PRIVACY & SECURITY POLICY

______

Our contact details

Name: The Stringcredibles
Address: 55 Bunbury Road, Birmingham B31 2DS
Phone no: 07976 205794
E-mail: contact@thestringcredibles.com

The type of personal information we collect

We currently collect and process the following information:

Personal identifiers, contacts and characteristics (for example, name, gender, date of
birth, racial or ethnic origin, postal address, telephone number and email address)
We also collect personal data when you voluntarily complete participant surveys to
provide feedback, when you donate to our charity, or when you email us or contact us
via our website or social media platforms. In general we try to keep as little data on you
as possible.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the
following reasons:

When you sign a contract with us.
When you register for a project or deliver work for us.
When you contact us in another way, such as when you voluntarily complete participant
surveys to provide feedback, when you donate to our charity, or when you email us or
contact us via our website or social media platforms.

We use the information that you have given us in order to deliver our work, undertake our
contractual and legal obligations, and to fulfil our reporting obligations to the Charity
Commission, Companies House and funders including Arts Council England.

We do not regularly share personal information with any other organisation or individual
outside of The Stringcredibles. We may share this information if required to if we have a
legal obligation (e.g. safeguarding obligations) or a vital interest (e.g. a medical
professional).

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on
for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by
contacting contact@thestringcredibles.com
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a vital interest.
(e) We need it to perform a public task.
(f) We have a legitimate interest.

How we store your personal information

Your information is securely stored using 2-Factor Authentication. We use Dropbox and
Google Drive to store data. These systems use servers based in the USA so your personal
information may be transferred to systems in the USA when processed by The
Stringcredibles. Data transfers between the UK and the USA are governed by the Data
Privacy Framework programme which ensures Data Protection standards are equivalent to
those in the UK. Dropbox and Google are both listed on the Data Privacy framework list
found here https://www.dataprivacyframework.gov/list. More information about the DPF can
be found here: https://www.dataprivacyframework.gov/Program-Overview

We will only retain your personal information for as long as it is necessary to fulfil the
purposes for which we collected it or to fulfil any legal, financial, accounting or reporting
requirements, currently up to 7 years. We will then dispose your information by deleting it
from our records permanently.

Your data protection rights

Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you
think is inaccurate. You also have the right to ask us to complete information you think is
incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in
certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the
processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of
your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal
information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we
have one month to respond to you.

Please contact us at contact@thestringcredibles.com if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a
complaint to us at contact@thestringcredibles.com.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

This policy was adopted on 22 April 2024, and will be reviewed annually.

You can download a copy of this policy here.