Privacy policy

Privacy policy

This Privacy Policy relates to MAKE Southwest’s processing of data across the whole organisation. Data is collected on this website through your use of web forms and our newsletter sign ups and through this website’s use of cookies which is detailed in our Cookie Policy here. We process data in compliance with the General Data Protection Regulation (GDPR) which applies in the UK and across the EU from May 2018.

The privacy and data security of our visitors, members, stakeholders is important to us at MAKE Southwest (formerly Devon Guild of Craftsmen). Through our communications, events and activities we aim to build strong and meaningful relationships with our members and stakeholders. We carry out research to better understand our members’ and supporters’ relationship with the Charity and to help us identify their interests, needs, and potential for supporting the Charity.

In order to deliver these opportunities, services and products in a bespoke manner and to ensure each individual receives relevant information, MAKE Southwest processes the personal data of our members and supporters. This helps to ensure that they are getting the most relevant and appropriate communications from the Charity for their interests and purposes. This also helps the Charity, where appropriate, to ask for their support with the things we believe they care about the most.

If anyone has any questions about how we process their personal data or if they wish to opt-out of certain types of processing or communications, they should contact the Charity by email at hello@makesouthwest.org.uk or by telephone on 01626 832223.

What Personal Information We Hold

Depending on your relationship and interactions with MAKE Southwest, the personal data we hold and process may include:

  • Current and previous contact details including name, address, phone number and email addresses

  • Communication preferences Personal data provided for specific purposes (e.g. disability and dietary preferences when attending events)

  • Records of workshops, talks and events attended

  • Records of communications and interactions we’ve had with individuals

  • Records of financial transactions with the Charity including event payments, shop purchases, online shop purchases, donations, Friend and Membership payments, invoices, records of Members’ sales and Gift Aid declarations

  • For regular donors, Friends or Members paying via Direct Debit, details of Direct Debit instruction including bank account details

  • Contracts for Employees, Members and Exhibitors

  • Individuals’ employment information, or voluntary positions held

  • Interests – (e.g where visitors have stated an interest in a particular craft form or maker)

  • Cookie and Google Analytics Data

  • CCTV footage of visitors to the gallery

  • In the case of Members and Exhibitors, biographical information, education history, craft specialism and history of craft practice

  • In cases where we believe an individual may be able to further the Charity’s strategic aims through providing support we may record a person’s ability and willingness to make donations, including our assessment of their capacity to give and whether particular donations or funding appeals may be of interest to them (this is assessed through publicly available information)

  • An individual’s history of philanthropy and other giving, including donations to the Charity and/or other organisations and other support that you provide to the Charity.

How we collect and store this data

In most cases the information we hold has been provided to us by you. For example, through filling in mailing forms on our website or on paper, while registering for an online account with our shop, filling in Membership applications and Friend subscription forms, providing us with financial information to complete transactions or by corresponding with us by telephone, letter, email, face-to-face or otherwise. In some instances we may record information on you that we have collected from publicly available sources, such as targeted internet searches, and may search the following websites (either directly or using search engines) in order to obtain and maintain the accuracy of data we hold. Examples of such publicly available sources include:

  • Companies House and other business-related resources for UK companies

  • Craft Council Directory and other Craft membership organisations

  • University websites, staff and lecturer directories

  • Wikipedia

  • Charity Commission and other internet sources for not for profit organisations

  • LinkedIn, to check business details

  • Press sources (e.g. newspaper articles and databases) which may include media monitoring (e.g. Google alerts) The information we get from other organisations may depend on your privacy settings on these websites. We recommend that these settings are checked regularly.

    As part of standard fundraising practice, if an individual is preparing to donate a significant gift to MAKE Southwest we will carry out due diligence research to ensure that donations are consistent with our values.

Sensitive Personal Data

In the case of employees, volunteers, exhibitors and members, the Charity asks for equality monitoring information including ethnic origin, any disabilities, sexuality, age and gender at the time of an application for a post, or exhibition contract. We do this in order to fulfil our duties as an equal opportunities employer, and the reporting requirements of the Arts Council England. This is defined as sensitive data. If an individual chooses to provide such data, they give consent for the Charity to use this data in an anonymous and aggregated form, for statistical purposes. These records are kept in strict confidence and will not be released to third parties without explicit consent.

How We Process Your Data

The table below outlines how we use the information necessary to carry out MAKE Southwest’s activities and our legal basis for processing data for these activities.

Legitimate Interest Balancing Exercises are available on request from the office.

Sharing with External Parties

MAKE Southwest does not sell personal data to third parties or share it for any commercial purposes. We also will not permit third parties to sell on the data we have shared with them, under any circumstances. We will not usually share information with external parties, except in the following circumstances:

  • When you have given us permission to do so

  • Where we are required to do so by law

  • To third parties engaged by the MAKE Southwest as approved data processors to provide our services.

    When transferring data to third-party processors, we make sure that data processing agreements are in place. If non-European Economic Area data processors are used, we will ensure that appropriate privacy safeguards are in place.

Security Measures

We take the security of data very seriously and have measures in place to protect Personal Information from loss, misuse and unauthorised access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of the Personal Information. Data we collect is regularly reviewed and updated to ensure accuracy. As many of our supporters, members and exhibitors have a life-long relationship with the Charity, data may be kept indefinitely. If data is no longer needed for the purpose it was collected it will be reviewed and either securely destroyed or kept for archival purposes due to future public interest in the Charity as an important community organisation.

Subject access requests

All individuals who are the subject of data held by MAKE Southwest are entitled to:

  • Ask what information the Charity holds about them and why

  • Ask how to gain access to it Be informed how to keep it up to date

  • Be informed how the Charity is meeting its data protection obligations

  • Subject Access Requests should be submitted by email to MAKE Southwest

    On receipt of a Subject Access Request the Charity will respond within 30 days of the request being made.

