Privacy and Cookies

Introduction

We, the Lawyers' Christian Fellowship ("LCF"), are committed to safeguarding your privacy. We believe that the best way to protect the privacy of users of our website, (the "Site") and our members is to be transparent. We may occasionally modify this Statement and will place any updates on this Site so that you are always aware of what information we collect, how we use it and under what circumstances we use or disclose it.

Please note that the Site contains links to and from other websites. We are not responsible for the privacy practices or the content of other websites. The information practices of those other websites are not covered by this Statement. We set out below answers to frequently asked questions regarding LCF's approach to data protection, privacy and cookies.

This privacy notice tells you what to expect us to do with your personal information.

• Contact details
• What information we collect, use, and why
• Lawful bases and data protection rights
• Where we get personal information from
• How long we keep information
• Who we share information with
• Sharing information outside the UK
• How to complain

Contact details

Post: The Lawyers Christian Fellowship, 6-8 Marshalsea Road, LONDON, SE1 1HL, GB
Telephone: 020 7407 6157
Email: admin@lawcf.org

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery and third party referrals: Names and contact details; Gender; Pronoun preferences; Addresses; Photographs or video recordings; Service use history; Health information (including medical conditions, test results, allergies, medical requirements and medical history); Dietary information (including allergies and health conditions); Information about work; Information about lifestyle, interests or personal history; Information about income and financial needs for funding or personal budget support; Payment details (including card or bank information for transfers and direct debits); Website user information (including user journeys and cookie tracking); Religious or philosophical beliefs

We collect or use the following information to receive donations or funding and organise fundraising activities: Names and contact details; Addresses; Payment or banking details; Donation history; Taxpayer information (for Gift Aid purposes); and, Religious or philosophical beliefs.

We collect or use the following personal information for service updates or marketing purposes: Names and contact details; Addresses; Marketing preferences; Donation history; Records of consent, where appropriate; Religious belief; Study or Professional status; and Religious or philosophical beliefs.

We collect or use the following personal information to comply with legal requirements: Name; Contact information; and, Financial transaction information.

We collect or use the following personal information for recruitment purposes: Contact details (e.g. name, address, telephone number or personal email address); Date of birth; National Insurance number; Copies of passports or other photo ID; Employment history (e.g. job application, employment references or secondary employment); Education history (e.g. qualifications); Right to work information; and, Religious or philosophical beliefs.

We collect or use the following personal information for dealing with queries, complaints or claims: Names and contact details; Address; Purchase or service history; Financial transaction information; Information relating to health and safety (including incident investigation details and reports and accident book records); Correspondence; and, Religious or philosophical beliefs.

Lawful bases and data protection rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO's website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

• Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
• Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
• Your right to erasure - You have the right to ask us to delete your personal information. You can read more about this right here.
• Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
• Your right to object to processing - You have the right to object to the processing of your personal data. You can read more about this right here.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods, including delivery and third party referrals are:

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are to provide you with the services they seek, and to pursue the Charity's objects.

Our lawful bases for collecting or using personal information to receive donations or funding and organise fundraising activities are:

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

• Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are to provide interested persons with information about the Charity's services, including events, and in pursuance of the Charity's purposes.

Our lawful bases for collecting or using personal information to comply with legal requirements are:

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for recruitment purposes are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are to investigate, evaluate, and respond to any queries or complaints received.

Where we get personal information from

• Directly from you

Information we gather automatically

When you visit our Site, your browser automatically sends us certain Internet-related information, such as the Internet Protocol (IP) address of the computer you are using. We collect this information through the use of cookies to better understand how visitors use our Site. Cookies do not collect any information that enables you to be identified as an individual.

Receiving communications from us

Some forms on our website also include a check box asking you for permission for us to add you to our mailing list. This is an opt-in mailing list and your personal information will be used solely by us. Where you have provided your details to us, we will consult you about the use of your information to keep you informed about LCF products, services, events and activities, for instance, receiving our newsletters and periodic emails from us providing you with updates of LCF activities and information about other events/issues that we consider may be of interest to you.

If at any time you wish us to stop using your information for any or all of the above purposes, please let us know or email us at admin@lawcf.org. We will stop the use of your information for such purposes as soon as it is reasonably possible to do so.

Please note that we also track the effectiveness of our email campaigns through email marketing services (for example MailChimp) and may use this information for further communications

Any "marketing" email communication you receive from us will have the option to remove your email address from our list. From time to time, we may include links in our emails to other websites which we think may be of interest to you.

Do we share the information we receive?

