Please read the following carefully to understand our policy and procedures regarding your personal data.
For the purpose of the Data Protection Act 1998 and General Data Protection Regulation (EU) 2016/679 (GDPR) and any subsequent UK data protection legislation the data controller for the data we collect from you is Gravitas Outcome Services CIC, Slade & Cooper Ltd, Beehive Mill, Jersey St, Ancoats, Manchester M4 6JG.
We are Gravitas Outcome Services CIC and we provide outcome recording software, training and consultancy to community organisations that provide support services to people in need. Gravitas Outcome Services CIC is a registered company limited by guarantee (no. 8028856). Our registered address can be found at the bottom of this policy.
The information we collect about you depends on the service you access from us, for example, we will collect more information about you if you access our monthly subscription services than if you access our training services. The information we collect is appropriate and proportionate to the service you are accessing and we will only collect information for the purposes for which they are used.
We may collect and process the following data about you:
Personal information which you supply to us may be used in a number of ways, including:
We will not sell or rent your personal information to any third parties.
We use external online systems such as Google Analytics, and email SendGrid to collect some of your personal data. The personal data we collect on these systems are limited and only include basic information such as name, email address, organisation and job title.
We may disclose your personal information to third parties, if:
We disclose anonymised information to third parties, if:
We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed or accessed without authorisation.
All information you provide to us is stored on our secure systems or locked away in secure files.
Only employees who have the authority to collect and process your personal information will be able to access it for the purpose it is intended.
We will do our best to protect your personal data; however, the transmission of information via the internet is not completely secure. As such, we cannot guarantee the security of your data transmitted over the internet and is done at your own risk. Once we receive your information, we will use our secure internal procedures and systems to prevent unauthorised access.
You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email us using the details at the bottom of this document.
You have a number of rights in relation to your personal data, including the right to:
We retain personal data for no more than seven years after last contact with you.
We keep information for this timeframe to fulfil the purposes we collected it for, including the purposes of satisfying any legal, accounting, governance or reporting requirements or claims.
We may process your data because:
We may also rely on your consent to process personal data and where we do this, it will be clearly explained to you at the time.