Privacy Policy

Who we are

Our website address is: https://5rightsfoundation.com.

Confused? You can read our child-friendly version of the privacy notice.

5Rights Foundation (referred to as “We, “Our” or “Us”), is committed to protecting the privacy and security of your personal information. We take care to protect the privacy of young people, people we work with to effect change and others who either use or are interested in our work.

We have therefore developed this privacy notice to inform you of the data we collect, what we do with your information, what we do to keep it secure as well as the rights and choices you have over your personal information.

Throughout this document we refer to Data Protection Legislation. This includes the Data Protection Act 2018 (DPA2018), United Kingdom General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003 and any legislation implemented in connection with the aforementioned legislation. Where data is processed by a controller or processor established in the European Union or comprises the data of people in the European Union, it also includes the EU General Data Protection Regulation (EU GDPR). This includes any replacement legislation coming into effect from time to time.

5Rights is the controller for the personal information we process, unless otherwise stated.

We are registered with the Information Commissioner’s Office (the ICO) with registration number ZA399046.

The information we collect and when

We only collect personal information that we know we will genuinely use and in accordance with the Data Protection Legislation. The type of personal information that we will collect on you or that you voluntarily provide to us either through our website and through other communication channels may include some or all of the following:

Your name
Address
Telephone number(s)
Email address
Age
Job title
Personal contacts

We may, in further dealings with you, extend this personal information to include your address, services used, records of conversations and agreements and Research

The legal basis for processing your data is based on your specific consent or our legitimate interest that we will have stated at the point the information was initially provided, therefore we will not store, process or transfer your data unless we have an appropriate lawful reason to do so.

How we use your information

To contact you, following your enquiry, reply to any questions, suggestions, issues or complaints you have contacted us about;
For statistical analysis and to get feedback from you about our services, websites. For example, occasionally we may invite you to take part in a survey or conduct research on issues that may affect individuals such as online protection and social media use;
To power our security measures and services so you can safely access our website and mobile apps;
Help us understand more about you as computer user, the products and services you consume, and the social media you use so we can help protect you better when you are online;
To promote website and social media safety for young people;
Contact you about the work and services that we offer;
Provide you with details of events that we are running;
Help answer your questions and solve any issues you have.

We may share your personal data with other organisations in the following circumstances:

If the law or a public authority says we must share the personal data;
If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk); or
From time to time, employ the services of other parties for dealing with certain processes necessary for the operation of the Website. However, all the information we share will be collected and anonymised, so neither you nor any of your devices can be identified from it.
We will not share your information with any third parties for the purposes of direct marketing.
We use data processors who are third parties who provide elements of services for us. We have Data Processor Agreements in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us or further sub-processors who must comply with our Data Processor Agreement. They will hold your personal data securely and retain it for the period we instruct.

How we keep you updated on our products and services

We will send you relevant information and news about our work and services in a number of ways including by email, but only if you have previously consented to receive these marketing communications. When you register with us we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time.

If you wish to amend your marketing preferences, you can do so by emailing [email protected]

Your rights over your information

The right to be informed about our collection and use of personal data
You have the right to be informed about the collection and use of your personal data. We ensure we do this with our internal data protection policies and through our external website notice. These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities.
Right to Access Your Personal Information
You have the right to access the personal information that we hold about you in many circumstances, by making a request. This is sometimes termed ‘Subject Access Request’. If we agree that we are obliged to provide personal information to you (or someone else on your behalf), we will provide it to you or them free of charge and aim to do so within 1 month from when your identity has been confirmed.
We would ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information. If you would like to exercise this right, please contact us as set out below.
Right to Correct Your Personal Information
If any of the personal information we hold about you is inaccurate, incomplete or out of date, you may ask us to correct it. If you would like to exercise this right, please contact us as set out below.
Right to Restrict Processing
You have the right to ask us to restrict the processing of your personal data. For example, this may be because you have issues with the accuracy of the data we hold or the way we have processed your data. The right is not absolute and only applies in certain circumstances. If you would like to exercise this right, please contact us as set out below.
Right to Erasure
You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances. If you would like to exercise this right, please contact us as set out below.
Right to Portability
The right to portability gives you the right to receive personal data you have provided to a controller in a structured, commonly used and machine readable format. It also gives them you the right to request that a controller transmits this data directly to another controller. If you would like to exercise this right, please contact us as set out below.
Right to Object
You have the right to object to our processing of some or all of the personal data that we hold about you. This is an absolute right when we use your data for direct marketing but may not apply in other circumstances where we have a compelling reason to do so, e.g., a legal obligation.

For more information about your privacy rights

The Information Commissioner’s Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers such as ourselves are available publicly. You can access them here https://ico.org.uk/for-the-public.

You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first.

How long we keep your information for

We retain a record of your personal information in order to promote and carry out our work. We will always retain your personal information in accordance with the Data Protection Legislation and never retain your information for longer than is necessary. Unless otherwise required by law, your data will be stored for a period of 3 years after our last contact with you at which point it will be deleted.

When using our Websites you may be able to share information through social networks. For example, when you ‘like’, ‘share’ or review us. When doing this, your personal information may be visible to the providers of those social networks and/or their other users.

Security

Data security is of great importance to 5Rights and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your collected data.

We take security measures to protect your information including:

Limiting access to our buildings to those that we have determined are entitled to be there (by use of passes, key card access and other related technologies)
Implementing comprehensive access controls to our information technology
We use appropriate procedures and technical security measures (including strict encryption, anonymisation and archiving techniques) to safeguard your information across all our computer systems, networks, websites, mobile apps, offices and stores.

What would happen if we were to merge with another organisation

We may, from time to time, expand or reduce our organisation and this may involve the sale and/or the transfer of control of all or part of our organisation. Any personal data that you have provided will, where it is relevant to any part of our organisation that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Notice, be permitted to use that data only for the purposes for which it was originally collected by us.

Use of children’s quotes throughout our website

All the quotes were provided by children and young people consulted by 5Rights, who have given their consent for their quotes to be shared. Their identities are protected under pseudonyms for safeguarding purposes.

Changes to Our Privacy Notice

We may change this Privacy Notice from time to time (for example, if the law changes). We recommend that you check this notice regularly to keep up to date.

How to contact us

If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this notice, the way your personal information is processed, please contact us by one of the following means:

By email: [email protected]

By post: 5Rights Foundation, Suite 6, Islington House, 313-314 Upper St, London N1 2XQ