Privacy

Visitors to our website

Legal basis for processing data: The legal basis we rely on to process your personal data is either Article 6(1)(a) of the GDPR, for example when we require your consent for the optional cookies we use, or article 6(1)(f) of the UK GDPR, which allows us to process personal data when its necessary for the purposes of our legitimate interests. The purpose for implementing all of the below on our websites is to maintain and monitor the performance of our websites and to constantly look to improve the site and the services we offer to our users. 

Analytics: When you visit our websites we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

If we do collect personal data through our website, we’ll be upfront about this. We’ll make it clear when we collect personal information and we’ll explain what we intend to do with it.

If you are aged 16 or under‚ please get your parent/guardian's permission beforehand whenever you provide us with personal information.

Cookies: You can read more about how we use cookies on our Cookies page. We use a cookies tool on our website which requires explicit opt in action by users of our website. This will apply to the non-necessary cookies.

Your rights: As we are processing your personal data for our legitimate interests as stated above, you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

If you contact us through the website

Why we process your data: we will only process your data in order to respond to your query (if applicable).

Legal basis for processing data: we process your data under the basis of ‘legitimate interests’.

Using our online forums

Why we process you data: we process the personal data you provide in order to be able to offer a forum service where individual posts can be responded to and moderated when necessary.

Lawful basis for processing data: we gain your consent to process your personal data when you sign up to use the forums.

How long we will store your data: we will store your data for as long as you are using the forums, and for up to three years after your last post. Users inactive for more than three years will be deleted from the system.

Your full name and email is not displayed on the forum. When you post personal information on a discussion board on our forum your information is publicly accessible. Such information can be viewed online and collected by third parties. We are not responsible for the use of information by such third parties. 

When contributing to a discussion we strongly recommend you avoid sharing any personal information that can be used to identify you (such as your name, age, address, name of employer). We are not responsible for the privacy of any identifiable information that you post in our forum or other public pages of our websites.

Data processors
We use third party data processors to host our forums. They are based outside the UK but hosted on AWS and comply to GDPR.

Using our online parenting courses

By signing up to one of our online courses, you are giving your consent for us to process your data. We use Coassemble to provide this service and they are based in Australia. Please note that your data will be processed outside the UK and EEA. We have an agreement in place with the data processor. You can read Coassemble’s Privacy Policy for further information.

People who contact our Family Lives support helpline, email or livechat service

Why we process your data: We process your data in order to provide you with our services. For some calls where you have agreed you wish us to refer you to another service, we will, with your consent, process personal information which is shared with the other service provider.

We also record some anonymous statistical information on each call where the caller agrees, to report on and improve our service. This includes information such as gender, age, income and how the call has helped you. This information never reports about specific people. We use anonymised statistical data about callers to our helpline and other services in our reports to the Data Controller and marketing material.

Email and livechat - we process the data provided when you contact us (eg name and email address) in order to respond to your request. Our workers can see your email address when you contact us.

Lawful basis for processing data: We rely on our legitimate interests to process your information, or on your consent, such as where you ask us to refer you to another service.

We’ll never pass on the information you provide during the call, email or chat to any other organisation, except in the following situations:

• We receive a call or correspondence about acts of terrorism or bomb warnings
• We receive a court order requiring us to share information
• We are working in partnership with another organisation and you have given consent for your information to be shared
• You threaten the safety of our call takers, email or livechat workers
• You are in a situation which has or could cause you harm, you have given us information that identifies you and you are unable to make decisions for yourself. This applies to all young people under 13, and in some circumstances to older children and adults. If we are worried about this situation, we will always talk to you about it first. 
• You provide information that identifies someone who has caused harm or says they are going to cause harm to a child or vulnerable adult

How long we keep your data

Where we have your personal information, we will store this for a maximum of 18 months after which it will be deleted. We store emails and chat transcripts for up to 3 years after which they will be deleted. 

Applying for a paid or volunteer role

Why we process your information: As part of any recruitment process, Family Lives collects and processes personal data. Our purpose for processing this information is to assess your suitability for a role you have applied for. If you apply for a role with Family Lives we will only use the information you supply to us to process your application and to monitor recruitment statistics.

