Data protection statement

 

In this statement, “we, our, us” refers to “The Pendragon Project”.

The Pendragon Project is committed to the privacy, security and safeguarding of website visitors’ and activity participants’ personal data. This statement outlines how any personal information is collected and used.

There may be other relevant policies relating to your information and privacy when engaging in Pendragon Project activities and these will be made explicitly clear to you prior to your formal commitment in an activity.

This policy is effective from December 2020. We are committed to regularly reviewing this statement to ensure its compliance with governing laws and efficacy for protecting your personal data.

How to contact us.

If you would like more information regarding our data protection processes, please contact us at enquiries@pendragonproject.org

The personal data we collect.

We may collect the following information directly, i.e. with your consent, from you:

  • Personal details including full name, date of birth, contact details and the contact details of your specified next of kin

  • Information about your existing and past physical and mental health conditions

  • Sensitive personal data including gender identity, ethnicity, sexual orientation, and health

  • Financial details, including bank and card details

  • Criminal records, including a request for you to complete a Disclosure & Barring System check

  • Information about your education and employment background

  • Your understanding, feedback and overall experience of subjects and topics relating to project activities

  • Photographs, videos and other digital content

Why we collect your data.

We collect information from you to support the following processes:

  • Enrolling you in a project and/or commercial activity

  • Correspondence related to your participation in a project and/or commercial activity

  • Assessment of the safety and risk of you participating in a project and/or commercial activity

  • To inform our compliance with our commitment to equality, diversity and inclusivity

  • To enable the transfer of payments for your participation in a project and/or commercial activity

  • To deem your criminal background suitability for involvement in our work

  • Monitoring and evaluation of your experience to measure the impact of our work

  • Processing applications for participation in projects and/or commercial activities

  • Provision of information that you have requested

  • The promotion of our work to encourage others to participate in projects and/or commercial activities

  • Managing internal records of feedback and complaints

  • Managing your preferences for communication from us

  • Compliance with governing laws and any applicable audits or statutory  reporting requirements

Where we collect your data from.

We collect information through multiple channels, including:

  • Direct communication with yourself, including application forms, email, telephone and in-person conversations, social media direct messaging and digital forms embedded in our website

  • Information passed to us, with your consent, by other organisations

  • Analytical tools processing visitor traffic to our website

  • Public domain sources

  • Social media permissions enabling us to issue targeted advertising

Lawful basis for processing personal data.

In certain circumstances we may process your information without consent where it is legally justifiable and does not contradict your rights.

How we process personal data.

The Pendragon Project will not pass on your personal data to third parties without first obtaining your consent. We will never sell or provide your information to a third party for marketing purposes.

In the event that you consent to your personal data being passed to a third party, we will ensure sufficient safeguards to protect your data.

The secure storage of your personal information is of paramount priority to us. The information is held in secure digital storage that is only accessible to the authorised Directors of the company.

How long we keep your data for.

The duration of time which we store personal information for depends on what it is required for.

Records of financial information are required to be stored for a minimum of 6 years to provide against any financial audit.

Confirmed participants in our project work will be asked for their consent for their personal data to be transferred to a record of participant alumni in perpetuity. This data will include contact details, a record of correspondence, the projects you participated in and your preferences for further communication.

You can contact us to request this information is amended or removed from our storage.

Your rights.

The Pendragon Project maintains the following rights of individuals pertaining to their personal data and its use:

  • We must tell you what data is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties

  • You have the right to request a copy of the information of yours that we hold

  • You have the right to correct data that is inaccurate or incomplete

  • In certain circumstances, you can ask us to erase any personal data of yours that is stored

  • You can request that we transfer any data we hold of yours to another company

  • You can request that we limit the way we use your personal data

  • You have the right to challenge certain types of data processing, such as direct marketing

  • You can ask us to provide a copy of our automated processing activities if you believe your data is being processed unlawfully.

You are free to exercise these rights and should contact the Pendragon Project if you wish to do so at enquiries@pendragonproject.org