Privacy policy

1. Introduction

This policy explains the Privacy & Cookies policy of Spinal Track, Company No. 10514904 whose registered address is Spinal Track c/o Boyds, 20 Sansome Walk, Worcester, Worcestershire. WR1 1LR.

Spinal Track’s primary line of business is as a charity to provide driving experiences to disabled people. Spinal Track is committed to protecting and respecting your privacy. Where we decide the purpose or means for which personal data supplied by you or us is processed, we are the "data controller".

Specifically, Spinal Track is committed to ensuring that all data processing is: -

• processed lawfully, fairly and in a transparent manner;

• collected for specified, explicit and legitimate purposes;

• adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;

• accurate and, where necessary, kept up to date;

• kept in a form which permits identification of data subjects for no longer than is necessary; and

• processed in a manner that ensures appropriate security of the personal data.

The purpose of this document is to explain how Spinal Track will use your personal information when interacting with us.

We have deliberately attempted to write this privacy policy in clear, easy-to-understand language. If anything about it isn’t clear, email us at andrew@spinaltrack.org and we will get back to you with clarification.

We may choose to make changes to this Privacy Policy at any time, to ensure compliance with applicable laws and industry regulations. Please ensure that you review this document from time-to-time to ensure you are familiar with the latest changes. These changes are effective immediately, after they are posted on this page.

2. Collection of personal information

Why do we collect personal information about you?

We only hold information if you are on our waiting list. We will hold: NAME, EMAIL, PHONE NUMBER. These details are removed (except name as we need to ensure someone doesn’t have a second go) once your experience has ended.

How do we collect personal information from you?

Information may be collected in the following ways: -

• via our website contact page

• via email

Disclosure to third parties

We do not share or disclose your personal information with third parties, unless legally required.

3. Your rights

You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay, and within one month at the latest.

Controlling personal information that we hold on you

As a data subject, we acknowledge that you have a right to control whether or not we collect and process personal data on you, and to ask for us to stop processing/delete data that we hold.

Spinal Track is committed to ensuring that we process personal data in line with your wishes, so please tell us if you’re unhappy with us holding any of the data that we do. You can do this: -

• By email: Please email andrew@spinaltrack.org

We will ensure that any requests for personal data to be deleted are actioned as soon as possible, and within one month at most.

Ask for a copy of data we are processing about you and have inaccuracies corrected

You have the right to request a copy of the personal information we hold about you and to have any inaccuracies corrected.

4. Cookies

Cookies are files that include very small amounts of data, commonly used as an anonymous unique identifier. These are transmitted to your web browser from the web page that you have visited, and may subsequently be stored on the hard drive of the computer (or other device) that you are using.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit http://www.aboutcookies.org or http://www.allaboutcookies.org.

To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.

5. Email marketing & newsletters

From time-to-time we may send you content via email that we believe is likely to be of interest to you.

This information may include extracts of research that we have done, trends we are aware of or case studies of similar brands. If you’re not interested in receiving these communications, please let us know.

For this activity, we use a number of tools.

An email distribution engine called MailChimp, owned by The Rocket Science Group. Please view the MailChimp' Privacy Policy

We are careful to ensure that all email marketing sent out by Spinal Track includes a clear ‘unsubscribe’ link, and we have a robust internal policy in place to deal with unsubscribe requests we may receive from recipients.

6. Where we keep your data

All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential.

Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; if you provide us with personal information over the internet, the provision of that information is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

7. Log Data

For those clients and former-clients who have previously visited SpinalTrack, or clicked on a link in one of our email communications, we are keen to inform you that we may collect information that your browser sends (referred to above as Log Data). This may include information such as your device’s IP Address, browser type and version, pages of the Service that you access, the time and data that such activity takes place, time spent on each pages, the entry and exit points of your browsing session, and other data.

We work with Google – to ensure that this data is collected and stored in a secure manner. Google privacy policy

The reason for such activity – which will be reviewed from time to time – is to improve your experience of the Services.

8. Retention of data

Spinal Track may retain data for differing periods of time for different purposes as required by law or best practices. However, under no circumstances will we retain your personal data for a period of no longer than 7 years (from the point of collection, or updating) unless there is a critical business reason to do so (for example, we may need to maintain records of invoices issued to you for longer than this for accounting reasons).

We would be happy to provide a copy of our data retention policy if you’re interested in receiving more information on this point.

9. Public website

All elements of Spinal Track’s site that aren’t behind the paywall (the ‘Public Site’) are hosted on a web content management system called Squarespace.

We may from time to time collect anonymous data on usage patterns on the public website. Please view Squarespace’s Privacy Policy

10. If you email us

We work closely with a third party provider (Google) to encrypt and protect email traffic in line with government advice. If your email service does not support TLS, please be aware that any emails we may send/receive may not be fully protected after we have sent them to you.

We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware you have a responsibility to ensure that any email you send is within the bounds of the law.

11. The personal information of children

Our Services do not address anyone under the age of 16. We do not knowingly collect personal identifiable information about children under 16. In the case we discover that a child under 16 has provided us with, or we hold personal information about a child, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.

12. Complaints

If you are unhappy with the way we are processing your personal data, please let us know.

If you do not agree with the way we have processed your data or responded to your concerns, or if you do not think we are handling your personal information adequately, you have the right to lodge a complaint with the Information Commissioner's Office. Further information, including contact details, are available at https://ico.org.uk/

13. Contact us

If you have any questions or suggestions about our Privacy Policy, please do not hesitate to contact us. Emails can be submitted to andrew@spinaltrack.org