Data Subject Rights Requests

Trevi General Privacy Policy

What is this Privacy Policy for?
At Trevi, we are committed to treating everybody’s personal information responsibly and being transparent and respectful in the ways that we handle your information. On 25 May 2018, the General Data Protection Regulation (GDPR) came into force, which required us to review and update our existing privacy policy. Our updated policy reflects your new rights. It explains how we use the information you share with us, and what measures we take to protect it.

Who are we?
In this policy, whenever you see the words ‘We’, ‘Us’ or ‘Our’ it refers to Trevi which includes our residential rehabilitation centre, Jasmine Mother’s Recovery, our Sunflower Women’s Centre and Daffodil Family Centre.

Our legal information is:
Trevi, registered charity no. 1075433, a limited company registered in England and Wales with number 03719502 and whose postal address is  Sunflower Women’s Centre, 29 Sutherland Road, Plymouth, Devon, PL4 6BW.

You can write to us on the address above or email us on office@trevi.org.uk or telephone us at 01752 255758.

How we collect personal information about you
The way we manage the information we might collect about you depends on the capacity in which you contact us, whether you’re a stakeholder, partner or professional, a member of the public, someone who may benefit from our services or a donor.

You may contact us and leave personal information with us directly or indirectly.

Directly:

• Making a referral to Jasmine Mother’s Recovery, Daffodil Family Centre or Sunflower Women’s Centre
• Being referred to one of our services or programmes
• Making a donation
• Signing up to an event
• Signing up to our e-newsletter
• Asking for information, such as further details about volunteering with us
• To apply for a job vacancy
• Visiting our website which uses cookies (read more about our cookies policy below)
• Completing any of our surveys or questionnaires we may use for research purposes
• Taking photos or making audio or video recordings

You may complete a form on our website, or you may give us your details via a phone call, email or on a paper form.

We also collect information from the individuals and families that we provide support for. This is discussed in detail with individuals and / or families during their first points of contact with us.

Or Indirectly:

• Giving your details and permission to share your details through a third party such as Virgin Giving or Just Giving or Enthuse
• Giving your details to an event registration website such as Eventbrite
• When you subscribe to a newsletter such as MailChimp
• When you respond to a survey using Survey Monkey

When you sign up for this type of online service, you should ensure you are happy with the organisation’s Privacy Policies. If you state that you are fundraising for Trevi and you opt in to being contacted by us, then your details will most likely be passed to us to allow us to administer your activity and your details will be added to our supporter database.

If you contact us on social media e.g. Facebook or Twitter, you agree to their terms and conditions and understand the information posted in the public domain is not confidential.

What data is collected
We will only ever collect the information that we need. We may collect personal information such as:

• Name
• Postal address
• Phone number
• Email address
• Date of birth (where appropriate)

• Information about your interests and hobbies etc.
• Your bank or credit card details (which will be destroyed and not retained once payment has been processed)
• We use cookies to collect information when you visit our website.  Details on cookies are below.

And, in addition for service users:

• Next of kin
• Contact we have had such as appointments
• Details and records of treatment and care, including notes and reports about your health
• Information from people who care for you and know you well, such as health professionals and relatives
• Criminal offences and convictions
• Information such as sexuality, race, your religion or beliefs, and whether you have a disability, allergies or health conditions.

And in addition, for supporters, where it is appropriate, we may also ask for:

• Information relating to your health (for example if you are taking part in a high-risk event such as a sky dive or challenge event)
• Why you have decided to donate to us. We will never make this question mandatory, and only want to know the answer if you are comfortable telling us.

What we do with your information
We will use the information you provide to:

• Understand your needs and provide you with a better service
• Fulfil your requests – such as applications for donations, competition entries, participation in events and campaigns, and provision of information.
• Process sales transactions, donations, or other payments and verify the financial transactions
• Thank you for your support
• Comply with charity law and other regulations
• Record any contact we have with you
• Provide tailored stewardship of our donors
• Communicate with our supporters
• To improve our services and to target our resources effectively.

Who we share your data with and why
Trevi promises never to sell or share your data with any third party for marketing purposes.

We may use your data to make some automated decisions on what information to send to you. If you have told us you only wish to hear about certain aspects of our work and activities, we will automatically deselect you from hearing about the aspects you have not selected.

When we use third party organisations to carry out business operations on our behalf, such as a mailing house, we will implement a contract with the company that requires them to:

• Abide by the requirements of the GDPR and successive legislation
• Treat your information as carefully as we would
• Only use the information for the purposes for which it was supplied

We may use data screening companies to check our records are up to date and accurate. These companies may use information from public records as well as checking against opt out services such as the Telephone Preference Service (TPS) and Fundraising Preference Service (FPS).

We may also need to disclose your details if required to by the police, regulatory bodies or legal advisors.

Storing your information
Trevi is committed to ensuring the security of your information. The information that we collect from you is stored on our databases (fundraising and service user databases).

The majority of our databases hold information within the European Economic Area however some of our suppliers run their operations outside the European Economic Area (EEA). Although they may not be subject to same data protection laws as companies based in the UK, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to this transfer, storing or processing at a location outside the EEA.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to this website; any transmission is at your own risk.

Trevi will retain the information that you provide to us for as long as it is needed to administer the relationship we have with you and for the purposes for which it was originally intended. All data held is protected using up to date industry standard procedures to keep it safe and secure and to prevent loss or unauthorised access. In some cases, we will need to retain your details to meet legal requirements, such as the records we are required by law to keep regarding Gift Aid.

When we do not require your information any more, it will be disposed of securely.