Privacy Policy

Our privacy policy exists to inform you of your rights and our obligations in relation to your personal data. In order for us to be able to continue to communicate with you fully in future we are required to have your consent. If we don’t, we may not be able to tell you about the work of JDA as efficiently as we would like. If you have not already updated your communication preferences and would like to give your consent please, email dataprotection@jdeaf.org.uk

You have the right to contact us in order to remove consent, to correct, or to erase your personal data at any time, where relevant. If you have any questions regarding this Policy and our privacy practices, and/or if you wish to request a copy of your personal information, please email our Data Protection Officer: dataprotection@jdeaf.org.uk

References to the ‘Processing’ of information means the collection, use, storage, sharing and protection of data. JDA is the ‘Data Controller’ for the purposes of this policy, and the policy extends to its staff, trustees, volunteers and anyone else processing data on our behalf from time to time.

As a Data Controller under the Data Protection Act (1998) and the GDPR (2018), at JDA we adhere strictly to our legal duty to protect any personal information we collect from you.​ You may lodge a complaint with the ICO in the event of JDA’s non-compliance with UK Data Protection law.

Organisations are permitted to process data if they have a legal basis for doing so. JDA processes data on the basis that:

Expressed and informed consent has been given by the person whose data is being processed; and/or

JDA has a legitimate interest in processing the data; and/or

It is necessary in relation to a contract or agreement which the person has entered into or because the person has asked for something to be done so they can enter into a contract or agreement; and/or

JDA has a legal obligation to process data.

Where JDA relies solely on consent as the basis for processing data, we are required to obtain your explicit consent and you can modify or withdraw this consent at any time by notifying us in writing, although this may affect the extent to which JDA is able to provide services to or interact with you in future.

This policy is effective from 3 May 2018.

our service users, for fundraising and marketing, running events, keeping our supporters informed of our activities and the effective running of JDA through its professional staff, freelance workers, trustees and volunteers.

Data collected and processed may include, but not be limited to:

Names and contact information such as telephone numbers, email and postal addresses

Supporter records and preferences, including, where necessary, bank or payment details in order to process payments and information that you give us about your tax status so that we can claim Gift Aid if you complete the relevant declaration

Relevant information relating to our people receiving services from us, and their families

Information about staff, freelance workers and volunteers necessary for the performance of their roles in compliance with all relevant regulations and best practice

Such other information that is relevant and necessary for JDA to carry out its activities, charitable purposes and legal obligations.

Personal data may be collected from you when you engage with JDA and there are many occasions when this could happen, for example: if you make a donation, book to attend an event, enquire about our services, work for or with us as a member of staff, freelance worker or volunteer or apply for a job or volunteering opportunity, if you ask us a question, register for our updates, provide some optional feedback or otherwise provide us with personal information. This may be when you phone us, go onto our website, by post, or in person.

When you visit our website, JDA collects your IP address and information regarding what pages are accessed and when. An IP address is a number that can uniquely identify a specific computer or other network device on the internet.

No one other than JDA and organisations acting on JDA’s behalf will process personal data collected by us. We will not sell, share, or rent this information to other third parties without your consent.

JDA uses the data collected to maintain accurate internal records of our supporters, service users and their families, volunteers, staff, freelance workers, and others, and our engagement with them. These records facilitate our activities run in accordance with our charitable objectives, communicating with our supporters and raising funds and awareness about our work through campaigns and events. Data may be processed and viewed by the relevant staff, freelance workers, trustees and volunteers in the course of JDA’s activities (all of whom work in accordance with this privacy policy) and will be retained only for as long as is reasonable, necessary and permissible in law.

JDA uses your data so we can send you communications that you have requested or information about services, activities or campaigns that we believe may be of interest to you.

JDA may use your personal information to help us understand more about how our website is used so that we can improve it.

We only share data with trusted third parties if and when it is necessary for particular operational purposes and we ensure that any recipients of such data apply the same standards to protect the privacy and security of your data as JDA applies to itself. This might include sharing data where necessary for us to communicate with you (such as mailing companies for postal communications or through web platforms for email campaigns or newsletters), for event management or other activities, as stated above, and only once we are satisfied that any such use of data will accord with our privacy policy.

Similarly, if we share your data with trusted third parties outside of the European Union, we will only do so if we are confident that they adhere to the same high standards that we do when processing data and protecting its privacy and security.

JDA takes telephone and online payments and donations. All payment details go through the secure servers of our third party payment processors which specialise in the secure capture and processing of credit/debit card transactions. If you have any questions regarding secure transactions, email us at dataprotection@jdeaf.org.uk

Please bear in mind that as a charity email is the most economical way for us to communicate with you, but some of our updates are sent by post.

People who wish to opt-in to JDA emails can do so - and thus become subscribers - at their own discretion and in various ways. Subscription only takes place once you have given your explicit consent. 

Subscriptions are taken and held securely and in accordance with the Data Protection laws. No personal details are passed on to third parties nor shared with companies/people outside of the company operating the email platform.

Email updates may contain tracking facilities within the actual email. Activity is tracked and stored in a database for future analysis and evaluation. Such tracked activity may include, but is not limited to: the opening of emails, forwarding of emails, the clicking of links within the email content, times, dates and frequency of activity. This information is used to refine future email campaigns and supply the subscriber with more relevant content based around their activity.

Subscribers are given the opportunity to unsubscribe at any time. This process is detailed at the footer of each email update.

Communication, engagement and actions taken through external social media platforms that JDA participates on are subject to their terms and conditions and privacy policies.

Users are advised to use social media platforms wisely and communicate/engage with them with due care and attention with regard to their own privacy and personal details. JDA will never ask for personal or sensitive information through social media platform. We encourage users wishing to discuss sensitive matters to contact us through primary communication channels, such as by telephone or email.

Our website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.

You, as the data subject, may at any time in writing:

• Change your preferences about if and how we contact you
• Submit a Data Subject Request Form asking for details of what information we hold about you.  
  Once we have verified your identity, we will respond within 30 days. 
• Request amendment or deletion of your data, subject to any overriding legal requirement for 
  its retention, such as the need, where appropriate, to retain Gift Aid records for Her Majesty’s 
  Revenue and Customs. We may place your details on a suppression list so we do not contact 
  you again by accident

To submit any of these requests, please contact us at dataprotection@jdeaf.org.uk or by writing to: The Data Protection Officer, Jewish Deaf Association, Julius Newman House, Woodside Park Road, London, N12 8RP. You can also call us on 020 8446 0502 but we may need you to confirm the request in writing.

Choosing to restrict the collection or use of your personal information may inhibit or limit the way in which JDA is able to interact with you.

You are responsible for the accuracy of data you have provided to JDA. If you believe that any information we are holding on you is incorrect or incomplete, please advise us as soon as possible. We will promptly correct any information found to be incorrect.

We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the data we process.

Persons processing data on behalf of JDA do so in accordance with this policy and on the basis that JDA is satisfied that they can and will adhere to our high standards for data protection and security. 

Any sensitive information (such as credit or debit card details) is encrypted, protected or destroyed where appropriate.

The transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. 

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy policy applicable to the website in question.