assessments or research reports |
Recruitment services with applicant recommendation or tracking systems | Targeted recruitment of staff |
DBS checking service (uCheck) | Vetting of potential employees and volunteers in line with Safer Recruitment Practice |
HMRC | Calculation and payment of Tax and National Insurance |
Payroll bureau | Payment of employee wages |
Pension and employee benefit providers | Provision of workplace pension and employee benefits such as childcare vouchers |
Insurance providers | Provision of adequate insurance cover and resolution of policy queries or claims |
In addition to the above, we may exchange information with third parties for the purposes of fraud protection and credit risk reduction. We may also transfer our databases containing your personal data if we transfer our business or part of it.
Other than as set out in this Privacy Policy, we shall NOT sell or disclose your personal data to third parties without obtaining your prior consent unless this is necessary for the purposes set out in this Privacy Policy or unless we are required to do so by law.
We have in place appropriate technical and security measures to prevent unauthorised or unlawful access to or accidental loss of or destruction or damage to your information. We store your personal details on a secure server. We use firewalls on our servers.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Please contact us on info@escape2make.org if you want further information on the specific mechanism used if your personal data is transferred out of the EEA.
You have the following rights in respect of your personal data:
Please note if you ask us to erase your data and/or restrict processing of your data, we may not be able to provide you with the Services.
We will only keep personal data for as long as we are either required to by law or as is relevant for the purposes for which it was collected in line with our Data Retention policy, a copy of which is available on request by contacting us on info@escape2make.org. After this point the data will either be deleted or rendered anonymous.
Retention of data will normally be in line with statutory requirements, except where legitimate interest or best practice recommendations relevant to on-going provision of the charitable services dictate alternative periods, for example where an insurance company requires the retention of Member information for a period of 50 years in the event of an abuse claim.
We will keep a record of your name and email address on our ‘do not contact’ suppression list if you request that we do not send you direct marketing.
By visiting www.escape2make.org (“our website”) you are accepting and consenting to the practices described in this Privacy Policy.
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our website.
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Any communication through external social media platforms that we participate on are subject to the terms and conditions as well as the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. We will never ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact us by telephone or email.
Our website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
We may amend this Privacy Policy from time to time and any amended Privacy Policy will be posted on our website. The Privacy Policy current at that time shall apply to all information which we hold about you.
This Privacy Policy is version 1 and was most recently updated in May 2019.
