Privacy Policy

At CRESS we take your privacy seriously; we do not sell or trade your personal details. We do collect some information about you so read on to find out more.

Our Data Protection Policy for all contributors, sponsors and individuals

Click to read our full Data Protection Policy.

Data we collect on this website

Cookies

Like most websites, cressuk.org uses cookies to collect information. Cookies are bits of information which your computer or other device (such as smart phones or tablets) remembers as you browse websites. We use cookies to remember when we last saw your use our website and which pages you visit. Read our cookie policy.

Website statistics

When someone visits cressuk.org we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Mailing list

You can sign up to our mailing list. We use a third-party provider, MailChimp, to deliver our news. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp's privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing caroline.lamb@cressuk.org.

Access to your personal information

You are entitled to view, amend, or delete the personal information that we hold. Email your request to Caroline Lamb – caroline.lamb@cressuk.org.

Third Party Payment Providers

We use PayPal to process your donations. More information on how PayPal processes your personal data and your data protection rights, including your right to object, is available at paypal.com/uk/webapps/mpp/ua/privacy-prev

We use GoCardless to process your Direct Debit payments. More information on how GoCardless processes your personal data and your data protection rights, including your right to object, is available at www.gocardless.com/legal/privacy/

We use Stripe to process your Direct Debit payments. More information on how Stripe processes your personal data and your data protection rights, including your right to object, is available at stripe.com/en-gb/privacy

CRESS UK ensures personal data is stored securely and uses Xero (https://www.xero.com) as their cloud storage provider. Xero is a management system and provides people-based databases. This is a secure on-line tool and stores all the personal data which CRESS UK collects and uses. Xero complies with all relevant legislation and owns their own servers which are based in the UK. Access to the CRESS UK Xero database is controlled by usernames and passwords with password strength checking built in. Connections between Xero and a user are encrypted.

A smaller amount of personal data is also stored on Dropbox (https://www.dropbox.com) another cloud storage provider with ISO 27018 standard for leading practices in cloud privacy and data protection.

 

When personal data is used by the CRESS UK Office team, it is used on devices with secure passwords at different locations. 

CRESS UK recognises the possibility of data breaches. It relies primarily on the high level of security given by Xero. It protects the office copies with strong passwords and checks carefully any staff member who is trusted with access.

CRESS UK recognises that in some cases legitimate interest may apply.

 

This Privacy Policy

This Privacy Policy is subject to change. See the amendment dates below.

Cookies Policy

A cookie is a named value, a single piece of information, which we ask your web browser to hold for us. If you allow your browser to accept cookies, the name and value will be sent back to us whenever you visit a page. Cookies allow websites to respond to you as an individual. The website can tailor its operations to you.

We use the Google Analytics system to examine our website traffic. Google will register some cookies with your browser. Google Analytics provides us with aggregated statistics on how our website is used. We can’t identify individuals from the data Google provides.

Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

What cookies can you get by using our site?

Google Analytics Cookies

At the time of writing cressuk.org sets these cookies – _ga, _gat, _gid  they are set just for our domain but Google sets them and the names may change.  If you don't delete them they will hang around for up to two years.  If you are concerned, clear you cache or block them.  These cookies are not necessary for the operations of our website.

Policy last reviewed June 24.
Date of next review July 25.