Privacy Policy (last updated 14/12/21)
Future Intentions Yorkshire is an independent small business.

We are updating our Privacy Policy in compliance with the new  General Data Protection Regulations 2018
The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). It aims to give individuals more control over their personal information held by organisations.

We take the security of your personal information very seriously and are registered with the ICO.

Why we are registered with the Information Commissioners Office (ICO) Register of data controllers
The Data Protection Act 1998 requires every organisation that processes personal information to register with the Information Commissioner’s Office (ICO), unless they are exempt. Failure to do so is a criminal offence.

What information is being collected

  • Names
  • Email addresses
  • Phone/Mobile numbers
  • Product/Service interests
  • Background information (employability)
  • Learning support needs

Who is collecting it?

  • Data Controller is Liz Hempshall – Future Intentions Yorkshire
  • Data Processor is Liz Hempshall

Third Party Data Processors

  • Mailchimp
  • Google (Analytics)

E-Marketing/User tracking
We use third party processors MailChimp and Google (Google Analytics)

How is it collected?
We collect your personal information through our MailChimp automation platform, our sign up form updates your preferences for communication with us.

If you choose to join our mailing list, the email address that you submit to us will be forwarded to MailChimp who provide us with email marketing services. Click the link for their privacy policy: https://mailchimp.com/legal/privacy

The email address that you submit will not be stored within this website’s own database or in any of our internal computer systems. Your email address will remain within MailChimp’s database for as long as we continue to use MailChimp’s services for email marketing or until you specifically request removal from the list.

How to Unsubscribe to email marketing
You can do this by unsubscribing using the unsubscribe links contained in any email newsletters that we send you or by requesting removal via email lizhempshall@futureintentions.co.uk

When requesting removal via email, please send your email to us using the email account that is subscribed to the mailing list.

We collect your personal information through paper-based consent forms.

Why is it being collected?
We collect your personal information to inform you of our course information, business news, marketing campaigns, competitions and offers, newsletters.

Like most websites, this site uses Google Analytics (GA) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.

How will it be used?
We use Mailchimp to send you Mailchimp campaigns for the following:

  • Direct marketing
  • Competitions
  • Newsletter

Our lawful basis for processing your personal information (data)

Consent
We use the lawful basis of consent for processing your personal information to communicate with you about our course information, business news, marketing campaigns, competitions and offers, newsletters.

How long is retention of individuals personal information?
We hold your personal information for 2 years unless you tell us otherwise and you have a choice to opt out at any time. Click on unsubscribe on any of our Mailchimp emails or email us directly at lizhempshall@futureintentions.co.uk to opt out.

How to opt in 
Consent requires a positive opt-in. We do not use pre-ticked boxes or any other method of default consent. Explicit consent requires a very clear and specific statement of consent. Mailchimp opt in is our email marketing automation platform http://eepurl.com/cSVsjb

How to opt out
You can at any time opt out of receiving communication from us. Click on unsubscribe on any of our Mailchimp emails or email us directly lizhempshall@futureintentions.co.uk request to opt out.

Contract
We use the lawful basis of contract for processing your personal information to process bookings for courses and services.

Who we share personal information with?
Information is shared only to provide our services and to monitor what our customers are interested in to inform future products and services. Google and Mailchimp are our third-party processors. We do not share with individuals or organisations outside of those stated.

  • Mailchimp
  • Google (Google Analytics)

Is the intended use likely to cause individuals to object or complain?
It is unlikely to cause individuals to object or complain, we would ask individuals to contact us via email to answer any concerns or questions

Our technical and organisational measures to maximise security of your personal information and where it is stored. 

The Data Protection Act says that appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.

  • Personal data are never stored on mobile media like USB sticks and external hard drives.
  • Emails deleted regularly, and document and device passwords changed every 3 months
  • Locked cabinet (paper based hard copy)
  • Mailchimp database https://mailchimp.com/legal/privacy/
  • Google Analytics https://policies.google.com/privacy
  • Under Article 16 of the GDPR individuals have the right to have inaccurate personal data rectified. An individual may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing. This may involve providing a supplementary statement to the incomplete data.

What is the right to rectification?
Under Article 16 of the GDPR individuals have the right to have inaccurate personal data rectified. An individual may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing. This may involve providing a supplementary statement to the incomplete data.

What is the Right to be forgotten
Under Article 17 of the GDPR individuals have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.

Right to restrict processing of personal data?
Article 18 of the GDPR gives individuals the right to restrict the processing of their personal data in certain circumstances. This means that an individual can limit the way that an organisation uses their data. This is an alternative to requesting the erasure of their data. For further information https://ico.org.uk/

Personal Data breach notification
In the event that your data is compromised, Future Intentions Yorkshire will notify you and the ICO within 72 hours by e-mail with information about the extent of the breach, affected data, any impact on the Service and Future Intentions Yorkshire action plan for measures to secure the data and limit any possible detrimental effect on the data subjects.

Website (secured by SSL certificate)

Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.

In the event that your data is compromised, Future Intentions Yorkshire will notify you and the ICO within 72 hours by e-mail with information about the extent of the breach, affected data, any impact on the Service and Future Intentions Yorkshire action plan for measures to secure the data and limit any possible detrimental effect on the data subjects.

What is a personal data breach?
“Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed in connection with the provision of the Service

What is a Subject Access Request 
You can request access to your personal information we hold by making a subject access request under the Data Protection Act 1998

If we do hold information about you, we will:

  • give you a description of it;
  • tell you why we are holding it;
  • tell you who it could be disclosed to; and
  • let you have a copy of the information in an intelligible form.

Cookies
What is a Cookie?
Cookies are small files which are stored on a user’s computer. They are designed to hold a modest amount of data specific to a particular client and website and can be accessed either by the web server or the client computer. We use a range of cookies on our website including the following cookies. Click link to find out more https://futureintentionsyorkshire.org.uk/cookie-policy.html

Google provides a browser extension that allows you to opt-out of being tracked by Google Analytics completely. Here is our privacy policy: https://futureintentionsyorkshire.org.uk/privacy-policy.html

Data Controller is Liz Hempshall – Future Intentions Yorkshire
Data Processor is Liz Hempshall
​
Whose registered office is:
Blake House
18 Blake Street
York
YO1 8QH
Telephone: 07495731958
Email lizhempshall@futureintentions.co.uk