This policy explains the Privacy & Cookies policy of Spinal Track, Company No. 10514904 whose registered address is Spinal Track c/o Boyds, 20 Sansome Walk, Worcester, Worcestershire. WR1 1LR.
Spinal Track’s primary line of business is as a charity to provide driving experiences to disabled people. Spinal Track is committed to protecting and respecting your privacy. Where we decide the purpose or means for which personal data supplied by you or us is processed, we are the "data controller".
Specifically, Spinal Track is committed to ensuring that all data processing is: -
processed lawfully, fairly and in a transparent manner;
collected for specified, explicit and legitimate purposes;
adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
accurate and, where necessary, kept up to date;
kept in a form which permits identification of data subjects for no longer than is necessary; and
processed in a manner that ensures appropriate security of the personal data.
The purpose of this document is to explain how Spinal Track will use your personal information when interacting with us.
2. Collection of personal information
Why do we collect personal information about you?
We only hold information if you are on our waiting list. We will hold: NAME, EMAIL, PHONE NUMBER. These details are removed (except name as we need to ensure someone doesn’t have a second go) once your experience has ended.
How do we collect personal information from you?
Information may be collected in the following ways: -
via our website contact page
Disclosure to third parties
We do not share or disclose your personal information with third parties, unless legally required.
3. Your rights
You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay, and within one month at the latest.
Controlling personal information that we hold on you
As a data subject, we acknowledge that you have a right to control whether or not we collect and process personal data on you, and to ask for us to stop processing/delete data that we hold.
Spinal Track is committed to ensuring that we process personal data in line with your wishes, so please tell us if you’re unhappy with us holding any of the data that we do. You can do this: -
By email: Please email firstname.lastname@example.org
We will ensure that any requests for personal data to be deleted are actioned as soon as possible, and within one month at most.
Ask for a copy of data we are processing about you and have inaccuracies corrected
You have the right to request a copy of the personal information we hold about you and to have any inaccuracies corrected.
Cookies are files that include very small amounts of data, commonly used as an anonymous unique identifier. These are transmitted to your web browser from the web page that you have visited, and may subsequently be stored on the hard drive of the computer (or other device) that you are using.
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit http://www.aboutcookies.org or http://www.allaboutcookies.org.
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
5. Email marketing & newsletters
From time-to-time we may send you content via email that we believe is likely to be of interest to you.
This information may include extracts of research that we have done, trends we are aware of or case studies of similar brands. If you’re not interested in receiving these communications, please let us know.
For this activity, we use a number of tools.
We are careful to ensure that all email marketing sent out by Spinal Track includes a clear ‘unsubscribe’ link, and we have a robust internal policy in place to deal with unsubscribe requests we may receive from recipients.
6. Where we keep your data
All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential.
Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; if you provide us with personal information over the internet, the provision of that information is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
7. Log Data
For those clients and former-clients who have previously visited SpinalTrack, or clicked on a link in one of our email communications, we are keen to inform you that we may collect information that your browser sends (referred to above as Log Data). This may include information such as your device’s IP Address, browser type and version, pages of the Service that you access, the time and data that such activity takes place, time spent on each pages, the entry and exit points of your browsing session, and other data.
The reason for such activity – which will be reviewed from time to time – is to improve your experience of the Services.
8. Retention of data
Spinal Track may retain data for differing periods of time for different purposes as required by law or best practices. However, under no circumstances will we retain your personal data for a period of no longer than 7 years (from the point of collection, or updating) unless there is a critical business reason to do so (for example, we may need to maintain records of invoices issued to you for longer than this for accounting reasons).
We would be happy to provide a copy of our data retention policy if you’re interested in receiving more information on this point.
9. Public website
All elements of Spinal Track’s site that aren’t behind the paywall (the ‘Public Site’) are hosted on a web content management system called Squarespace.
10. If you email us
We work closely with a third party provider (Google) to encrypt and protect email traffic in line with government advice. If your email service does not support TLS, please be aware that any emails we may send/receive may not be fully protected after we have sent them to you.
We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware you have a responsibility to ensure that any email you send is within the bounds of the law.
11. The personal information of children
Our Services do not address anyone under the age of 16. We do not knowingly collect personal identifiable information about children under 16. In the case we discover that a child under 16 has provided us with, or we hold personal information about a child, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.
If you are unhappy with the way we are processing your personal data, please let us know.
If you do not agree with the way we have processed your data or responded to your concerns, or if you do not think we are handling your personal information adequately, you have the right to lodge a complaint with the Information Commissioner's Office. Further information, including contact details, are available at https://ico.org.uk/
13. Contact us