Addiction NI Privacy Notice
(Updated January 2020)
At Addiction NI, we are committed to protecting and respecting your privacy.
This privacy notice describes how Addiction NI manages your personal information in accordance with the law and your rights, specifically with regards to Data Protection Act 2018 and General Data Protection Regulation legislation.
It does not cover every situation so please read notices on forms, web pages or other points where you give us information about yourself. These will describe specifically how we use your information, the reasons and legal basis for holding it as well as your rights.
We understand that privacy and the security of your personal information is extremely important. Because of that, this notice sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us. This gives effect to our commitment to protect your personal information. We may update this statement from time to time so please check our website for the most recent version.
What’s in this notice?
This notice tells you:
Who are we?
Addiction NI is a registered charity in Northern Ireland (No. NIC45132). Addiction NI provides a wide range of counselling, and addiction support services.
What type of information is collected from you?
The personal information we collect might include your name, address, email address, sensitive information regarding your mental or physical wellbeing, third parties including family members or medical practitioners, bank details for contractors and key personnel within those contracts. It also might include CCTV footage or phone recordings. This is not an exhaustive list and what personal information we collect is dependent upon the service you are engaging with.
We may collect your personal information in a number of ways. For example, when you:
How is your information used?
We may use your information to:
We understand that you trust us with your personal information and we are committed to ensuring you can manage the privacy and security of your personal information yourself.
The legal basis we rely on to process personal information
In order to comply with data protection legislation, we need to keep a register of the full range of personal information that we hold and on this register we also must state the legal basis which allows us to hold this information. The law on information protection sets out a number of different bases on which an organisation may collect and process your personal information, including:
In specific situations, we can collect and process your information with your explicit consent.
In certain circumstances, we need your personal information in order to perform a contract that we have entered into with you.
If the law requires us to, we may need to collect and process your information. We may also need to pass your information onto a third party if required by law.
In specific situations, we require your information to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and delivering our services.
Who has access to your information?
Within Inspire Wellbeing, access is only available to those who need this information in order to provide a service to you or to fulfil the contract that we have with you. Access may be required by support departments within Inspire Wellbeing, such as ICT and Finance, as well as those involved in the direct delivery of services to you.
Third Party Providers/Partners that we work in association with
Third Party Service Providers working on our behalf
We may pass your information to our third party service providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf for example:
In addition to the specific disclosures of personal data set out in this Section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.
Please be reassured that we will not release your information to third parties beyond Addiction NI, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.
How long do we keep your information for?
As long as necessary for the purpose/s it was collected for or for as long as we are legally required to.
This will vary depending on the type of information, legal requirements or other justifications permitted by Data Protection law. We have a Retention & Disposal Procedure which sets out retention periods. If you opt-out from fundraising communications we keep your information only to ensure we don’t inadvertently contact you.
We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us.
How you can access and update your information
The accuracy of your information is important to us. If any of your information that we hold is inaccurate or out of date, please notify us.
You have the right to ask for a copy of the information that Addiction NI hold about you. This is known as a Subject Access Request and we have 30 calendar days to comply with such a request. There is no charge.
You have the right to:
If you are unhappy with the way we are managing your personal information please contact our Data Protection Officer. If you are still unhappy you can register a complaint to the Information Commissioner’s Office (NI) or the Data Protection Commissioner (ROI).
The Information Commissioner’s Office (UK) is Inspire’s nominated commissioning authority. If you are in the Republic of Ireland you may contact the Data Protection Commissioner (ROI)
Information Commissioner’s Office (UK)
Water Lane Wilmslow
Cheshire SK9 5AF
Data Protection Commissioner
Portarlington R32 AP23
Transfers of personal data to Third Countries
Transferring information abroad - Your personal information may be transferred to, and stored and processed outside the European Economic Area (“EEA”). If this is the case we will ensure that an equivalent level of protection for personal data standards of information security are maintained.
Security precautions in place to protect the loss, misuse or alteration of your information
When you give us personal information, we take steps to ensure that it’s treated securely. Any confidential and sensitive information is securely filed and we apply software to our ICT to prevent unauthorised access to your information. We have appropriate procedures in place for data security and management of records. All of our staff are trained in data protection and GDPR.
We also monitor compliance with data protection procedures through our internal audit programme.
Should you have any queries regarding any aspect of Data Protection within Inspire Wellbeing, please contact:
Anne Bill - Data Protection Officer
10 – 20 Lombard Street
Tel: 028 90725424 (From NI)
Tel: 0044 2890725424 (From ROI)
Restricted access sections of our websites
Certain areas of our websites require you to register before you can access the content in those areas. We will only use the information you provide to fulfil your enquiry. We will not pass your details on to any third parties (or use ourselves for any other purpose) without your permission. Registration is voluntary. However if you do not wish to register, you will be unable to access these restricted areas.
Links from our sites to third-party websites
We cannot be responsible for the privacy practices or the content of any other websites linked to our sites. If you have followed a link from one of our sites to another website you may be supplying information to a third party.
Links to our sites from third-party websites
We cannot be responsible for the privacy practices or the content of any other websites who choose to link on their sites to any of our Inspire websites. If you are aware of our sites being linked from another in such a way that may misrepresent Inspire or mislead the public, please contact the Inspire External Affairs Department by emailing: firstname.lastname@example.org and we will investigate.
There are two types of cookie you may encounter when using this site:
First party cookies: these are our own cookies, controlled by us and used to provide information about usage of our site.
Third party cookies: these are cookies found in other companies’ internet tools which we are using to enhance our site.
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout
We embed videos from YouTube. This may set cookies on your computer, particularly if you are logged into a Google or YouTube account. To find out more, please visit YouTube’s embedding videos information page.