Privacy Policy and Cookies

This website policy describes how Enable Leisure and Culture (‘Enable’) protects and makes use of the information you give the company when you use this website. If you are asked to provide information when using this website, it will only be used in the ways described in this policy. This Privacy Policy was updated in May 2018 and will be reviewed and updated on a regular basis. The latest version is published on this page.

We gather and use certain information about individuals in order to provide services and to enable certain functions on this website. We also collect information to better understand how visitors use this website and to present timely and relevant information to them.

We may collect the following information:

  • website usage data;
  • contact information such as email addresses;
  • details of where you live such as a postcode; and
  • other information relating to special offers and surveys.

Collecting this data helps us understand what you are looking for from Enable. Specifically, we may use the data:

  • to improve the services that we provide;
  • to contact you in response to a specific enquiry;
  • for our own internal records;
  • to customise the website for you; and
  • to sometimes share your information with selected parties, but only with your prior consent.

Complaints or Queries

Enable tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints that we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

This privacy notice was drafted with clarity in mind. It does not provide exhaustive detail of all aspects of Enable’s collection and use of personal information. However, we are happy to provide any additional information or explanation if needed. Any requests for this or if you wish to make a complaint about the way that we have processed your personal information, should be sent to the following email address: dataprotection@enablelc.org

 

Access to Personal Information

Enable tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ under the Data Protection Act 1998. If we do hold information about you, we will:

  • give you a description of it;
  • tell you why we are holding it;
  • tell you who it could be disclosed to; and
  • let you have a copy of the information in an intelligible form.

To make a request to Enable for any personal information we may hold, please put the request in writing via email to dataprotection@enablelc.org or via post to:

Data Lead

Enable Leisure and Culture

Staff Yard

Battersea Park

London SW11 4NJ

If we do hold information about you, you can ask us to correct any mistakes by contacting us via the addresses provided above.

 

Disclosure of Personal Information

In many circumstances we will not disclose personal data without consent. However, if for example we are required to investigate a complaint, we may need to share personal information with the organisation concerned and with other relevant bodies.

Cookies

We use cookies, which are small files placed on your computer’s hard drive. Cookies allow websites and applications to store your preferences in order to present content, options or functions that are specific to you. You can disable the cookie function in your web browser, but please note that this may affect how our website functions and some pages and services may become unavailable to you as a result.

We will never distribute your personal information to third parties unless we have your permission or the law requires us to. Any personal information we hold about you is stored under our data protection policy, in line with the Data Protection Act 1998. Please also note that our website may contain links to other external websites.

Visitors to our Websites

We use a third party service called Google Analytics to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site.

This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

You can view Google’s Privacy Policy here.

Security and Performance

Enable uses a third party service called Verve Communications to build and manage our website. We use a third party hosting service called UKFast (operated by Youniverse) to help maintain the security and performance of the Enable website and to deliver this service, it processes the IP addresses of visitors to Enable’s website.

The site and its associated database are stored on a UKFast server, operated by Youniverse, with the IP address of 178.238.133.34.

You can view Verve Communication’s privacy policy here.

WordPress

We use a third party service called WordPress.com for the Enable website and these sites are hosted at WordPress.com. We use a standard WordPress service to collect anonymous information about users’ activity on the site, for example the number of users viewing pages on the site, to monitor and report on the effectiveness of the site and to help us to improve it. WordPress requires visitors that want to post a comment to enter a name and email address.

For more information about how WordPress processes data, please see WordPress’ privacy notice.

Satellite Websites

We use a third party service called squarespace.com, expressionengine.com, craftcms.com, visualworks.com and Wix.com for satellite websites and these sites are hosted at their various web addresses. We use a standard WordPress service to collect anonymous information about users’ activity on the site, for example the number of users viewing pages on the site, to monitor and report on the effectiveness of the site and to help us to improve it. WordPress requires visitors that want to post a comment to enter a name and email address.