What information do we collect? We will collect a range of information about you, this may include:

• Your name, address and contact details, including email address and telephone number
• Details of your qualifications, skills, experience and employment history
• Information about your current salary
• Whether or not you have a disability for which we need to make reasonable adjustments during the recruitment process
• Information about your entitlement to work in the UK
• Equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health, and religion or belief.  

For some roles Family Lives is obliged to seek information about criminal convictions and offences.This is necessary to carry out our obligations and exercise specific rights in relation to employment.

How do we collect your personal data? We collect it in a variety of ways. For example, you may have filled in an application form, or submitted a CV or resume, you may have provided your passport details or other identification documents, or we may have collected it through interviews or other forms of assessment, like online tests.

We may also collect information about you from third parties, such as references supplied by former employers. In all cases the application process will make clear at what point we will be contacting third parties.

Lawful basis for processing your data
For paid roles: we need to process your data in order to enter into a working agreement with you. In some cases we need to process your data to ensure we are complying with our legal obligations, eg checking an individual’s right to work in the UK.

The lawful basis we rely on for processing your personal data is article 6(1)(b) of the GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.

To process any special category data, such as health or ethnicity information, we rely on article 9(2)(b) of the GDPR relating to our obligations under employment law and safeguarding your fundamental rights, and article 9(2)(h) for assessing your work capacity as an employee. Any data about criminal convictions is processed to comply with our legal obligations.

Under the Data Protection Act 2018, we process data under Schedule 1 part 1(1) and (2)(a) and (b) which relates to processing for employment, the assessment of your working capacity and preventative or occupational medicine.

For volunteers: To process your personal data we rely on our legitimate interests. To process any special category data about you we will seek your consent. Any data about criminal convictions is processed to comply with our legal obligations.

Family Lives will not use your personal information for any purpose other than the recruitment exercise for which you have applied.

How long will we keep your data? Personal information about unsuccessful candidates will be held for one year after the recruitment exercise has been completed, it will then be destroyed. Interview notes for all unsuccessful applicants are destroyed after one year. We retain de-personalised statistical information about applicants to help inform our recruitment activities, but no individuals are identifiable from that data.

If your application is successful, personal data gathered during the recruitment process will be transferred to your personnel file and will be retained in accordance with our retention policy.

Where will we keep your data? 
Paid roles:Your personal information will be stored, securely, in several places: in our HR database and on other internal IT systems.
Volunteer roles: Your personal information will be stored securely in several places: our internal network and email system.

Who has access to your data? Your information will be shared internally for the purposes of the recruitment exercise. This includes members of the HR and recruitment team, interviewers involved in the recruitment process, managers in the business area with a vacancy and IT staff if access to the data is necessary for the performance of their roles.

As part of the recruitment process we may need to share your data with third parties in order to conduct any necessary background checks and vetting processes, such as contacting previous employers/referees to obtain a reference; and/or the Disclosure and Barring Service to conduct criminal record checks. As part of the recruitment process, we will make clear to you which checks will be required and at what stage of the process.

Your rights to your data

Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information. You can find more information about this on the Information Commissioner’s Office website.

Accessing your data: You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process. 

Correcting your data: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies. 

Erasing your data: You have the right to ask us to erase your personal information in certain circumstances.

Restricting processing: You have the right to ask us to restrict the processing of your information in certain circumstances. 

Object to processing: You have the right to object to processing if we are able to process your information because it is in our legitimate interests. 

Data portability: This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent.

You have a right to access data that Family Lives holds about you (personal data) and be given access to your information within 30 days of request in accordance with the Data Protection Act 2018 and the General Data Protection Regulations. You can request your personal information by email to info@familylives.org.uk or by writing to: Data Controller, Family Lives, The Annex York House, Salisbury Square, Hatfield, Hertfordshire, AL9 5AD..

There is no charge for this. It will help us to find your information if you can tell us something about the nature of your contact with us e.g. which service, your geographic area. We want to ensure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate. You may be asked to provide proof of your identity.