privacy

Protecting Your Privacy

LGBT Youth Scotland is responsible for keeping your personal information safe and secure and deciding how we use that information.

We’re a ‘data controller’ and a ‘data processer’ rolled into one. This page talks about how we handle your personal information.

 

What is personal information?

Personal information is any information which could identify you in some way, so a simple example would be your name or address.

 

How we use your information

We use your information in a number of different ways — what we do depends on the information you give us and this notice explains everything to you in more detail.

 

How long do you hold my information?

We’ll only keep your information for as long as is necessary and for the reasons we asked for it. Once that time’s up then we’ll securely destroy it.

 

If you contact us or access our services

When you go along to one of our youth groups, call our offices, fill in a form or use our services in any other way, we may collect your:

·       contact details

·       date of birth

·       emergency contact information

·       other agencies you’re involved with

·       records of our conversations or meetings with you

 

To help us provide the best services possible, we may also collect sensitive personal data such as information about your:

·       racial or ethnic origin

·       religious or philosophical beliefs

·       physical or mental health

·       sexual orientation

·       gender identity

·       disability information

·       medical information

·       actual or alleged criminal offences

 

We will let you know before collecting information whether you need to give it to us. Some of the information we may need in order to provide our services to you and some of the information we may need to keep you safe. 

 

If you take part in any of our events or campaigns we sometimes take photographs or videos to use on our website, social media accounts, YouTube channel or on printed publications. We will always make you aware if we’re taking photos or videos and we’ll always ask for your consent – it’s up to you if you want to be involved.

 

Information we collect from other sources

We may receive your personal information from an organisation which has your permission to share your information with others. We may also receive information from other people such as a friend, relative, professional or member of the public if they are concerned about you.

 

Confidentiality

We know that for some young people, just making that first contact with us can be a big deal – whether that’s chatting online, on the phone or with a youth worker at one of our youth groups. When you talk to us it’s confidential so you can feel safe talking to us, knowing that no one else will find out.

 

Sometimes though we might need to tell someone:

·       If you ask us to

·       You tell us something that makes us very worried for your safety

·       You tell us something that makes us very worried for someone else’s safety

 

Normally we will talk to you about whether other people need to know but if we think you or someone else is in immediate danger than we may have to tell someone to get help. If you’re using our online service we might use your phone number or IP address (a number used by your internet provider) to get help to you. We’ll always try and talk to you first before passing this information on.

 

How do you use my information?

 Depending on what we’re using your information for, we may use it:

·       with your consent

·       in order for you to join the services or for us to provide a service to you

·       to get help if there is an immediate risk of significant harm to you or others

·       for our legitimate interests

·       to meet our legal or social protection obligations

 

We may use your personal information for the following purposes:

·       to provide you with the LGBT Youth Scotland services you have requested

·       to respond to your enquiries

·       to further our charitable aims

·       for administration purposes

·       as required by law

·       to help you with further education or training

·       to carry out risk assessments

·       to contact other professionals

·       to get help if there is an immediate risk of significant harm to you or others

·       to use your case study in our communication with others (only with your explicit consent)

 

We may also anonymise and pull together personal information to improve our services or for research and evaluation. We’ll make sure you can’t be personally identified from such data.

 

How do you protect my information?

We’ve set up systems and processes to ensure that we keep your information accurate and up to date. We sometimes use online platforms so we can collect, store and process your information and when we do, we make sure that they meet certain legal standards to keep your data secure.

 

Here are the secure online platforms we use to help us provide our services to you:

·       We use Ninchat for our LiveChat service

·       We use Microsoft SharePoint and Dynamics for our day to day youth work

·       We use Discord for our online groups and community service. Within Discord we use ModMail and Dynobot to help us run the server. We may occasionally use other apps to enhance your experience. 

