⚠ This page contains instructions on writing a privacy policy. You may use it as a draft or add your own. Please make sure that all necessary information is provided and the page is set to public access. Delete this content gadget before publishing your privacy policy. You may wish to consult a lawyer or privacy specialist.
For suggestions on how to make your Wild Apricot site GDPR-compliant, click here
Data freely provided by site users completing our contact forms:
1. For new business enquiries and downloads:
Name
Title
Company
Contact details
2. For recruitment:
Name and Contact details plus all data freely provided on submitted CVs.
3. Additionally, we collect and store data as follows:
For current clients:
Name
Company
Contact details
And for Journalists:
Name
Publication
Contact details
We do not collect any data defined as Special Category Data by the ICO.
Recruiting new employees
Properly servicing our clients
Providing requested downloads (such as reports, whitepapers or guides)
New business development and responding to enquiries
Lawful basis for processing
We process personal data on the following legal bases under UK GDPR:
Consent: when you opt in to receive marketing communications such as newsletters or event invitations.
Legitimate interests: for business development, client servicing, and providing requested content.
Where marketing communications are concerned, we will only send these if you have provided consent. You can withdraw consent at any time.
Electronically via forms and downloads from our website
Over the phone with note-taking
Face to face
We will contact you regarding the specific purpose for which we collected the data OR where we believe we have a legitimate business interest to do so. Legitimate business interests could include:
Contacting a journalist with information
Provising a download you requested
Following up with further infomation about our services (only where you have consented to receive marketing communications)
Responding to a new business enquiry
No data obtained by SONE is shared with third parties unless we have requested and been granted consent by the data subject (that’s you!).
SONE uses two services with servers outside the EU/UK, Dropbox and We Transfer. These services are GDPR compliant and your data is fully protected and subject to the same regulation as if it were held within the EU/UK.
SONE protects data with appropriate technical and organisation measures, including:
Password protected email
Password protected Personal Computers
90 day password change schedule
6 digit smartphone passwords
SONE only keeps data for as long as is required for the specified purpose. Once this purpose has been exhausted, electronic data is deleted and hard (paper) copies are shredded.
Your legal rights (the user): access, correction, erasure, object to processing, restriction of processing, transfer to a different processor and withdrawal of consent.
If you wish to exercise any of these rights, please contact communications@sone.org.uk
You do not have to pay a fee to exercise these rights but we may charge a fee if we judge your request to be unfounded, repetitive or excessive. We may also refuse to comply in these circumstances. We will respond to all reasonable requests within 28 days.
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
Cookies are important to the proper functioning of this site. To improve your experience and the site overall, we use cookies to collect data and optimise site functionality.
Specifically, we use the data to:
Ensire the website looks consistent and functions across different devices
Collect anonymised user data analytics
Allow users to share pages on social networks
You cannot be personally identified from the data we collect using cookies.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.