National Communities Resource Centre Privacy Notice

The National Communities Resource Centre (NCRC) is part of the Regenda Group and provides training for tenants, residents and front-line staff.

This privacy notice tells you what to expect when NCRC collects your personal information.

This privacy notice will tell you:

• What information we process and why
• Who we might share your information with
• The lawful basis for processing your information
• How long we will retain your information
• How we keep your personal information safe
• What your rights are

What information does NCRC process?

We collect personal information to keep you updated on events and services and to ask for your thoughts.  This typically includes collecting the following information:

• Name, job title, email address, geographical region, organisation address, telephone number.
• Interactions you have had with us, such as attending an event.
• Financial information as part of your registration, booking or donation.
• Using the information above, we keep a record of the types of future events we think you may be interested in.

Why we need your personal information

We collect your personal information to manage events and may contact you to:

• Promote events
• To inform you about policy updates and reports
• To request feedback and input for consultations and research projects
• To update you on our latest products and services.

If you have consented to receive updates you can opt-out at any time.

Sharing your information

We will not share your personal information without your consent or allowed you to do so by law. We are legally required to share information in the following circumstances:

• Safeguarding
• Prevention or detection of crime
• Apprehension or prosecution of offenders
• Assessment or collection of tax or duty owed to customs and excise in connection with legal proceedings
• Public health
• To comply with the law.

We won’t share your personal information with anyone who claims to represent you unless we are satisfied that you have appointed them, or they act in some recognised official capacity.

How we keep your information safe

We apply appropriate security measures to ensure your personal information is secure.

When we need to share your information with our partners or third parties, we have data-sharing agreements with them that set out their responsibilities.

How long do we keep your personal information?

We retain information for different timescales based on the following criteria:

• When you attended training
• If there is a time period set by law
• Any recommended time periods set by our regulators

If you would like further information about how long we keep certain types of information, please contact dataprotection@regenda.org.uk  

Lawful basis for processing your information

National Communities Resource Centre will use one or more of the following reasons to lawfully process your information:

• Contract: It is necessary for managing your contract with NCRC
• Consent: You have given your explicit consent
• Legitimate Interest: It is in the legitimate interest of NCRC or a third party
• Legal Requirement: It is required by law

Legitimate Interest

Legitimate interest is one of the legal reasons we may process your information.  Taking into account your interests, rights and freedoms, we have carried out Legitimate Interest Assessments which allow us to:

• Communicate with you to keep you updated on our services.
• Retain and process next of kin and emergency contact details.
• Carry out customer surveys with a third party to help us improve services to you.
• Operate CCTV in and around some of our offices.
  

Consent

We may use your personal information to send you marketing information by post, phone, through social media, email and text message.

We can only use your personal information to send you marketing material if we have your permission or we have a legitimate interest as described above.

If you do not want to receive marketing from us, please contact dataprotection@regenda.org.uk to update your contact preference.

With your consent, we may also use your images and video footage (including interviews) to promote NCRC services.  

Images and footage may be published on any of the following channels:

• press and media (including newspapers, magazines, websites)
• on our websites
• on our social media feeds including LinkedIn, Twitter, Facebook and other corporate social media accounts in the future
• in our printed publications such as newsletters, brochures, flyers and display materials
• in our electronic newsletters
• Media releases

The images/footage will often be accompanied by the details of your story, however, we will not use personal details or the full name of any individual in an article.

If you no longer wish for your image or personal information to be used, please contact dataprotection@regenda.org.uk and ask us to remove them from the archive. Please note that we will be unable to remove any images or content in printed materials or video footage if it has already been produced or remove images and quotes that have already been published by the media.

People who contact us via social media

We use a third-party provider, Hootsuite to manage our social media interactions.

If you send us a private or direct message via social media, the message will not be shared with any other organisation.

NCRC retains social media messages for 3 months.

Visitors to our websites

National Communities Resource Centre uses a third-party service to help maintain the security and performance of the NCRC website. To deliver this service it processes the IP addresses of visitors to the NCRC website.  This information is not used for identifying purposes, except for investigation if an intrusion occurs.

The NCRC website uses cookies. Cookies are small text files placed on your computer by the websites you visit. They are used to help make websites work efficiently. You can control cookies through the settings of your web browser. To find out more, visit www.aboutcookies.org or www.allaboutcookies.org

Your Data Protection Rights

You have the following data protection rights:

Right of access:  If we hold personal information about you, you have the right to access and receive a copy.

You can make a request verbally or in writing, including via social media.

A third party (e.g., relative, friend or solicitor) may make a request on your behalf, however, we require written authority from yourself stating that you give the third-party permission to make this request on your behalf.

We have one month from the date we receive your request to provide you with the information.

Right to rectification: If you think that NCRC is holding incorrect personal information about you, you have the right to have this personal information corrected.

Right to erasure: the right to have certain information about you erased.

Right to restrict processing: the right to request the limited use or restriction of your personal information in certain circumstances.

Right to object: the right to object to the processing of your personal information where we are processing for our or a third parties’ legitimate interest, or we use your information for direct marketing.

Right to data portability: the right to have your personal data transferred to another data controller.

Complaints or Queries

NCRC aims to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of NCRC’s collection and use of personal information. However, we are happy to provide any additional information or explanation. Any requests for this should be sent to the address below.

If you have a query or want to make a complaint about the way we have processed your personal information, you can contact us at:

Data Protection

National Communities Resource Centre

The Foundry

42 Henry Street

Liverpool
L1 5AY

Email: dataprotection@regenda.org.uk

Call us on: 0151 703 3000

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can make a complaint to the Information Commissioner’s Office (ICO).

To find out how to contact the ICO, visit their website: https://ico.org.uk/

Changes to this privacy notice

We keep our privacy notice under regular review. This privacy notice was last updated on 09 September 2021.