Data Protection Policy

Purple Warriors takes very seriously the privacy of all those who either use the services offered by the charity, are considering doing so, or who are in some other way connected with what we do.

How do we collect information/data?

We collect personal information/data from anyone who visits our website, enquires about our activities using our online forms, sends or receives an email, makes a donation to Purple Warriors, asks a question or provides us with personal information.

Our legal basis for collecting and processing information and data

In accordance with the General Data Protection Regulation, Purple Warriors’ legal basis for collecting data is consent, legal obligation, and legitimate interest.

For certain ways in which we process your data, we must obtain your consent (for example, passing your details to third parties, except where doing do is because Purple Warriors is required to be in compliance with the law). When individuals become members of Purple Warriors, their consent for us to use certain information is a pre-requisite for membership.

We have a legal obligation to process your data for some matters.  For example:

• full members of Purple Warriors are classed as vulnerable adults and we need to maintain records of their impairments (for our risk assessments); and
• we need to manage information about those officials and volunteers and other individuals who have had checks made on them with the Disclosure Barring Service).

Finally, we have a legitimate interest in collecting your information/data to enable us to manage your involvement with Purple Warriors.  Examples include:

• managing attendance at an event or receiving support from one of our programmes;
• maintaining records of emergency contact information for those participating in our activities;
• making a charitable donation; and
• purchasing from Purple Warriors

What information/data do we collect?

The personal information/data we collect could include name, postal address, email address, date of birth, telephone number and payment card or bank details. We may also collect sensitive, information/data from beneficiaries and potential beneficiaries who are engaged with one of our programmes, such as information on military background, a photograph, and the nature of the impairment(s) of those individuals (necessary for our risk assessments).

We also gather general information/data about the use of our website such as which pages are visited the most, and which services or events are of most interest. We may use this information/data to make improvements to our website and ensure it delivers the best service for our users. Wherever possible, information/data is anonymised to prevent the identification of individual visitors to our website.

Access Rights and Requests

All individuals have the right to see what personal information/data is held about them. Subject access requests must be submitted in writing to our Data Protection Officer.

Anyone who receives one of our group emails (for example to advertise an upcoming event) can elect to opt out of receiving further such correspondence.

Right to prevent the processing of your personal information/data

You can object to Purple Warriors processing your personal information/data if it is likely to cause, or is causing you, damage or distress. Such a request must be made in writing to our Data Protection Officer.

Do we share personal information/data with external parties?

We do not share or sell personal information with or to other third sector charities or third parties.

Purple Warriors will only disclose information/data when required to do so:

• by law;
• where there is deemed to be a Safeguarding risk;
• if the disclosure is necessary to support a criminal investigation;
• if requested by HMRC (for example for the support of a Gift Aid application); or
• where we have received your consent.

We will not sell any information/data about your web browsing activity.

Communication with Purple Warriors about this Policy

For subject access requests or other queries regarding this Policy, please contact:

Data Protection Officer

Purple Warriors

The Old Post House

Heath Road

Weybridge

KT13 8TS

Email: dpo@purplewarriors.org