Privacy Notice Website Privacy Notice Overview Human Development Scotland (HDS) is a not-for-profit charity set up to relieve mental and emotional distress by increasing the availability of and access to, high quality psychodynamic and psychoanalytic counselling and psychotherapy for all who need them. As HDS process personal data we are registered as a data controller (Registration Number ZA004531) with the Information Commissioner’s Office (ICO), which means we are responsible for deciding how we hold and use personal data under Data Protection Legislation. In certain circumstances, we may be a joint data controller. Our Data Protection Officer (DPO) is Keiran McAuley. To contact us regarding our use of personal data, you may email the DPO at [email protected] Introduction We have issued this notice to describe how we handle personal information that we hold about users of our website (collectively referred to as "you"). We respect the privacy rights of individuals and are committed to handling personal information responsibly and in accordance with applicable law. This notice sets out the personal data that we collect and process about you, the purposes of the processing and the rights that you have in connection with it. Types of Personal Data We Collect The types of personal information we may process include, but are not limited to: Identification data: such as your name Contact details: such as telephone/email addresses Location information: such as address Employment details: such as job title/position, office location, employment contract etc. Enquiry Data: Data relating to the nature of your enquiry e.g. data fields within application form or client referral form Financial information: such as banking details for processing transactions Purposes for Processing Personal Data Your personal data will only be used by us to fulfil the purpose of which the data was received, for example: Process your enquiries, bookings, requests, applications or payments Action and respond to your enquiry, questions or comments Provide or administer services, such as e-newsletters, or training materials Display your comment on the website Provide you with information relating to Human Development Scotland, or that we feel may be of interest to you Maintain our organisational records Ensure you are on the correct mailing list(s) Legal Basis for Processing Personal Data Our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the way we collect it. We will normally collect personal data from you only where we need it to perform a contract with you, where we have your freely given consent to do so, or where the processing is in our legitimate interests and only where this interest is not overridden by your own interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person. Any processing based on consent will be made clear to you at the time of collection or use – consent can be withdrawn at any time by contacting HDS. Who We Share Your Personal Data With? We take care to allow access to personal data only to those who require such access to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it. Whenever we permit a third party to access personal information, we will implement appropriate measures to ensure the data is used in a manner consistent with this notice and that the security and confidentiality of the data is maintained. Transfers to Third-Party Service Providers In addition, we make certain personal data available to third parties who provide services to us. We do so on a "need to know basis" and in accordance with current data protection legislation. For example, some personal data will be available to Mailchimp who we use for our marketing automation. This information you provide when signing up to any of our mailing lists will be transferred to Mailchimp for processing in accordance with our Data Protection Policy. Your data may also be available to our website provider (Access Group) to enable them to deliver their service to us, carry out analysis and research on demographics, interests and behaviour of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply: Your data will be made available to our website provider The data that may be available to them include any of the data we collect as described in this policy. Our website provider will not transfer your data to any other third party or transfer your data outside of the EEA. They will store your data for a maximum of 7 years. This processing does not affect your rights as detailed in this privacy policy. Data Retention HDS are required to only retain personal data for “as long as is necessary”. We hold different types of personal data and information for different lengths of time, depending on both legal and operational requirements and we will keep some personal data longer than others in line with financial, legal or archival requirements. We will not keep personal data longer than is necessary for the purpose or purposes for which it was processed. When personal data is no longer needed, it will be disposed of securely unless there are any legal or other grounds for retaining the data. Our HDS Retention Schedule outlines which data can be retained for periods of time, and where data needs to be securely destroyed in line with the schedule. For more information, or a copy of our Data Retention Schedule please contact HDS Data Protection Officer. Cookies Information about our website Cookies can be viewed on the HDS website via the “Manage Cookie Preferences” link in the bottom right-hand corner, or via the cookie consent pop up that appears when accessing website. The content is set and maintained by Access UK, so it stays up to date with the Cookies used on our website. Your Rights We will process all personal data in line with data subjects’ rights. Data Protection Legislation gives certain rights to individuals in respect of personal data that we hold about them. You may exercise the rights available to you under data protection law as follows: The right to be informed. The right of access. The right to rectification. The right to erasure. The right to restrict processing. The right to data portability. The right to object. Rights in relation to automated decision making and profiling. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. To exercise any of these rights, please contact the Data Protection Officer. List of Third Parties The below is a list of third parties who may be able to access your data, depending on the nature of your use of the website or enquiry to HDS. The below Third Parties will only access appropriate data where they have legitimate interest. Raising IT/Access: Website platform (event bookings) MailChimp: Marketing automation (e-Newsletter) Google: Website analytics Stripe: Payment processing (bookings and financial donations) Issues and Complaints We try to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures. This notice was drafted with clarity in mind. It does not provide exhaustive detail of all aspects of our collection and use of personal information. However, we are happy to provide any additional information or explanation needed. If you want to make a complaint about the way we have processed your personal information, please contact the DPO by emailing [email protected] for our complaints procedure, or you may raise a complaint with the Information Commissioners Office, but we would like the opportunity to resolve any issues first. You can contact the Information Commissioner’s Office in their capacity as the statutory body which oversees data protection law – www.ico.org.uk/concerns. Updates to this Notice This notice may be updated periodically to reflect any necessary changes in our privacy practices, policies or procedures. Contact Details Please address any questions or requests relating to this notice to the Data Protection Officer at Human Development Scotland, Victoria Chambers, 142 West Nile Street, Glasgow G1 2RQ. This notice was updated in March 2025 and is reviewed annually. Manage Cookie Preferences