Yeldall Christian Centres
Data protection privacy notice (overview)
Who are we?
Yeldall Manor is a Christian charity offering residential substance misuse treatment / rehabilitation and aftercare to people with drug or alcohol addictions. This privacy notice explains how we use any personal information we collect about you.
Our full name is Yeldall Christian Centres. We are a registered charity, number 1000038 and a company limited by guarantee, number 02482048. Our registered office is Yeldall Manor, Bear Lane, Hare Hatch, READING RG10 9XR.
Yeldall Christian Centres (‘Yeldall’) is a ‘data controller’ and gathers and uses certain information about you in order to offer you our services.
Data protection principles
Yeldall is committed to protecting all personal information we obtain about you, whether you’re a resident, supporter, volunteer or staff member. We will only collect and use your personal information for carefully considered and legitimate purposes.
We will never share your information with any other organisation for their own marketing purposes, and we never sell anyone’s information.
We will comply with the data protection principles when gathering and using personal information, as set out in our Data Protection and Record Keeping & Confidentiality policies.
Why do we collect information from you?
When we use your personal information, we will always consider if it is fair and balanced to do so and whether it would be within your reasonable expectations that we would use your data in this way. This includes:
Service users (residents and potential residents)
We will initially use the information we collect from you to process your application for residential rehabilitation. We will then use your information to provide you with these services. More detail is given in the privacy notice which is made available to anyone who applies to join our programme.
When you make a donation or express an interest in supporting Yeldall, we will use the information we collect from you, e.g. name, address and amount given, to thank you for your support and process a Gift Aid claim, where appropriate.
Unless you ask us not to, we will keep you in touch with our work, primarily through our quarterly newsletter. If you request it, we will also send you our monthly Prayer Diary. Occasionally, we may also use your information to ask for additional support. You have the right to opt out of any of these communications at any time. Our lawful basis for processing this information is the legitimate interests of Yeldall in raising funds to support the ongoing work of the charity.
We will only send you information by email for fund-raising purposes if we have your consent. We do not contact supporters by text for fund-raising purposes, and would not do so without your consent. Our lawful basis for processing this information is consent.
We will use the information we collect from you to process and consider your job application. Your information will only be shared with those staff involved in processing your application. We will only request a reference or a DBS disclosure with your prior consent. Your information will not be added to our mailing list without your explicit consent, and will not be used for any subsequent purposes other than ensuring fair recruitment. More detail is given in the privacy notice which is given to all new job applicants.
Yeldall employ staff and consultants to run our programmes and provide necessary administrative and professional support. We process the personal information of our employees for recruitment, staff administration, remuneration, pensions and performance management purposes. More detail is given in the privacy notice which is made available to all staff.
We use CCTV cameras within specific areas on the Yeldall Manor site for the purpose of safeguarding the safety of our residents, staff, visitors and property. We use these images for the prevention, investigation and detection of medication errors/incidents and crime and for the prosecution of any offenders. Our lawful basis for processing this information is the legitimate interests of Yeldall in ensuring the health and safety of our visitors, staff, service users and site.
Under data protection law, certain categories of personal information are recognised as sensitive, including health information, race, religious beliefs, and sexual orientation (‘sensitive personal data’).
We only collect sensitive personal data if there is a clear reason for doing so. For example, if you are a prospective resident, we will need information about your health in order to ensure that we can provide you with suitable treatment (not-for-profit bodies, article 9, section d). There are also other categories of sensitive data that we are required to collect for the purposes of anonymous government monitoring. We also need to ask questions about religious belief for those prospective staff and volunteers who will have regular contact with our residents, in line with the Christian ethos of Yeldall Manor – employment, article 9 (2) (b).
We also need to collect information on previous convictions from potential residents, staff and volunteers of Yeldall in order to safeguard the residents on our programme and provide the most appropriate care for them. Care is taken to ensure that such data is processed in accordance with UK Data Protection law and with the utmost discretion.
Sharing your information
We will not share your information with any other organisation, other than where strictly necessary for your own benefit or the operation of our services, for example:
- If necessary for law enforcement or similar purposes
- As a necessary part of providing you with our service
- To process the pay-roll, pensions and tax of our staff
- In order to contact you as a supporter – for example, by using a mailing house or email broadcaster to process our communications. (In this case, we will have a written contractual agreement in place that will ensure that those organisations can only use the data provided for the specific purposes we direct them to do, and that they have in place strict security requirements in order to protect your personal information.)
Retaining and deleting your information
We will take all reasonable steps to ensure that the information we hold about you is kept secure and can only be read by the appropriate staff members. We will only hold your personal data for as long as it is required in line with our Data Retention Policy. Please contact us using the details below if you need further details about our Data Retention Policy, or to request that your data be deleted.
Right to be Informed: You have the right to be told how your personal information will be used. This privacy notice, and other summaries used elsewhere, are intended to be a clear and transparent description of how your data may be used. Please contact us if you have any questions.
Right of Access: You have a right to ask us to confirm whether we are processing information about you, and to request access to this information. It will help us to process your request if you can be
specific about what information you require, otherwise we may need to contact you again to clarify this. We will respond to your request within 30 days, once we are satisfied you have rights to see the requested records and we have successfully confirmed your identity.
Right of erasure: Except where we need to retain your data for legal reasons, you have the right to be forgotten (i.e. to have your personally identifiable data deleted). Please contact us regarding this.
Right of rectification: You have the right to request that we update or correct any information we hold about you. Please contact us to let us know what needs correcting.
Right to restrict processing: In certain situations you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
Right to data portability: Where we are processing your personal data under your consent, the law allows you to request data portability from one service provider to another. This right is largely seen as a way for people to transfer their personal data from one service provider to another so, if a service user (resident) asks us to forward their details to another service, we will always try to help.
Right to object: You have the right to stop the processing of your personal data for direct marketing purposes. Please contact us if this applies.
Right to object to automated decisions: In a situation where a data controller is using your personal data in a computerised model or algorithm to make decisions that have a legal effect on you, you have the right to object. This does not apply to anything that Yeldall does.
Our website does not use ‘cookies’ to track your visit. However, if you click on a link to another website (which may operate ‘cookies’), you should read its own privacy policies.
Changes to this policy
From time to time, we will make changes to this statement to keep it up to date and in line with current legislation. Please make sure you check regularly to see what’s changed. This document was last updated on 21st May 2021.