General Privacy Notice

At East Dunbartonshire, we collect and use your personal information to help solve your problems, improve our services and tackle wider issues in society that affect citizens in Scotland.

We only ask for the information we need, let you decide what you’re comfortable telling us, and explain why we need it. We also treat it as confidential.

When we record and use your personal information, we:

• Only access it when we have a good reason
• Only share what is necessary and relevant
• Don’t sell it to anyone.

We handle and store your personal information in line with the law.

Who’s responsible for keeping your personal information safe?

Citizens Advice Scotland and East Dunbartonshire Citizens Advice Bureau are both responsible for keeping your personal information safe and making sure we comply with data protection law. This means we are ‘joint data controllers’ for your personal information.

What do you do with my information?

Each local Citizens Advice Bureau is an independent charity and along with Citizens Advice Scotland (CAS), is a member of the Scottish Association of Citizens Advice Bureaux (SACAB). This means we use your information for monitoring purposes, our research and campaigning work and to keep improving our service for citizens in Scotland.

First and foremost, your information will be used to provide you with advice. This also includes us sharing anonymised statistical data that we can use for research purposes to show the value and impact of our service to funders and others who are interested in our work, such as external auditors who want to make sure we are giving you high quality advice. We may also use it to refer you to any specialist services out with SACAB. A record of your case will be kept on our secure electronic case management system.

If we need to record any sensitive information, we will get your consent to do so. You can withdraw your consent at any time by contacting East Dunbartonshire Citizens Advice Bureau on 0141 775 3220 email bureau@eastdunbartoncab.casonline.org.uk.

If you do not want us to record and use your information, we can help you as best we can, but advice will be limited and general rather than specific to your circumstances.

WEBSITE PRIVACY POLICY

The policy: This privacy policy is for this website; www.edcab.org.uk and served by Citizens Advice Bureau, 11 Alexandra Street, Kirkintilloch, East Dunbartonshire, G66 1HB and governs the privacy of its users who choose to use it. It explains how we comply with the GDPR (General Data Protection Regulation), the DPA (Data Protection Act) [pre GDPR enforcement] and the PECR (Privacy and Electronic Communications Regulations).

This policy will explain areas of this website that may affect your privacy and personal details, how we process, collect, manage and store those details and how your rights under the GDPR, DPA & PECR are adhered to. Additionally, it will explain the use of cookies or software, advertising or commercial sponsorship from third parties and the download of any documents, files or software made available to you (if any) on this website. Further explanations may be provided for specific pages or features of this website in order to help you understand how we, this website and its third parties (if any) interact with you and your computer/device in order to serve it to you. Our contact information is provided if you have any questions.

THE DPA & GDPR MAY 2018

We and this website comply to the DPA (Data Protection Act 1998) and already complies to the GDPR (General Data Protection Regulation). We will update this policy accordingly after the completion of the UK’s exit from the European Union.

USE OF COOKIES

This website uses cookies to improve the users experience while visiting the website. As required by legislation, where applicable, this website uses a cookie control system, allowing the user to give explicit permission or to deny the use of /saving of cookies on their computer/device.

What are cookies? Cookies are small files saved to the user’s computers hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website.
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors or use the cookie control system if available upon their first visit.

DATA BREACH

If there is a data breach, we will contact our database within 72 hours of having being notified of this at our end.

WEBSITE VISITOR TRACKING

This website uses tracking software to monitor, anonymously, its visitors to better understand how they use it. The software will save a cookie to your computers hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information.

PLUGINS COLLECTING DATA

If we collect any data from you it is only for the purpose of meeting your needs and it will be stated upon the point of the data entry what it shall be used for. For example, if you are making a booking we will require your name, email and possibly your contact telephone number in order to process your request. We will only use the data for the purpose it serves. We will not share this data with any 3^rd party. Only individuals who are permitted to access this data will use it and use it only for the purpose it serves, for example booking an appointment or course. These individuals are aware of their responsibilities under the GDPR guidelines. Should you wish a copy of your data that we have or you wish us to delete your data you can contact us here and state your request. Please be aware that deletion of data may mean that we cannot process your request.

PAYMENT DATA

We do not collect or store any of your payment details on our website.

DOWNLOADS & MEDIA FILES

Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been taken to ensure only genuine downloads are available, users are advised to verify their authenticity using third-party anti-virus software or similar applications.
We accept no responsibility for third party downloads and downloads provided by external third party websites and advise users to verify their authenticity using third-party anti-virus software or similar applications.

CONTACT & COMMUNICATION WITH US

Users contacting us through this website do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is kept private and stored securely. We will not sell your data to any 3^rd party.

Where we have clearly stated and made you aware of the fact, and where you have given your express permission, we may use your details to send you products/services information through a mailing list system. This is done in accordance with the regulations named in ‘The policy’ above.

EMAIL MAILING LIST & MARKETING MESSAGES

We operate an email mailing list program which is used to inform subscribers about products, services and/or news we supply/publish. Users can subscribe through a 2-step verification online automated process where they have given their explicit permission. Subscriber personal details are collected, processed, managed and stored in accordance with the regulations named in ‘The policy’ above. Subscribers can unsubscribe at any time through an automated online service, or if not available, other means as detailed in the footer of sent marketing messages (or unsubscribe from all Mailchimp lists). The type and content of marketing messages subscribers receive, and whether it may contain third party content, is clearly outlined at the point of subscription.

Email marketing messages may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of subscriber data relating to engagement, geographic, demographics and already stored subscriber data.

Our EMS (email marketing service) provider is Mailchimp and you can read their privacy policy in the resources section.

EXTERNAL WEBSITE LINKS & THIRD PARTIES

Although we only look to include quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website. (External links are clickable text/ banner/image links to other websites, similar to; Cottage by the River or www.celticinst.com.

Shortened URL’s; URL shortening is a technique used on the web to shorten URL’s (Uniform Resource Locators) to something substantially shorter. This technique is especially used in social media and looks similar to this (example: http://bit.ly/zyVUBo). Users should take caution before clicking on shortened URL links and verify their authenticity before proceeding.

We cannot guarantee or verify the contents of any externally linked website despite our best efforts. Users should, therefore, note they click on external links at their own risk and we cannot be held liable for any damages or implications caused by visiting any external links mentioned.

SOCIAL MEDIA POLICY & USAGE

We adopt a Social Media Policy to ensure our business and our staff conduct themselves accordingly online. While we may have official profiles on social media platforms users are advised to verify the authenticity of such profiles before engaging with, or sharing information with such profiles. We will never ask for user passwords or personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with us on social media.

There may be instances where our website features social sharing buttons, which help share web content directly from web pages to the respective social media platforms. You use social sharing buttons at your own discretion and accept that doing so may publish content to your social media profile feed or page. You can find further information about some social media privacy and usage policies in the resources section below.

RESOURCES & FURTHER INFORMATION

• Overview of the GDPR – General Data Protection Regulation
• Data Protection Act 1998
• Privacy and Electronic Communications Regulations 2003
• The Guide to the PECR 2003
• Twitter Privacy Policy
• Facebook Privacy Policy
• Google Privacy Policy
• Linkedin Privacy Policy
• Mailchimp Privacy Policy

Should you wish to see what data we hold about you on file (if applicable) or you wish us to delete any data we hold on then contact us here and state your request. Please be aware that the deletion of data may mean that we cannot process your request eg. bookings, enquiries etc.

Contact us