·       We use Moodle for our learning hub made up of self directed interactive resources 

·       We use SurveyMonkey for our research

·       We use MailChimp to send out information

·       We use Wufoo to collect, store and process information

·       We use WordPress for our websites

·       We use Stripe to process any payments

·       We use Donorfy to collect, store and process donor, volunteer and contact information

 

If you use our LiveChat service

When you use our live chat service to talk to one of our youth workers, we ask for a name – you don’t have to use your real name if you don’t want to. We also ask you for your age and the local authority you live in. You don’t need to share that information if you don’t want to.

 

Each time we have a chat we keep a note of the conversation on our secure Microsoft Dynamics system. If you let us know that you have spoken to us on LiveChat before, we can read through the last conversation so we don’t have to start from the beginning again each time we chat. The chat is also held by our webchat providers for two years.

 

We promise to keep this information safe and not share it with anyone else unless someone really needs to know because someone is in significant risk of harm.

 

If you use LGBT Youth Scotland’s websites

We’ll collect the information you give us when you browse our site, including your IP address (a number that identifies each device using the internet), device type and, if you choose to share it with us, your location data, as well as how you use our website. We use something called Google Analytics. We collect the information through cookies which are a very small text file that is placed on your device when accessing information. We only use this information to improve our website and the services we provide so we can give you the best experience and the information you need.

 

For more detailed information on the cookies we collect, please see the “Cookies” information tab below.

 

You can set your browser to refuse and delete cookies and this handy site explains how you can do that: http://www.aboutcookies.org. It’s important to note that some of this website may not work if you change your settings.

 

If you subscribe to our mailing list

We ask for your name and contact details so we can keep you up to date with all the amazing things the charity and wider community we work with are doing to make Scotland the best place for LGBTI young people to grow up. We’ll also tell you about exciting events, news and other opportunities for you to engage with us.

 

We promise not to share or sell your contact details and we absolutely won’t spam you. We also ask if you are over or under 18 so we can make sure that you are receiving content which is relevant to your age range.

 

We’ll also ask what parts of our work you’re interested in so we can make sure your receiving something you actually want to read!

 

If you don’t want to be on our mailing list anymore all you need to do is hit the ‘unsubscribe’ button at the bottom of any of the e-mails and you’ll be taken off the list. If you have any problems then just e-mail info@lgbtyouth.org.uk and ask for your e-mail address to be removed and we’ll make it happen.

 

If you e-mail us

When you e-mail us, your e-mail and any personal information you share in it, will be kept securely until we no longer have a use for it or you ask us to remove it.

 

If you make a donation using our website

We ask for your contact details so we can contact you if there are any problems with the payment. We also ask if you want to join our mailing list (see above) – but that’s up to you!

 

We ask for your payment information – don’t worry, we don’t keep this information. We use a certified third party platform called Stripe to safely and securely process your payments. Any payment information you submit is encrypted. We need this information if you want to make a donation to us and to prevent and detect fraud against either you or us.

 

We use a secure third party platform called Donorfy to keep your contact information safe.

 

What rights do I have around information about me?

You have a lot of rights relating to your personal information:

·       The right to be told how your personal information is being used

·       The right to ask for the personal information we hold about you

·       The right to ask for information held about you to be fixed if it’s wrong

·       The right to ask for your information to be deleted or for someone to stop using it

·       The right to ask that we move some or all of your data either to you or another service provider

·       The right to complain to the team that make sure people are following the rules around data protection —the Information Commissioner’s Office

 

If you want to exercise any of your rights then just speak to your local youth worker if you regularly use our services or e-mail us at info@lgbtyouth.org.uk to tell us what you need or want to happen. We’ll then guide you through the process.

 

To find our mote about your digital rights visit https://5rightsframework.com/.

 

Information sent outside of the European Economic Area

We may sometimes use online platforms to collect, store and process data that are outside the European Economic Area (EEA). This could be for financial or technical reasons. If we do though, don’t worry, we’ll make sure they meet the EU data protection rules. When you do enter personal information online though, whether on our website or from secure links we’ve sent you, you need to know that you are automatically agreeing to the transfer, storage and processing of your information outside of the EEA.

