We collect data from you in order to assist in applying for a number of grant and award schemes that our various partners offer (referred to as scheme operators). This data will consist of contact details, financial and health records for you and people upon whom you are either dependent on or are dependent upon you. We assume that you have requested and gained permission to provide information on behalf of others.
We may also collect data from your utility providers to both validate your applications and to add any necessary data required by scheme operators.
We are processing this data in order to perform our contract with the scheme operator, and as such, operate under ‘performance of contract’. Where we are gathering special categories of data such as health and financial, we will upon all occasions ask for your permission to use the data for the purpose of that specific application at the point of collection with a clear, plain English and unambiguous statement.
This data will be held within the UK and EU although for reasons of data backup alone, copies may also reside on computing platforms in the US, and where this is the case, the data will be held under the EU-US Privacy shield.
We take the security of your data seriously. We will take appropriate steps to protect against loss, misuse or unauthorised access of your data while held in our systems
We intend to retain your data only as long as required to complete and process your application and as required for the duration of any grant or award period. This will usually be less than 2 years, but may on occasions be slightly longer where a scheme operates over a longer period of time.
When data is no longer required it will be deleted from our systems.
You have a right to access your data, and we will upon requests, provide you with a copy of data held upon you. As part of this we have the right to verify your ID using reasonable means, and will provide the data in an electronic format within 30 days.
You have a right to erasure, by either withdrawing your consent, or an objection under the GDPR act section 21.
You have a right to log a complaint about our compliance with the GDPR Act with the Information Commissioners Office
You do not have to provide data as requested above, but be aware that we may as a consequence, be unable to process your application. In this case, we will inform you of the position.