This policy sets out how Sefton Palm House collects and uses data that is given when you use our website.
- Why we collect your data
We only collect personal data that is submitted with a user’s consent through one of our online forms for the purposes of marketing or communication.
We do not collect sensitive data such as information on health, race, sexual orientation, religion or political beliefs. The information we collect will be limited to that required for the function that we collect the data for and that helps us to serve you as a user.
We also collect anonymised data on your navigation and interactions on out site for the purposes of tracking usage and performance information about our website. This data is used by use to improve our website, and it does not identify you as an individual.
3.How we collect your data
3.1 Cookies and analytics
Our website makes use of Google Analytics to track and monitor how visitors use our site. As a user navigates between web pages, Google Analytics records information about the page a user has seen, for example the URL of the page.
We have enabled IP anonymisation and have disabled User ID tracking, to ensure no personally identifiable data is included in these cookies.
In addition the following cookies are used for the following purposes:
|PHPSESSID||Used by our platform to remember your actions from page to page||session|
|DYNSRV||This cookie is added by our load balancer to track which web server to send the visitor to. Its purpose is to improve the performance of the website.||session|
Most internet browsers will give you the option of disabling all cookies but this can have a negative impact on your browsing experience. It will also limit our ability to track user behaviour and make future improvements to our site.
Please refer to support pages for your particular browser for more details. To opt out of Google Analytics, you may use this tool provided by Google.
Our newsletter sign up form collects your email address and is stored locally on our website database before being added to our mailing list. We may gather statistics around email opening and click rates to help us monitor and improve our newsletter.
3.3 Contact Form
We collect your given details with your consent through our contact forms. Your inputted data is transferred to our CRM system (OpenCRM) where it can be processed and responded to by a suitable member of staff. The data we ask for is limited to what we need to give you the best service does not include sensitive information.
- How we use your data
We do not share your personal data with any third parties.
For newsletter subscriptions, your email address will be added to our mailing list and will be used for this purpose only.
Information you provide through our contact forms is used to ensure we are able to contact you in response to your enquiry in the most appropriate manner. [Insert information about how you use and store data in your CRM system. Include details about who has access, how long you store a person’s details and what you use it for.]
- Who is responsible for your personal data
**Include information here about who is your designated data controller and state which services you use to store information. You can make reference to Google Analytics, mail service provider and OpenCRM
- Your data rights
6.1 Right to access
You may contact Sefton Palm House at any time to request a copy of the personal data we have on record. This should be done by emailing us at [Data Controller Email Address or other contact details]. There is no charge for this service.
6.2 Right to update
You may contact us to update the personal information we hold if it is no longer correct by emailing [Data Controller Email Address or other contact details].
6.3 Right to data portability and access
You may request a copy of any personal data we store so that you may confirm its accuracy or reuse the data for your own purposes, as well as to enquire how your data is being processed. Please contact us at [Data Controller Email address or other contact details] to make your request.
6.3 Right to opt-out or restrict processing
All direct marketing communications will be done through email, and will only be sent to those user who have given their consent for us to do so. All email newsletters will contain an unsubscribe link, which you may use to opt-out of any further marketing communications.
You may also request that we restrict processing of your data. This means we are able to continue to store your data, but can no longer make use of it. You may make this request verbally or by emailing us at [data controller email address or other contact details].
6.4 Right to erasure
You have the right to request we delete all personal data from our systems at any time. In some circumstances, outlined by the GDPR we can refuse this request. In all other cases we will ensure your data is removed within one month. You may make this request verbally or by emailing us at [data controller email address or other contact details].
6.5 Right to be informed
If there is ever a security breach of our data storage systems, we will inform all users of the level of risk that their personal data has been obtained.