Our Data Protection Policy
Date Adopted: 08.04.2021
To be reviewed next before/on: 08.04.2022
Inc Arts Unlock is committed to ensuring the data processed on this website remains safe and secure.
We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page [please see our cookies policy].
We also collect personally identifiable information (including for example: name, email, password, phone number, communications); company name and details; and some Inc Arts Unlock form data.
While Inc Arts Unlock avoids sharing data with third parties at most times, some data is shared in accordance with our business practices. The sharing of data with third parties will always be consensual with the data subject and/or their parent/guardian, and only if Inc Arts is satisfied that their Data Protection policy is GDPR compliant.
How Inc Arts Unlock collects personal data:
Inc Arts Unlock visitors supply their personal data when signing up for our mailing list via the website [https://www.incartsunlock.co.uk/contact].
Inc Arts Unlock visitors supply their personal data through the contact form via the website [https://www.incartsunlock.co.uk/contact]
Personal data may also come to us unsolicited via enquiries through our website and to our generic email account.
Inc Arts Unlock may include applicant’s personal data through the registration form via the website.
Why Inc Arts Unlock collects personal data:
To hear from Inc Arts Unlock about upcoming events and campaigns, individuals must agree to some processing of their personal data.
To take part in Inc Arts Unlock registering of organisations’ proposed actions on inclusive policy and implementation of organisational processes.
What data we collect:
We may collect, use, store and transfer different kinds of personal data about you which we have explained using the following categories:
Identity Data includes first name, last name, company name
Contact Data includes email address, home address, phone number
Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Usage Data includes information about how you use our website.
Research data includes anonymised responses collected from the Inc Arts Unlock form.
How data collected is sent internally:
Inc Arts transports data with all due diligence reasonably possible. Contact forms are sent to Inc Arts Unlock through an encrypted email server directly from our website which has controlled access. Received sign-up forms are stored on an encrypted email server for no more than 6 months.
Storage/Retention of data:
Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to provide Inc Arts Unlock services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
Data received through sign-up forms is uploaded manually into our database software. Our database is stored both in encrypted files on office-based hardware and backed up regularly in our encrypted cloud-based server. Access to these files is restricted through password protection and only available to authorised staff members. Our standard retention policy (without the data subject’s right to access, rectification and erasure etc.) is THREE YEARS post sign-up.
Third Parties/Data Processors:
Inc Arts does not actively share data with third parties, however there are certain instances where sharing information is crucial to our business processes.
MailChimp: Inc Arts uses a USA based company ‘MailChimp’ to create newsletters and send some marketing via email. This is an optional process, which people consent to via email or sign-up directly through our website. Data Subjects can opt-out and erase/rectify their record stored with MailChimp at any time. Inc Arts is satisfied that their GDPR regulations are thorough, and the information stored in MailChimp (email addresses) is secure. We have a processor contract in place, and copies are available upon request.
How we communicate with you
We may contact you to notify you regarding your account, to troubleshoot problems with your account, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you: due to applicable national laws, and any agreement we may have with you. For these purposes we may contact you via email, phone-call or text message.
Any data subject with personal data stored within Inc Arts Unlock is entitled to the rights of:
Access: You may contact Inc Arts Unlock at any time to access all data held relating to you and/or your dependents. Inc Arts Unlock will ensure that we respond to a subject access request without undue delay and within one month of receipt (this may be extended to two months if the request is complex or multiple). If the information request will also include data regarding others, Inc Arts Unlock has the right to refuse the request or take steps in order to obtain consent from other involved parties.
Rectification: You may contact Inc Arts Unlock at any time in order to rectify data held relating to you and/or your dependents. Inc Arts Unlock will ensure that we respond to a rectification request without undue delay and within one month of receipt.
Erasure: You may contact Inc Arts Unlock at any time in order to erase data held relating to you and/or your dependents. Inc Arts will ensure that we respond to an erasure request without undue delay and within one month of receipt.
Restrict Processing: You may contact Inc Arts Unlock at any time in order to restrict the data we process relating to you and/or your dependents. Inc Arts will ensure that we respond to a request to restrict processing without undue delay and within one month of receipt.
Data Portability: You may contact Inc Arts Unlock at any time in order to obtain the data we process relating to you and/or your dependents and reuse it across different services. Inc Arts will ensure that we respond to a request to restrict processing without undue delay and within one month of receipt. Please note, this does not apply to Inc Arts’ legal obligations.
Objection: You may contact Inc Arts Unlock at any time in order to object to the processing of data relating to you and/or your dependents. Inc Arts Unlock will ensure that we respond to a request to restrict processing without undue delay and within one month of receipt.
If you don’t want us to process your data anymore, please contact us at firstname.lastname@example.org
If you would like to: access, correct, amend or delete any personal information we have about you, you are invited to contact us at email@example.com
If you feel that your complaint was not handled in the correct manner, or still have concerns, you may escalate the complaint by by contacting the Independent Commissioner’s Office (ICO).
ICO Telephone Number: 0303 123 1113
If Inc Arts Unlock experiences a data breach of any kind, we have a legal obligation to report this to the ICO within 72 hours. The data breach will be reported by the Inc Arts UK Data Protection Officers. In the instance they are unavailable to report the breach, the next most senior staff member shall do so.
Inc Arts Unlock will also inform all the victims of the data breach as soon as possible if there is a high risk of adversely affecting individuals’ rights and freedoms.
Inc Arts Unlock will store and record all data breaches.