The right to be forgotten

In certain circumstances, subjects have the right to be deleted from our database. Requests to have data deleted from our records should be submitted electronically to the Data Protection Officer. He will ensure that the relevant personal data is removed from all MAKE Southwest electronic storage systems, and that any relevant hard copy files are either redacted or destroyed.

Changes to our Privacy Policy

We regularly review our privacy policy. We will publish on our website any changes we make to this privacy statement and notify you by other communication channels where appropriate.

 

Cookie Policy

MAKE Southwest Cookie Policy 2018

What are cookies?

Cookies are small files which are downloaded to visitors' computers when they visit a site containing a small amount of information to identify each unique visitor. The vast majority of commercial websites use them. Our website runs a content management system (CMS) and links to our e-commerce module (online shop) makesouthwest.org.uk/shop. For these to run properly some cookies are necessary. They help us remember your preferences, enhance our site’s usability and your visitor experience.

Disabling or removing your cookies

You can remove or delete cookies on your computer through your browser settings (to reject all cookies, or allow only ‘trusted’ sites to set them) or find out more by visiting: www.aboutcookies.org for more details about controlling and deleting cookies. If you do disable our cookies you may find that certain sections of our website do not work such as difficulty logging in to the online shop (secure areas) or downloading resources.

The cookies we use

Cookies on this website are set by CMS and Google Analytics. They allow our website to: a) do things for authentication and security like auto-log in to your account, navigate secure areas, save passwords, auto-fill a form, and save your shopping basket, or b) for analytical reasons, recognise your device and measure visitors.

Social sharing

We use ‘social sharing buttons’ to allow our users to share or save web pages information such as pictures or content. These are buttons for third party social media sites and these sites may log information about your activities on the Internet which include this website. Please view the terms of use and privacy policies of these external websites to understand how they use your information and also how to choose to opt-out or delete such information.

External services

Sometimes we use external web services on our website to show content on the web pages, for example to show videos. As with the social buttons, we cannot prevent these sites, or external domains, from collecting information on your use of this embedded content.

 

We do not use cookies to track and identify users or target advertising.

Google Analytics sets cookies to help us accurately estimate the number of visitors to the website and volumes of usage. This is to ensure that the service is available when you want it and fast. The following cookies are set by Google Analytics: Find out more about how Google uses cookies here ...

_utma Typical content: randomly generated number Expires: 2 years

_utmb Typical content: randomly generated number Expires: 30 minutes

_utmc Typical content: randomly generated number Expires: when user exits browser

_utmz Typical content: randomly generated number + info on how the site was reached (e.g. directly or via a link, organic search or paid search) Expires: 6 months

For further details on the cookies set by Google Analytics, please refer to the Google Code website.

Our website runs on a content management system. This CMS sets the following cookies, depending on the use of certain functionalities: (The expiration time of a cookie is shown in the square brackets.)

ASP.NET_SessionId Standard ASP.NET cookie containing the user's session ID

ASPXFORMSAUTH (encrypted authentication ticket)

[DateTime.Now.AddMinutes(timeOut/session.timeout) - where the timeout is the web.config parameter / DateTime.Now.AddYears(1) - if the Remember me checkbox is set on] - authentication ticket cookie

CMSPreferredCulture (culture code) [DateTime.Now.AddYears(1)] - the user preferred culture

CMSPreferredUICulture (culture code) [DateTime.Now.AddYears(1)] - the user preferred UI Culture

ViewMode (int) [DateTime.Now.AddDays(1)] - different number value for the Design mode, Live site, etc.

VisitorStatus (int) [DateTime.Now.AddYears(1)] - sets the visitor status (unknown/first visit/more visits)

CurrentVisitStatus (int) [DateTime.Now.AddHours(23)] - current visit status (throughout current day)

PropertyTab (int) [DateTime.Now.AddDays(1)] - current property tab

CMSShoppingCart (GUID) [DateTime.Now.AddYears(1)] - shopping cart GUID

CMSMobileRedirected (true/false) [DateTimeHelper.ZERO_TIME] - sets the redirected cookie to see what device is being used

CurrentTheme (current CSS stylesheet Name) [DateTime.Now.AddDays(1)] - current theme cookie

Campaign (campaign string) [DateTime.Now.AddDays(1)] - User campaign reference

UrlReferrer (url string) [DateTime.Now.AddDays(1)] - User URL referrer

DisplayContentInDesignMode (true/false) [DateTime.Now.AddYears(1)] - If true, web part content should be displayed in design mode

FormState (int - id) [DateTime.Now.AddMinutes(10)] - For a check if the form state needs to be restored

VotedPolls (ints and pipes) [DateTime.Now.AddYears(1)] - content will be list of the poll codenames user already voted to; separated by pipes

DocRated (ints and pipes) [DateTime.Now.AddYears(1)] - stores rated document IDs; separated by pipes

PostAnswer (string and colon) [DateTime.Now.AddMonths(1)] - list of answers

UserWords (strings with pipes) [DateTime.Now.AddMonths(1)] - stores user words for the SpellChecker; separated by pipes

We will not use cookies to collect personally identifiable information about you.

For further details on the cookies set by our website’s CMS, please contact us: hello@makesouthwest.org.uk

For further details on the cookies set by Google Analytics, please go to Google Cookie use web page.

We may modify or amend our Cookie Policy information from time to time if changes in the Policy are made, we will amend the date of our revision and the newly modified Cookie Notice will be effective to you as of that revision date. We encourage you to periodically review this Cookie Notice to be informed about how we are using cookies.