 

Using other websites

When we use other websites like Discord, Facebook or Instagram, your data may be treated differently because these websites have their own privacy policies and security settings. Here are some tips from another charity to help you stay safe online: https://www.saferinternet.org.uk/advice-centre/young-people.   

 

Changes to this document

From time to time, we may change this notice. The most up to date version will always be held on our website so you can view it. We won’t tell you that we’ve made any changes unless they are really significant or we think they will affect you, so if you’re interested in keeping up to date with how we handle and use your information then see our website.

 

How to make a complaint

If you have a complaint about the way we process your information then please tell your youth worker or e-mail info@lgbtyouth.org.uk and we’ll aim to address any concerns.

 

However, if you would like to, please direct your complaint directly to the Information Commissioner’s Office: Information Commissioner’s Office, 45 Melville Street, Edinburgh, EH3 7HL.

Protecting Your Privacy

LGBT Youth Scotland is responsible for keeping your personal information safe and secure and for deciding how we use that information.

We’re a ‘data controller’ and a ‘data processer’. This page talks about how we handle your personal information.

 

What is personal information?

Personal information is any information which could identify you in some way, so a simple example would be your name or address.

 

How we use your information

We use your information in a number of different ways — what we do depends on the information you give us and this notice explains everything to you in more detail.

 

How long do you hold my information?

We’ll only keep your information for as long as is necessary and for the reasons we asked for it for. Once that time has expired we will securely dispose of it.

 

If you contact us

We will use the information you provide so we can contact you and answer your enquiry.

 

How do you use my information?

Depending on what we’re using your information for, we may use it on the following bases:

·       with your consent

·       for our legitimate interests

·       for compliance with our legal obligations

·       for vital interests

 

We may use your personal information for the following purposes:

·       to provide you with the LGBT Youth Scotland services you have requested

·       to respond to your enquiries

·       to further our charitable aims

·       for administration purposes

·       as required by law

·       to carry out risk assessments

·       to contact other professionals

·       to get help if there is an immediate risk to life

·       to use your case study in our campaign materials (only with your explicit consent)

 

We may also anonymise and pull together personal information to improve our services or for research and evaluation or for equality and diversity monitoring purposes. We’ll make sure you can’t be personally identified from such data.

 

How do you protect my information?

We’ve set up systems and processes to ensure that we keep your information accurate and up to date. We sometimes use online platforms so we can collect, store and process your information and when we do, we make sure that they meet certain legal standards to keep your data secure.

 

Here are the secure online platforms we use to help us provide our services:

·       We use Ninchat for our LiveChat service

·       We use SurveyMonkey for our research

·       We use MailChimp to send out information

·       We use Wufoo to collect, store and process information

·       We use WordPress for our websites

·       We use Stripe to process any payments

·       We use Donorfy to collect, store and process donor, volunteer and contact information

·       We use Eventbrite to collect, store and process information for events

·       We use Moodle and Microsoft 365 for our LGBT Charter

 

If you use LGBT Youth Scotland’s websites

We’ll collect the information you give us when you browse our site, including your IP address (a number that identifies each device using the internet), device type and, if you choose to share it with us, your location data, as well as how you use our website. We use something called Google Analytics. We collect the information through cookies which are a very small text file that is placed on your device when accessing information. We only use this information to improve our website so we can give you the best experience and the information you need.

 

For more detailed information on the cookies we collect, please see the “Cookies” information tab below.

 

You can set your browser to refuse and delete cookies and this handy site explains how you can do that: http://www.aboutcookies.org. It’s important to note that some of this website may not work if you change your settings.

 

If you subscribe to our mailing list

We ask for your name and contact details so we can keep you up to date with all the amazing things the charity and wider community we work with are doing to make Scotland the best place for LGBTI young people to grow up. We’ll also tell you about exciting events, news and other opportunities for you to engage with us.

 

We promise not to share or sell your contact details and we absolutely won’t spam you. We also ask if you are over or under 18 so we can make sure that you are receiving content which is relevant to your age range.

