Privacy Policy

Who we are

St Helens and District Scouts take the issue of privacy very seriously and we are committed to protecting and respecting our users’ privacy. This Privacy Statement sets out our current data processing practice.  If you have any queries or concerns regarding these practices, you should contact us at [email protected]

Our website address is: https://sthelensscouts.org.uk.

Our address is:
St Helens Scouts District Head Quarters

Hawthorne Rd

 Sutton Leach

St Helens

WA9 4PS

Registered charity number: 1053261 (https://register-of-charities.charitycommission.gov.uk/charity-details/?regId=1053261&subId=0  )

ICO Data protection register

Registration number: ZA788494

URL: https://ico.org.uk/ESDWebPages/Entry/ZA788494

What personal data we collect and why we collect it
Any personal information you provide to us including and similar to your name, address, telephone number and e-mail address will not be released, sold, or rented to any entities or individuals outside of The Scout Association (UK).

Contact forms
We use a number of different contact forms on the website this section details what information we collect and how long we retain each submission and who we pass it on to. We do not collect the public ip address of the device summiting the request. All data provided by contact forms is processed  under legal basis:
‘the data subject has given consent to the processing of his or her personal data for one or more specific purposes’

FormPersonal Data collectedWhy we need it Who we share it with
Express Interest in Volunteering FormYour Name (First and last name)Email MobileWe need this formation so we are able to contact you back about the Volunteering opportunitiesWe will share your information with the group
Let’s find the right fit for you FormNameEmailPhone PostcodeThis Forms allows us to find the best Volunteering role.This information is passed onto Volunteering requirement team via email. Who may pass your information on to scout group with in St Helens
Register interest in Joining FormYour nameEmail AddressMobileGroupChilds NameAgeMessageWe need this information to able to check with our local groups to see place is availableThis information will be passed to your chose of scout group
Contact UsEmailName MessageWe use your email address to reply to your question andThis information is passed from our website to our helpdesk so we can answer your request
Newsletter SignupFirst name or full nameEmailWe use your email address to send you our monthly newsletter.We do not share your information.

Cookies

To view cookies click on the the https://sthelensscouts.org.uk/cookie-policy-uk/ to view the policy

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics (Google Analytics)
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Wordfence Security (IP Address)

Our website uses the Wordfence Security service of Defiant Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA (“Wordfence”)

to secure our online offerings and to protect our website against unauthorized access or malicious cyber attacks. As part of this service, our website connects to Wordfence’s servers to compare the database with the accesses made to our website and to block them if necessary.

Wordfence is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most effective protection of his website against cyber attacks. If the appropriate consent has been requested, processing will be carried out exclusively on the basis of Art. 6 para. 1 letter a GDPR; consent may be revoked at any time.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Further information on the collection and use of data by Wordfence can be found at: https://www.wordfence.com/help/general-data-protection-regulation

Cloudflare (IP Address)

We use the service “Cloudflare”. The provider is Cloudflare Inc, 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”).

Cloudflare offers a globally distributed content delivery network with DNS. This technically routes the transfer of information between your browser and our website through Cloudflare’s network. This enables Cloudflare to analyze traffic between your browser and our website and serve as a filter between our servers and potentially malicious traffic from the Internet. In doing so, Cloudflare may also use cookies, but these are used solely for the purpose described here.

We have entered into an order processing agreement with Cloudflare. Cloudflare is also a certified participant of the “EU-US Privacy Shield Framework”. Cloudflare has committed to handling all personal data received from European Union (EU) member states in accordance with the “Privacy Shield Framework”.

The use of Cloudflare is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 lit. f GDPR).

You can find more information about security and data protection at Cloudflare here: https://www.cloudflare.com/privacypolicy/ .

Who we share your data with

Any personal information you provide to us including and similar to your name, address, telephone number and e-mail address will not be released, sold, or rented to any entities or individuals outside of The Scout Association (UK).

We may share data supplied by you with other parts of The Scout Association (e.g. Groups with St Helens District and Merseyside).

Your Ip Address will be shared with Wordfence who provide security plugin for our website Further information on the collection and use of data by Wordfence can be found at: https://www.wordfence.com/help/general-data-protection-regulation

How long we retain your data

This section covers how long we retain your data. If we pass your information onto our local scouts’ groups, they will have their own data retention as they are their own Data Controller.

Contact forms

FormData retention
Express Interest in Volunteering Form60 Days
Let’s find the right fit for you Form60 Days
Register interest in Joining Form60 Days
Contact Us7 Days (on website) 2 months after case is closed on Freshdesk
Newsletter Signup 

Analytics (Google Analytics)

Google analytics retain data for 26 months

Wordfence Security (IP Address)

Wordfence firewall traffic including ip address are kept for 30 days

Cloudflare

Cloudflare only stores them for 30 days. After 30 days, source IP addresses are discarded, and the logs are rolled up first into 1-hour groups, then 1-day groups. The 1-hour rollups are stored for 6 months. The one-day rollups are stored for 1 year


What rights you have over your data

Under the UK Data Protection Act (DPA) 2018 you have below rights to your data. More information on your rights can be found on the Information Commissioner’s Office website https://ico.org.uk/your-data-matters/

  • Your right to be informed if your personal data is being used-An organisation must inform you if it is using your personal data.
  • Your right to get copies of your data-You have the right to find out if an organisation is using or storing your personal data.
  • Your right to get your data corrected-You can challenge the accuracy of personal data held about you by an organisation.
  • Your right to get your data deleted-You can ask an organisation to delete personal data that it holds about you.
  • Your right to limit how organisations use your data-You can limit the way an organisation uses your personal data.
  • Your right to data portability-You have the right to get your personal data from an organisation in a way that is accessible .
  • The right to object to the use of your data-You have the right to object to the processing or use of your personal data in some circumstances.
  • Your rights relating to decisions being made about you without human involvement-Decisions are made about you when your personal data is processed automatically.
  • Your right to access information from a public body-Make a request for information from a public body.
  • Your right to raise a concern-Tell an organisation if you’re concerned about how they are using your data.

Where we send your data

All personal information and details held on and processed by computers situated in the United Kingdom. We use the below systems to process any data from our website

-Website is hosted in the UK on Microsoft azure

-Help Desk – Freshworks Inc.  (https://www.freshworks.com/privacy/ )

-Cloudflare https://www.cloudflare.com/privacypolicy/

Additional information

What third parties we receive data from
We do not receive data from third parties

What automated decision making and/or profiling we do with user data
We do not use any automated decision making and/or profiling we do with user data

Industry regulatory disclosure requirements

Data protection is currently regulated under the Data Protection Act (DPA),  the General Data Protection Regulation (GDPR) will apply from the 25th May 2018.

You can obtain further information about data protection laws by visiting the Information Commissioner’s website at https://ico.org.uk/ .

The Data Controller is the St Helens and District Scouts Trustee Board.

We reserve the right to communicate a customer’s personal information as we hold to third parties who are empowered by regulation, statute or order of a court.

We have security measures in place to protect our customer database. Access to this database is restricted internally.