Privacy Policy

Heritage Care is committed to protecting and respecting your privacy.

This Policy explains when and why we collect personal information about people who visit our websites, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this Policy.

Any questions regarding this Policy and our privacy practices should be sent by email to: dataprotection@heritagecare.co.uk.

You may also contact us by mail by writing to: Data Protection: Connaught House, 112-120 High Road, Loughton, Essex, IG10 4HJ.

Who are Heritage Care?

Heritage Care is a Not-For-Profit company Limited by Guarantee and a Registered UK Charity.  We work with people across the country with a broad range of support needs because of the aging process, disability and mental health needs.

Heritage Care Limited is a Company Limited by Guarantee Registered in England & Wales Co. Number 07211819 and a Registered Charity Number 1135353. Web site: www.heritagecare.co.uk
and www.hcstaff.co.uk.

Community Options, Credo and Branching Out are used as trading names of the mental health services within Heritage Care. Web site: www.community-options.org.uk.

Inspire Mental Health Consortium is also used as a trading name of Heritage Care for the delivery of a number of mental health services within the London Borough of Tower Hamlets.  Web site: www.inpsire-wellbeing.org.uk.

Amber Housing is a wholly owned subsidiary of Heritage Care and Registered Society Number: 30052R. Web site: www.amberhousing.co.uk.

The Registered Address for all correspondence is: Connaught House, 112-120 High Road, Loughton, Essex, IG10 4HJ. Telephone: 0208 502 3933.

How do we collect information from you?

We get information about you when you use our website, for example, when you use a contact form, visit our website to learn about our services, if you make a donation to us, book and pay for a training course with us online or sign up for a digital newsletter.

What type of information do we collect from you?

a) Information you voluntarily provide to us: When you send us an email, use a contact form on our websites, sign up for a digital newsletter, book a training course, instigate a ‘live chat’ online or communicate with us in any way, you are voluntarily giving us information that we collect. That information may include your name, physical address, email address, IP address, phone number, as well as details including your location, purchase history, and other demographic information. By giving us this information, you consent to this information being collected, used, as described in this Privacy Policy.

If you make a donation online or purchase a training course from us, your card information is not held by us, it is collected by our third party payment processor, who specialise in the secure online capture and processing of credit/debit card transactions, as explained below.

(b) Information we collect automatically: When you use or browse one of our websites, we may collect information about your visit to our websites and your web browsing. That information may include your IP address, your operating system, your browser ID, your browsing activity, and other information about how you interacted with our websites or other websites. We may collect this information as a part of log files as well as through the use of cookies or other tracking technologies. Our use of cookies and other tracking technologies is discussed more below, and in more detail in our Cookie Statement.

How is this information used?

This information is used to:

  • Process a donation that you have made;
  • Process a booking on a training course that you have made;
  • Carry out our obligations arising from any contracts entered into by you and us;
  • Respond to an enquiry you have made about the organisation and its services via our websites;
  • Conduct a ‘live chat’ online;
  • Send you a digital newsletter;

We review our retention periods for personal information on a regular basis and have a Data Retention Policy. A copy of which may be requested by contacting: dataproterction@heritagecare.co.uk.

We are legally required to hold some types of information to fulfil our statutory obligations (for example the collection of Gift Aid). We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us.

Who has access to your information?

We will not sell or rent your information to third parties.
Access to data is only on a ‘need to know’ basis within Heritage Care.
We will not share your information with third parties for marketing purposes.

Third Party Service Providers working on our behalf: We may pass your information to our third party service providers, agents subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example to process your donations to us). However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we require them to keep your information secure and not to use it for their own direct marketing purposes. We will not release your information to third parties unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.

When you are using our secure online donation pages, your donation is processed by a third party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions. If you have any questions regarding secure transactions, please contact: dataprotection@heritagecare.co.uk.

We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, or if we’re under a duty to disclose or share your personal data in order to comply with any legal obligation or to enforce or apply our terms of use or to protect the rights, property or safety of our supporters and customers. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.

Social media platforms and widgets. Our Websites include social media features, such as the Facebook ‘Like’ button. These features may collect information about your IP address and which page you are visiting on our Website, and they may set a cookie to make sure the feature functions properly. Social media features and widgets are either hosted by a third party or hosted directly on our Website. We also maintain presences on social media platforms including Facebook, Twitter, and Linkedin. Any information, communications, or materials you submit to us via a social media platform is done at your own risk without any expectation of privacy. We cannot control the actions of other users of these platforms or the actions of the platforms themselves. Your interactions with those features and platforms are governed by the privacy policies of the companies that provide them.

What are your choices?

You have a choice about whether or not you wish to receive information from us.

We will not contact you for marketing purposes by email, phone, post  or text message unless you have given your prior consent. You can change your marketing preferences at any time by contacting us by email: dataprotection@heritagecare.co.uk.

How do you access and update your information with us?

We are working on ways to make it easier for you to review and correct the information that we hold about you. In the meantime, if you change email address, or any of the other information we hold is inaccurate or out of date, please email us at: dataprotection@heritagecare.co.uk.

You have the right to ask for a copy of the information Heritage Care Limited hold about you.

To process a subject access request the Charity requires Data subjects to complete the Subject Access Request Form Downloadable HERE.  

We will give you access to any Personal Information we hold within one month  of any request for information, starting from when it has received all the information necessary to identify the Data subject and fulfil the request.  Individuals may request to access, correct, amend or delete information we hold.  Unless it is prohibited by law or other statutory requirements we will remove or update your information.

We will not normally charge a fee, however if the request is manifestly unfounded or excessive the Charity may use its discretion to charge a reasonable fee.  If this is the case the Data Subject will be promptly contacted.

Security precautions in place to protect the loss, misuse or alteration of your information. When you give us personal information, we take steps to ensure that it’s treated securely. Any sensitive information  is encrypted and protected with 128 Bit encryption on SSL. When you are on a secure page, a lock icon will appear on the bottom of web browsers such as Microsoft Internet Explorer.

Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.

Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Use of ‘Cookies’

Like many other organisations, Heritage Care Limited websites use Cookies.

Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. For example, we use cookies to store your country preference. This helps us to improve our website and deliver a better more personalised service.

It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer, visit our full Cookies Policy. Turning cookies of may result in a loss of functionality when using our websites.

Links to other websites

Our websites may contain links to other websites run by other organisations. This Privacy Policy applies only to our websites‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.

16 or Under

We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.

Review of this Policy

We keep this Policy under regular review. This Policy was last updated April 2018.