 

We’ll also ask what parts of our work you’re interested in so we can make sure your receiving something you actually want to read!

 

If you don’t want to be on our mailing list anymore all you need to do is hit the ‘unsubscribe’ button at the bottom of any of the e-mails and you’ll be taken off the list. If you have any problems then just e-mail info@lgbtyouth.org.uk and ask for your e-mail address to be removed and we’ll make it happen.

 

If you make a donation using our website

We ask for you contact details so we can contact you if there are any problems with the payment. We also ask if you want to join our mailing list (see above) – but that’s up to you!

 

We ask for your payment information – don’t worry, we don’t keep this information. We use a certified third party platform called Stripe to safely and securely process your payments. Any payment information you submit is encrypted. We need this information if you want to make a donation to us and to prevent and detect fraud against either you or us.

 

We use a secure third party platform called Donorfy to keep your contact information safe.

 

If you sign up to our LGBT Charter

When you sign up to our LGBT Charter, we request contact details and some information about your organisation, to help tailor the support we give you. That information is collected on a third party platform called Wufoo, to keep that information safe and in one place.

When you submit your evidence portfolio to receive your award, you can do so via Microsoft OneDrive or in paper copy. We will either delete that information after we have reviewed your submission, or give you back the paper copy folder. We might ask you if we can keep some of the information you submitted as a case study of good practice, to help other organisations improve.

 

Finally, we like to celebrate your success by displaying your organisation on our website when you receive your LGBT Charter award. You can tell us if you would prefer we didn’t do so.

 

If you apply for one of our jobs

When applying for a job with us we ask you for information that allows our short-listing panel to decide on the most suitable candidates for the role being advertised. We also ask for some basic details so we can get in touch with you about your application.

 

We want to make sure that our staff team is diverse. If you want to help us achieve this then just fill in the equal opportunities monitoring form on the jobs page. It isn’t anything to do with the recruitment process and we won’t ask for your name on the form. We’ll use the information you provide to see the characteristics of people applying for our jobs, then we can work out how to reach any underrepresented groups and encourage them to come and work with us.

 

If you apply to volunteer with us

When applying to be a volunteer with LGBT Youth Scotland we ask you for information that allows us to decide whether you have the skills, knowledge and/or experience needed to carry out the roles available. It also allows us to find the best role to match what you have to offer.

 

We want to make sure that our volunteer team is diverse. If you want to help us achieve this then just fill in the equal opportunities monitoring form on the volunteering page. It isn’t anything to do with the application process and we won’t ask for your name on the form. We’ll use the information you provide to see the characteristics of people wanting to volunteer with us, then we can work out how to reach any underrepresented groups and encourage them to come and join our team.

 

If you take part in one of our research projects or evaluations

Research and evaluation is important to us because the findings can often be quite powerful and we can use them to grab people’s attention and create positive change for LGBTI young people in Scotland. We can also use research to find out what you need from our services and how they might be improved.

 

If you take part in one of our research surveys then we won’t normally ask for things like your name and contact details. When we do though, it’ll be with your consent.

 

We collect research information through surveys on a secure third party platform called Survey Monkey to keep your information safe.

 

If you take part in one of our events or conferences

When we run events and conferences we need to know who’s coming and have the right information to hand so we can ensure the events are safe.  When you sign up to an LGBT Youth Scotland event will tell you why we need your information and what we’re going to use it for.

 

We use secure third party platforms called SurveyMonkey and Eventbrite to collect, store and process delegate information for our events.

 

What rights do I have around information about me?

You have a lot of rights relating to your personal information:

·       The right to be told how your personal information is being used (like this notice!)

·       The right to ask for the personal information we hold about you

·       The right to ask for information held about you to be fixed if it’s wrong

·       The right to ask for your information to be deleted or for someone to stop using it

·       The right to ask that we move some or all of your data either to you or another service provider

·       The right to complain to the team that make sure people are following the rules around data protection —the Information Commissioner’s Office

 

If you want to exercise any of your rights then just e-mail us at info@lgbtyouth.org.uk to tell us what you need or want to happen. We’ll then guide you through the process.

