Privacy Policy – General
DATA PRIVACY NOTICE
Your personal data – what is it?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the Data Protection Act 2018 and General Data Protection Regulations 2018.
Who are we?
The Light College and Collective is the working name of The Light Project. The Light Project is the data controller. This means it decides how your personal data is processed and for what purposes. The Light Project is a charity registered with The Charity Commission (England and Wales), charity number 1084941.
The contact details for The Light Project are:
The Light College
Foxhill House
Tarvin Road
FRODSHAM
WA6 6XB
T: 03333 446489
E: office@lightcollege.ac.uk
How do we process your personal data?
The Light Project complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use your personal data for the following purposes: –
- To manage our employees and volunteers. The Light Project process the personal information of employees and volunteers for recruitment, staff and volunteer administration, payroll, training, pensions and performance management and pastoral care purposes.
- To maintain our own accounts and records for example if we have a contract for services with you or a supplier account.
- Fundraising and marketing. Like all charities we have a range of fundraising and marketing activities that are designed to raise income or promote the aims and objectives of the charity. This may include inviting you to supporter days, newsletters, sponsorship or volunteering. This also includes suppression lists of people where consent to contact has been withdrawn. If you donate to The Light Project either directly or through a third party such as MyDonate we will process your name. If your donation is also eligible for Gift Aid we will process your address and will need to share this with HMRC via Gift Aid claims.
- Student recruitment and delivery of training courses including the FdA and the BA with the University of Chester. We may need to ensure you are eligible to study in the UK, process Student Loan information, process your name and address, date of birth, academic information, contact details and further information such as any medical issue we need to be aware of.
What is the legal basis for processing your personal data?
The Light Project needs a lawful basis to collect and use your personal data. The law allows for six legitimate purposes which organisations can rely on to process people’s personal data. The following five are the ones relevant to The Light Project’s activities:
- Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract
- Processing is necessary to protect the vital interests of a data subject such as emergency contact and allergies
- Processing is based on an individual’s consent (more information below)
- Processing is necessary for compliance with a legal obligation for example when claiming gift aid or running payroll
- Processing is necessary for a legitimate interest of The Light Project (more information below)
Consent
The Light Project will always ask for your consent before sending you marketing or newsletters by email or post.
Where you give us consent to process your data we will keep a record of how and when this was given and you can withdraw your consent by contacting The Light Project office as above.
Legitimate interest
The law allows personal data to be legally collected and used by an organisation if it is necessary for a legitimate business interest of the organisation – as long as its use is fair and balanced and does not unduly impact the rights of the individual concerned.
There are times when it is just not practical to ask a person for consent. In many situations, the best approach for The Light Project and our supporters, students, employees and volunteers is to process personal data because of our legitimate interests, rather than consent. You can however still withdraw you consent for such processing as outlined in “consent”.
Areas where The Light Project is relying on “legitimate interest” as the legal basis for processing are:
- Governance: reporting criminal acts and compliance with the legal instructions of law enforcement agencies; external audit and examination; statutory reporting
- Operational management: employee, student and volunteer recording and monitoring; IT and network security; maintenance of suppression lists; academic record; pension provision
- Financial management and control: processing of financial transactions and maintaining financial controls; prevention of fraud.
- Purely administrative: responding to any solicited enquiry from any of our stakeholders or potential new students; delivery of requested resources or information packs; administration of standing orders; providing ‘thank you’ communications and receipts.
What information we collect
We collect and use personal information such as names and address details, as well as other contact information such as email addresses and telephone numbers. We also collect information about the training you received from The Light Project, any financial transactions you make and any marketing preferences you give.
We maintain a record of communications that we send to you, and will also log any communications that you send to us.
If you have made a donation and kindly agreed to Gift Aid that donation we must record the fact that you are a UK tax payer and we have to maintain a record of the amount of Gift Aid we have collected.
We may record pastoral issues, safeguarding incidents, health and safety incidents, complaints, grievances or disciplinary procedures.