If you opt in and give us your consent other LCF members can contact you through the Members' Directory and members of the public can contact you via the LCF Find a Lawyer scheme. We will not share your personal information with any third parties outside the provisions of this statement, unless we have your prior consent or unless requested by local regulators, law enforcement agencies or required by law. We do not sell or rent your information. We reserve the right to transfer any information we have about you to another entity in the event of a reorganisation of the LCF. Should such a reorganisation occur, we will use reasonable efforts to try to ensure that your information continues to be used in a manner that is consistent with this Statement.

In order to provide an efficient service, certain functions such as hosting, storage fulfilment and disaster recovery are provided by third parties who act as our service providers. Where this is the case we will ask those with whom we share data to agree to protect data as the LCF has agreed in this Statement.

Do we keep information secure?

We take the security of your data seriously. Therefore, once we receive your information, we use all reasonable efforts to ensure its security on our systems.

It is our policy to virus check documents and files before they are posted on this Site. However, we cannot guarantee that documents or files downloaded from this Site will be free from viruses and we do not accept any responsibility for any damage or loss caused by any virus. Accordingly, for your own protection, you must use virus-checking software when using this Site

Unfortunately, no data transmission or security program can be guaranteed to be 100% secure. As a result, while we strive to protect your information, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk. You remain responsible for the security of your computer at all times.

How long we keep information

Please see our Data Retention Schedule (Schedule 1 below)

Who we share information with

Our data processors:

• GLW

This data processor does the following activities for us: They process our payroll, and provide bookkeeping services, including Gift Aid claims.

• Eventbrite

When registering for an LCF event via our website you will be transferred to Eventbrite which is used by the LCF (Registered Company limited by guarantee in England and Wales, and a Registered Charity England and Wales) ("the LCF") for the purposes of collecting data for events. The LCF is the "data controller" for the information that you provide to us when registering for our events on the Eventbrite website, which means that we are decide how to use it and are responsible for looking after it in accordance with data protection laws. Eventbrite processes data (including any personal data you may submit by responding to this invitation) outside of the UK and the European Economic Area. Please only submit any personal data which you are happy to have processed in this way, and in accordance with Eventbrite's privacy policy applicable to attendees.

• Mailchimp

The LCF uses the services of Intuit Mailchimp ("Mailchimp") to send emails to its members and supporters. You can opt out of MailChimp mailings at any time by the link in each email message using this service. The LCF retains control of the data in the distribution list held on MailChimp servers. Mailchimp's servers are located in the US, but Mailchimp is certified under the EU-US DPF, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework which enables transfer of personal data from the EU, UK or Switzerland to Mailchimp. More information about Mailchimp's data stewardship principles is available here.

• David Turner

This data processor does the following activities for us: Provides website and CRM database management.

Others we share personal information with

• Insurance companies, brokers and other intermediaries
• Organisations we need to share information with for safeguarding reasons
• Professional advisors
• Relevant regulatory authorities
• External auditors or inspectors
• Organisations we're legally obliged to share personal information with
• Suppliers and service providers

Sharing information outside the UK

Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

The dynamics of the Internet may mean that information is sent electronically outside of the country where you originally entered the information. In addition, that information may be used, stored and processed outside the country where you entered that information. While there is a risk that countries to which information is transferred will not be subject to an information protection regime as rigorous as that in the European Economic Area (EEA), we will take reasonable steps to ensure that your information is treated securely and adequately protected in accordance with this Statement.

If you participate in our Justice Mission or travel internationally for an LCF related event, we may be required to give information to third parties such as insurance companies, healthcare providers, mission agencies, host organisations, and event organisers. On occasion, those parties may be located outside the UK and the European Union. Where this is the case we will ask those with whom we share data to agree to protect data in accordance with our Data Protection Policy, and UK GDPR.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the ICO.
The ICO's address:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

What about "cookies"?

"Cookies" are small pieces of information that are stored by your browser on your computer's hard-drive when you visit the Site. Cookies are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

Most Web browsers automatically accept cookies, but you can usually change your browser to prevent that. You have the right to choose whether or not to accept cookies. You can exercise this right by modifying the controls on your browser to reflect your cookie preferences. However, if you choose to reject all cookies, you may be unable to use parts of the Site.

• We use cookies to make our website easier for you to use
• We use cookies to help stop our online-forms from being used to send spam-email
• We use cookies to monitor usage so we can spot trends and make improvements
• We DO NOT use cookies to identify individuals (and never will)
• We DO NOT store personal information in cookies

We believe that our use of Cookies is necessary for the smooth functioning of our website. We do not believe that they pose any threat to your personal privacy or online security and we recommend that you indicate that you will "allow" Cookies. If you "disable" Cookies the interactive functions of the website will not operate and many other features of the website cannot work fully without using Cookies.

For further information about cookies and how to control their use, please visit the following third party educational resources:

• www.aboutcookies.org
• www.allaboutcookies.org
• www.youronlinechoices.eu

Schedule 1: Data Retention Schedule