For more information about how:

  • SquareSpace processes data, please see Square Space’s privacy notice.
  • Expression Engine processes data, please see Expression Engine’s privacy policy.
  • Craft CMS processes data, please see Craft CMS’ privacy policy.
  • Visual Works processes data, please see Visual Works’ privacy policy.
  • Wix’s processes data, please see Wix’s privacy policy.

Links to Other Websites

This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.

E-newsletters

We use a third party provider called Mailchimp to deliver our monthly e-newsletters. We gather statistics around email opening and clicks using industry standard technologies, including clear gifs to help us monitor and improve our e-newsletters.

You can view Mailchimp’s Privacy Policy here.

Surveys 

We use a third party provider called SurveyMonkey to deliver our surveys. We gather contact information e.g. an email address, usage information, device and browser data, information from page tags, log data, referral information and information from third parties and integration partners.

SurveyMonkey uses third party tracking services that employ cookies and page tags (also known as web beacons) to collect data about visitors to their websites.

This data includes usage and user statistics. Emails sent by SurveyMonkey or by users through their services include page tags that allow the sender to collect information about who opened those emails and clicked on links in them.

You can view SurveyMonkey’s privacy policy here.

People who Contact us via Social Media

We use a third party provider called Hootsuite to manage our social media interactions. If you send us a private or direct message via social media, the message will be stored by Hootsuite for three months and it will not be shared with any other organisations.

Enable Emails

We use third party provider called Microsoft 365 to encrypt and protect email traffic. If your email service does not support Microsoft 365, you should be aware that any emails we send or receive may not be protected in transit.

We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

You can view Microsoft Office’s Privacy Policy here.

IT

We use third party provider called Wanstor as our IT provider for integrated IT support, service desk, equipment maintenance, hosting and monitoring services. Wanstor is a cloud-based system and their servers are located within the UK.

You can view Wanstor’s Privacy Policy here.

Resources Policy

This is a broad description of how Enable processes personal data in relation to recruitment, and this policy was updated in May 2018.

When you apply for a job with Enable, we will process your personal data for the purposes of recruitment. If you are unsuccessful in your application, we will keep your data on file for six months, after which time your application form or CV or any other details you have provided, will be securely destroyed. We may contact you within that six month timeframe, to alert you of other suitable vacancies at Enable.

If you are successful in applying for and you accept a post, Enable will keep your details on file for six years after your employment ends, after which time, your details will be securely destroyed. As an employee, your personal details will be shared with third parties, for payroll and pensions purposes. We will regularly review and where necessary update our privacy information, and we will bring any new uses of an individual’s personal data to their attention.

If you have a question about data protection at Enable, please email: dataprotection@enablelc.org

Recruitment Agencies

For some vacancies, we may advertise through recruitment agencies. These agencies will collect the application information and may ask you to complete a work preference questionnaire, which is used to assess your suitability for the role you have applied for, the results of which are assessed by recruiters. Information collected by recruitment agencies will be retained for 12 months following the end of our agreement.

The privacy policies for different recruitment agencies will be available on their websites.

 Finance

Enable uses a system called XERO for our day to day accounting. Your basic information is stored securely within the software and stored on their servers. You can find a copy of their privacy policy here.

Enable uses a system called Worldpay to process card payments taken over the phone and also on site via a PDQ machine. We do not store any records of your card details as this information is input directly into Worldpay at the time of the transaction. You can find a copy of their privacy policy here.

Enable uses a system called Bankline to process payroll, supplier payments, refunds and to receive money. You can find a copy of their privacy policy here.

Enable uses the services of Thomas Higgins to collect any unpaid debts on our behalf. You can find a copy of their privacy policy here.

Enable uses a system called Paypal to pay third parties and also to receive money from clients. You can find a copy of their privacy policy here.

Changes to this Privacy Policy

We keep our privacy policy under regular review and this privacy notice was last updated in May 2018.