_edited.png)
Privacy Notice
This privacy notice is provided to inform about how and why your personal data is used and to ensure that you are aware of your rights under data protection legislation.
The company
We are Sing Up Foundation and we are the Data Controller, our correspondence address is Sing Up Foundation, Gateshead International Business Centre, Mulgrave Terrace, Gateshead, NE8 1AN, United Kingdom. We can be contacted on +44 (0) 204 566 9666 or info@singupfoundation.org
The purpose for processing your data and our basis for doing so
Sing Up Foundation is a registered charity with a mission to promote and create opportunities for children and young people to improve their mental wellbeing through singing. We will process your personal data in our day-to-day activities. We will process your data if you wish to become a Trustee of our organisation and our legal basis for doing this is Article 6.1.c of the UK GDPR, ‘pursuance of a contract’.
​
If you wish to collaborate with us or support us by joining an expert panel, volunteer your time or explore partnership opportunities, we will process your data on the basis of Article 6.1.f, ‘legitimate interest’ as we have a legitimate interest in continuing to deliver the best possible outcomes in line with our mission. We will also process your data on this basis if you create a user account with us through our website. If you wish to share your story with us to further promote the benefits of our work, then we will process your personal data under Article 6.1.a of the UK GDPR, ‘consent’. You are at liberty to withdraw consent at any time by contacting us.
​
We welcome donations made through our partners PayPal, ‘Give as You Live’ and ‘Easy Fundraising’. These organisations are separate data controllers and you should read their own privacy notices to understand how they use your data when you donate. We will receive details of your donation from our partners and we process this information under Article 6.1.f UK GDPR, ‘legitimate interest’.
​
The type of data we process is limited to name, contact details and relevant information relating to experience and background.
Recipients of your data
As a general principle, we will not transfer your personal data to other recipients without your permission. There are exceptions to this:
​
-
It is possible, that we might be obliged to disclose personal information in response to a court order or other lawful obligation. Our lawful basis for this is Article 6.1.c – legal obligation.
Data processed by third parties on our behalf
We use the services of other organisations in the processing of your data, this includes:
​
Web developers, payment providers, shopping fulfilment platforms, cloud-based email and document storage platforms and mailing houses. We use customer relationship management, video conference and sales and marketing platforms. We also utilise the services of an IT support company.
​
Those organisations that process personal data on our behalf are subject to a data processing contract as required by Article 28 of the UK GDPR. This ensures that your data is handled in accordance with the UK GDPR.
Transferring your data outside of the UK
We transfer personal data outside of the UK by virtue of our cloud hosted platforms. Where this occurs, we depend on EU / UK adequacy decisions or for a transfer to the USA and Australia, standard contractual clauses.
Retention periods
We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will retain the personal data of our volunteers for 3 years after leaving the organisation. Trustee data will be retained for 6 years after the trust period ends. Donor details will be held for 6 years after the end of the financial year the donation was made and personal data processed of our commercial partners, 6 years after the end of the financial year.
Your rights
The UK GDPR provides you with several rights in relation to the data we process of you. The rights relevant to our activities are:
​
-
You have the right to get access to and copies of your personal data.
-
You can ask us to rectify any inaccurate information we may be holding.
-
You can request we restrict our processing of your data.
-
You can ask us to erase your personal data where we process under a legitimate interest basis (although we may have to retain some for legal reasons).
-
You have the right to object to processing we undertake under a legitimate interest basis.
If you want to exercise any of these rights, please contact us using the above contact details.
Your rights - Complaints
You also have the right to lodge a complaint about our processing with a supervisory authority — the UK's Information Commissioner's Office.
​
The Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: +44 (0) 303 123 1113