Privacy policy
OpenReferralUK.org (or www.OpenReferralUK.org) is provided by TPXimpact Limited (TPX) on behalf of stakeholders in the Local Digital community of organisations.
TPXimpact Limited is the Data Controller. A Data Controller determines how and why personal data is processed.
What data we collect
The personal data we collect from you includes:
- Contact information (I.e. email address) when you contact us to ask questions, queries or leave feedback or sign up to our mailing list alerts (including subscription preferences)
- Your Internet Protocol (IP) address, and details of which version of web browser you used when accessing the site
Cookies
Our website uses cookies. These are small files saved on your phone, tablet or computer when you visit a website. They store information about how you use the website, such as the pages you visit.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. These cookies are necessary for the website to function and cannot be switched off in our systems. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information. We do not use any other types of cookies for performance or tracking.
Why we need your data
We collect personal data in order to:
- feature information about people and organisations who are using Open Referral UK when you authorise us to do so
- test and allow inspection of open data feeds made available to us
- provide you with information about Open Referral UK resources
- monitor use of the site to identify security threats
Our legal basis for processing your data
The legal basis for processing personal data in relation to site security is our legitimate interests, and the legitimate interests of our users, in ensuring the security and integrity of OpenReferralUK.org.
Our lawful basis for collecting or using personal information is:
- Consent: you have given clear consent for us to process your personal data for a specific purpose. All of your data protection rights may apply.
What we do with your data
The data we collect may be shared with our sub-contractors and with public bodies who sponsor or manage Open Referral UK. It may also be shared with our technology suppliers, for example our hosting provider.
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
- use your data in analytics
We will share your data if we are required to do so by law - for example, by court order, or to prevent fraud or other crime.
How long we keep your data
We will only retain your personal data for as long as:
- it is needed for the purposes set out in this document
- the law requires us to
We will keep your email data: until you unsubscribe.
We will keep your feedback data: for 2 years.
We will delete access log data: after 120 days.
Children's privacy protection
Our services are not designed for, or intentionally targeted at, children 13 years of age or younger. We do not intentionally collect or maintain data about anyone under the age of 13.
Where your data is processed and stored
We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored.
Where possible, personal data is stored in the UK or the European Economic Area (EEA).
How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data - for example, we protect your data using varying levels of encryption.
We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.
Your rights
Under UK data protection law, we must have a ‘lawful basis’ for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
Your right to erasure - You have the right to ask us to delete your personal information. You can read more about this right here.
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
Your right to object to processing - You have the right to object to the processing of your personal data. You can read more about this right here.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
Your right to withdraw consent – As we have used consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the bottom of this Privacy Notice.
Links to other websites
OpenReferralUK.org contains links to other websites.
This Privacy Notice only applies to OpenReferralUK.org, and does not cover other sites that we link to.
Following a link to another website
If you go to another website from this one, read the Privacy Policy on that website to find out what it does with your information.
Following a link to OpenReferralUK.org from another website
If you come to OpenReferralUK.org from another website, we may receive personal information from the other website. You should read the Privacy Policy of the website you came from to find out more about this.
Information accessed via Open Referral UK data feeds
This Privacy Notice only does not cover data exposed from data feeds accessed via Application Programming Interfaces from publishers of services data. It is the publishers’ responsibility to protect the privacy of their users and only publish information that can be shared according to the General Data Protection Regulation.
Contact us or make a complaint
If you have any questions or concerns about how we handle your personal information, please email infogov@tpximpact.com.
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this Privacy Notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Helpline number: 0303 123 1113