Privacy policy

St Giles Trust, helping disadvantaged people.

We work in prisons and communities across the UK. We are a registered charity (no. 801355). We act as the ‘Data Controller’ for personal data we collect on our own behalf and are registered with the Information Commissioner’s Office, our registration number is Z5400841. We also act as the ‘Data Processor’ to deliver some services to our Clients. If you have any questions about this statement or our privacy practices please contact us using the details below.

How to contact us;

Registered address: Georgian House, 64-68 Camberwell Church Street London SE5 8JB

Email: info@stgilestrust.org.uk

Phone: 020 7708 8000

We will collect personal data if you require our services, use our website, contact us, attend one of our events, work and/or volunteer for us.

This may be in digital or paper format, such as;

• Your IP address, browser and other details of the electronic devices you use when visiting our website.
• Your name, address, contact number and email address, these are used when you are a client and we will need these details to provide you with our services.
• Credit or debit card details – these are also required if you are making a donation to us via your card. (St Giles Trust cannot access credit card details of online donations).
• Bank details, national insurance number and next of kin details are required for employees.
• Monitoring information such as racial or ethnic origin or information on disabilities so that we are able to report on these areas and improve our services and working environment.
• From time to time, we may have your image, such as when we take photos at events, we may use these images in newsletters and other publicity materials.
• We may also hold your digital image on our CCTV in our offices.

As an individual, you have these legal rights over your personal data:

• to be informed about its use
• to have it corrected
• to have it erased when we have no lawful basis to continue processing it
• to restrict its use
• data portability - to receive a copy of information you have provided to us in electronic format (where processing is done under Consent or Performance of a Contract)
• to object to its use (where processing is done under Legitimate Interest)
• to object to automated decision-making and profiling

Please use the contact details at the top of this statement if you want to exercise any of your rights. We consider each request in accordance with all applicable data protection laws and regulations and may ask you to provide proof of your identity before taking any actions. You also have the right to lodge a complaint about our use of your personal information with the Information Commissioners Office at the following website address: https://ico.org.uk/concerns/

St Giles Trust currently use manual profiling methods to segment and profile donors based on various attributes and fields we track in our database. This is used to help us understand our donors better and to help us scope new fundraising opportunities from similar audiences.

We use the personal data you provide so we can help you. We will always ask for your consent to share details with other partners or agencies that may be able to provide services; these agencies may include housing, social services, substance misuse, benefits & employment agencies, except in instances where there are safeguarding issues, where we may provide authorities such as the police information under legitimate interest to protect people where necessary.

Any information you provide during the application process such as your CV, will only be used for the purpose of progressing your application. We use the contact details you provide to give updates on your application.

We will use the other information you provide to assess your suitability for the role you have applied for during shortlisting and, if applicable, interviews.

During the offer process we ask for equal opportunities information (so we can produce and monitor equal opportunities statistics) and details of referees that we will then contact.

New starters are asked to provide bank details (so we can pay you), emergency contact details (so we know who to contact if you have an emergency at work)

We are required to confirm the identity of our staff and contractors their right to work in the UK by asking you to provide proof of identity.

We may ask you to complete a questionnaire about your health to establish your fitness to work; we share personal data to perform health checks with suppliers of these services.

We may need to perform a Disclosure and Barring Service (DBS) check if the role involves working with vulnerable groups of people; we share personal data to perform DBS checks with suppliers of these services.

We need to share some details with our payroll and pension providers, and our bank, to the extent that we can pay you and into your pension. We use a secure online HR system to hold HR data.

Our website use secure (“HTTPS”) connections to protect data. However, as is the case with all websites, we are not able to guarantee security for data collected through our sites. We have physical, technical and administrative controls in place to protect personal data from unauthorised access, use and disclosure. We evaluate these safeguards on an ongoing basis to minimise risks from new security threats as they become known. We use carefully selected partners to provide us with services including the support of IT and computer systems. Our contractual terms with these suppliers include confidentiality clauses to respect the privacy of any personal data they come into contact with as a result of performing their tasks.

All paper forms of data where needed are stored securely in our offices along with any digital recordings (CCTV) where applicable.

We take the securing of data very seriously and all staff and volunteers are trained in GDPR and safeguarding to ensure that we are always compliant.  If there is ever a breach of data or risk we work immediately to mitigate these and address them as soon as they are identified.

We will share personal data is there if a legal obligation or duty to do this, such as fraud protection or to enforce or apply our contractual terms.

We process personal data in these circumstances on the basis on Legitimate Interest for preventing crime or suspected criminal activity or enforcing our terms.