 

Information sent outside of the European Economic Area

We may sometimes use online platforms to collect, store and process data that are outside the European Economic Area (EEA). This could be for financial or technical reasons. If we do though, don’t worry, we’ll make sure they meet the EU data protection rules. When you do enter personal information online though, whether on our website or from secure links we’ve sent you, you need to know that you are automatically agreeing to the transfer, storage and processing of your information outside of the EEA.

 

Using other websites

When we use other websites like Facebook or Instagram, your data may be treated differently because these websites have their own privacy policies and security settings. Here are some tips from another charity to help you stay safe online: https://www.saferinternet.org.uk/advice-centre/young-people.    

 

Changes to this document

From time to time, we may change this notice. The most up to date version will always be held on our website so you can view it. We won’t tell you that we’ve made any changes unless they are really significant or we think they will affect you, so if you’re interested in keeping up to date with how we handle and use your information then see our website.

How to make a complaint

If you have a complaint about the way we process your information then please tell us and we’ll aim to address any concerns.

However, if you would like to, please direct your complaint directly to the Information Commissioner’s Office: Information Commissioner’s Office, 45 Melville Street, Edinburgh, EH3 7HL.

What is a cookie?

A cookie is a small file of letters and numbers that we may store on your browser or the hard drive of your computer or device. They cannot be used to identify you personally.

We use cookies to distinguish you from other users of the Site. This helps us to provide you with a good experience when you browse the Site and also allows us to improve the Site.

Cookies are used to improve services for you through, for example:

  • enabling a service to recognise your device so you don’t have to give the same information several times during one task;
  • recognising that you may already have given a username and password so you don’t need to do it for every web page requested; and
  • measuring how many people are using services, so they can be made easier to use and there’s enough capacity to ensure they are fast

Opting out

You can opt out of Google Analytics tracking of your browsing by downloading and installing a plugin for your browser. 

More information here: https://tools.google.com/dlpage/gaoptout/

Types of cookies used

The Site uses the following types of cookies:

  • Session cookies – this type of cookie allows websites to link the actions of a user during a browser session so that the website is able to store certain information whilst the user is browsing the site.
  • Google Analytics cookies – Google Analytics sets cookies to help us accurately estimate the number of visitors to the Site and volumes of usage. This is to ensure that the service is available when you want it and fast.

You can find more detailed information about the individual cookies we use and the purposes for which we use them below:

Google Analytics cookies

The information from the following cookies will be used by Google in accordance with Google’s privacy policy. For more information on the cookies set by Google Analytics please refer to the Google Analytics website:


CookieTypical contentPurposeExpiry
_utmaRandomly generated numberThis cookie is typically written to the browser upon the first visit to our site from that web browser. This cookie is used to determine unique visitors to our site and it is updated with each page view. Additionally, this cookie is provided with a unique ID that Google Analytics uses to ensure both the validity and accessibility of the cookie as an extra security measure.2 years
_utmbRandomly generated numberThis cookie is used to establish and continue a user session with our site. Each time a user visits a different page on our site, this cookie is updated to expire in 30 minutes, continuing a single session for as long as user activity continues within 30 minute intervals. This cookie expires when a user pauses on a page on our site for longer than 30 minutes.30 minutes
_utmcRandomly generated numberThis cookie operates in conjunction with the utmb cookie to determine whether or not to establish a new session for the user. Should a user visit our site, exit the browser and then return to our website within 30 minutes, the absence of the utmc cookie indicates that a new session needs to be established.End of session
_utmzRandomly generated number + info on how the site was reached (e.g. directly or via a link, organic search or paid search)This cookie stores the type of referral used by the visitor to reach our site, whether via a direct method, a referring link, a website search, or a campaign such as an ad or an email link. It is used to calculate search engine traffic, ad campaigns and page navigation within our own site. The cookie is updated with each page view to our site.6 months