Student academic progress, marks, qualifications, academic work submitted, attendance, bursaries and fee payment information will be collected.
Where we collect and process sensitive personal data about yourself, for example any health condition that may be relevant or your religious beliefs, we will always seek your explicit consent to process this data.
Sharing your personal data
Your personal data will be treated as strictly confidential, and will only be shared with employees and trustees of The Light Project as needed.
In addition, where legally required we will share relevant personal data with HMRC or NEST (our pension provider) or law enforcement agencies.
If you are a student on the FdA or BA we will share relevant information with The University of Chester. If you are also a student on the Baptist Ministry route, we will share relevant information with Northern Baptist College in accordance with our data sharing agreement.
If you are a student on our Chaplaincy course, we may share relevant information with Third Space Ministries.
If you have consented to receiving our emailed newsletter your name and email address will be exported to a provider such as Mailchimp or Mailerlite. You can unsubscribe to this service at any time.
We will not share your data with any other third parties without your consent.
How long do we keep your personal data?
We keep your personal data for no longer than reasonably necessary during the time you are connected with The Light Project.
The length of time each category of data will be retained will vary on how long we need to process it, the reason it is collected, and in line with any statutory requirements.
After this point the data will either be deleted or rendered anonymous.
What to do if you are not happy
In the first instance, please talk to us directly so we can help resolve any problem or query. Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: –
- The right to request a copy of your personal data which The Light Project holds about you;
- The right to request that The Light Project corrects any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary for The Light Project to retain such data;
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to lodge a complaint with the Information Commissioners Office.
Further processing
If we wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
Privacy Policy – Student Applications
DATA PROTECTION NOTICE
Your personal data – what is it?
Personal data is information that relates to you. In the course of completing this application form, you have provided The Light College with information about yourself, which is known as personal data. The notice set out below explains how this personal data will be processed.
Who are we?
The Light College is part of The Light College and Collective, the working name of The Light Project, a charity registered with The Charity Commission (England and Wales), charity number 1084941. The Light Project is the data controller and decides how your personal data is processed and for what purposes.
The contact details for The Light Project are:
The Light College
Foxhill House
Tarvin Road
FRODSHAM
WA6 6XB
T: 03333 446489
E: office@lightcollege.ac.uk
What will The Light College do with your data?
The Light College will collect, process, share and use personal data for the purposes of processing and assessing your application for study, for administration and (where applicable) for funding purposes. Your personal data may be used and shared with third parties. This sharing of your personal data will happen where it is necessary to verify your identity, qualifications, work experience, references and any submitted work and to register you with the University of Chester if your application is successful. If you become a registered student, any personal data collected by The Light College as a result of this application will form part of your student record. If you receive an offer to study with The Light College you will receive information about how we process student data at the point that you receive your offer, however if you would like to know more you can access the privacy notice on our website.
Special Category Data
This includes data relating to disability, religion, ethnicity, sexual orientation, gender identity and criminal convictions. If you disclose information about a disability this may be passed to appropriate departments so that additional support and reasonable adjustments can be made where necessary.
If you disclose information about a criminal conviction, The Light College will process the information as set out in The Light College policy on recruitment of ex-offender and the policy on secure storage, handling, use, retention and disposal of disclosures and disclosure information.
Retention
If you are successful in receiving an offer to study, all records and correspondence relating to your application and supporting materials will form part of your record and will be kept in the same way as all other student records.
If you are unsuccessful, your application and supporting materials will be retained until the end of the following admissions cycle.
Legal Basis of Processing
The legal basis for processing your information is that this processing is necessary for The Light Project to fulfil its contractual responsibilities to you and to consider your application for admission.
Where The Light Project processes information about your health, this information will be processed because you have chosen to provide it to us and we therefore have your consent to proceed.
Data Subject Rights
You have the right to request access to your information, subject to certain restrictions. Any such requests should be addressed to The Light Project office using the contact details given above.
If you are dissatisfied with the way The Light Project has used your information you should raise these concerns with The Light Project in the first instance, at the address shown above. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office.