Privacy policy.

Last updated: July 2022

We respect your right to privacy and manage your personal data in line with our responsibilities under the United Kingdom General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 (DPA 2018). This privacy notice provides the information required by the UK GDPR about the personal data that we collect from you and how we may use your information.

In this notice, references to 'us', 'our' or 'we' are to Hackney ACT; and to ‘you’ or ‘your’ are to an individual whose personal data we process.

Everything that we do with your personal data – for example, collecting, storing, using, sharing or deleting it – is referred to as “processing”.

This notice will be updated periodically. We will communicate any significant changes as appropriate.

1. About us

Hackney ACT is the Controller of any personal data processed as described in this Privacy Notice. If you have any questions about the use of your personal data, please contact us:

2. The personal data we process

When you contact us, visit us, access or use our services either online, by post, in person or by other means, we may collect, store and use your personal data.

The personal data we collect from people who use our online services to engage with Hackney ACT will include: your name, your email address, your phone number, the area of the country you live in, and the IP address you use when submitting a request, making a subscription or leaving a comment.

3. Use of your personal data

Our website services are provided by Hackney ACT. Your personal data will be processed for the purposes of contacting you, keeping you updated or enabling you to share feedback with us.

We use your personal data to:

  • contact you if you have a query or are offering us assistance

  • contact you if you have requested joining or supporting Hackney ACT

  • with your consent, send you updates of our work and public meetings through our newsletter and email

  • contact you in relation to work requiring direct communication with members of Hackney ACT’s committee and task and finish groups

If you’ve submitted a comment using your name and email on our online website or blog pages, these details may be published online. We won’t publish or share any other personal information about you.

For the purpose of all activities, including research carried out by Hackney ACT, we consider that the lawful basis for processing your data is that we are engaged in carrying out a task in the public interest.

The processing is necessary for the performance of a public task, namely activities that supports or promotes democratic engagement to ensure the safeguarding of children with African heritage in educational institutions (UK GDPR Article 6 (1) (e) and DPA 2018 (8)).

For the purpose of informing you about the status of our work and activities, we rely on your consent to send updates to an email address provided by you (UK GDPR Article 6(1)(a)).

Where there is a requirement to provide special category data, any information you provide which includes racial or ethnic origin; religious or philosophical beliefs; trade union membership; genetic and biometric data; health data; sex life or sexual orientation will be considered necessary for reasons of substantial public interest. In these instances, we will request your consent for ethical and confidentiality purposes. Where such research does not involve fully anonymised data we will hold your personal data safely, and where possible in an encrypted form.

Details about the lawful basis for processing personal data can be found on the Information Commissioner’s website.

4. Sharing your personal data

We may share or disclose your personal data with:

  • Suppliers and contractors of goods or services contracted by Hackney ACT in relation to the purpose of fulfilling a public task.

  • Other organisations where there is a lawful basis to do so or a duty to disclose in order to comply with any legal obligation. For example, the Police, for the purposes of prevention and detection of crime

We will never share or sell your personal data to other organisations for direct marketing purposes.

5. Retention and security of your personal data

We will retain your personal data for as long as is necessary for the purpose it was collected.

We take the security of your data seriously. All personal data you provide to us (whether electronically or in paper form) will be stored securely in accordance with our policies. We have technical and organisational security measures in place to oversee the effective and secure processing of your personal data and to minimise the possibility of the loss or unauthorised access of your personal data.

Some personal data controlled by us is held outside the UK, including on data servers in the European Economic Area (EEA). Under the Data Protection Act 2018, all countries within the EEA are regarded as providing an adequate level of data protection. We would not transfer personal data to a person in a country outside the UK or EEA unless satisfied that that person and country had safeguards in place to protect personal data.

6. Your rights

We will ensure you can exercise your rights in relation to the personal data you provide to us in accordance with UK GDPR and DPA 2018. Under data protection law, you have the right to:

  • The right to be informed

  • The right of access

  • The right to rectification

  • The right to erasure

  • The right to restrict processing

  • The right to data portability

  • The right to object

  • Rights in relation to automated decision making and profiling.

Where we are relying on your consent to use your personal data, you can withdraw that consent at any time by contacting the Data Protection Officer at hello@hackneyact.org.uk. However, we may take the decision to continue processing your data, even following a request by you to stop, if we consider it necessary for the purposes of our legitimate interests or those of a third party when balanced against your interests and rights. In these circumstances you will be advised of the decision and the reason for it.

If you have any concerns relating to the use of your personal data, you may complain to the Data Protection Officer.

You also have the right to complain to the Information Commissioner, the supervisory authority, about our processing of your personal data. They can be contacted at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Further details about your rights can be found on the Information Commissioner’s website.