Ulex Project Privacy Statement.
At the Ulex Project we respect your privacy and understand how important it is that your personal information remains secure.
We will not reveal information about you without your permission and will never disclose your attendance on a course or training unless we are required to do so for legal reasons or by the emergency services.
We hope that this statement answers any questions you may have regarding our care of your information but if you have any further questions please contact: email@example.com
1. Personal data that we process
The following table explains the types of data we collect and the legal basis, under current data protection legislation, on which this data is processed.
2. How we use your data
We will only use your data in a manner that is appropriate considering the basis on which that data was collected, as set out in the table at the top of this policy. For example, we may use your personal information to:
• reply to enquiries you send to us;
• facilitate communication, knowledge sharing and collaboration between members of the Network via the Mobilize community platform;
• organise trainings, activities and services such as events and associated materials;
• where you have specifically agreed to this, send you communications by email relating to our work which we think may be of interest to you;
• handle payments, donations or other transactions that you initiate.
3. When we share your data
We will only pass your data to third parties in the following circumstances:
• you have provided your explicit consent for us to pass data to a named third party;
• it is in the legitimate interests of the Network and its members to share your data with a third party for the purpose of fulfilling your intention to remain a member of the Network and our intention to carry out the aims of the Network effectively for the benefit of its members, and these interests are not overridden by your interests, or your fundamental rights or freedoms; or
• we are required by law to share your data.
4. Who at the Ulex Project has access to my data?
Course booking information:
The information we store on our booking system is accessed by our Events Coordinator and the Programme Director, as required as part of their duties. The information you provide regarding your aspirations, previous experience and aims, along with any other related training needs is accessed by the facilitators who are running the course and the Programme Director.
Other members of staff may retrieve information from the booking system as part of their duties, for example to access numbers of bookings, for future programme planning, or in the event of an emergency when next-of-kin contact details may be needed. In addition, our IT Consultants have access to our systems in order to provide us with the support we need.
Donation information is accessed by our Events booking team as required as part of their duties, and for the purposes of issuing thank you communications.
5. Data Security
We use technical and organisational measures in order to protect our website and other systems against loss, destruction, access, modification, or distribution of your data by unauthorised persons. However, despite regular checking, we cannot guarantee complete protection against all risks.
6. How do you use my information to keep me up-to-date with Ulex Project news and activities?
From May 2018, in line with our commitment to best practice around data protection, we will only contact you about our news, activities and fundraising appeals if you have specifically said you agree to us doing this, and we will only contact you in the way(s) you have agreed to.
Our communications consist of a quarterly e-newsletter and occasional emails from Ulex Project on other news and activities which we send by email.
7. What if I want to change my communications preferences at a later date?
Every email message or e-newsletter we send includes a link to opt out of receiving future emails. You can also let us know of any changes to your communications preferences by emailing firstname.lastname@example.org
You can contact us at any time to notify us of changes such as a new address or email address. If you opt out of receiving our communications at any point, we will record this request on our database. This will ensure that you do not receive any further communications from us, unless in relation to any course bookings or donations.
8. Do you ever share my information with third parties?
We do not share your information for any other purposes.
9. How is my credit/debit card information processed?
If you use your credit or debit card to donate to us, or pay for a course registration online those payments are currently processed by a secure third party website: www.paypal.com
Transactions made over the phone or via a donation form following your course
If you use your credit or debit card to pay for a course or make a donation to us via a donation form, we will ensure that this is done securely and in accordance with the Payment Card Industry Data Security Standard. Only staff authorised to process payments are able to see your card details.
After your transaction has gone through, your payment details are detached from the form and securely disposed of. This information is stored with our accounts in locked locations.
Standing Order forms
If you send us a Standing Order form by post, your form is stored by our Finance Department in a secure location for as long as your payments are active, after which point your form is securely disposed of.
10. How secure is the information I give you?
The Ulex Project takes the care of your data seriously and undertakes to protect your personal information by putting in place appropriate physical, electronic, and managerial procedures to safeguard and secure the data we collect.
In today’s cyber environment it is unfortunately not possible to completely guarantee against loss, misuse or alteration of data, for example in the event of a successful cyber-attack. However, should this scenario arise, we have a robust data breach notification procedure in place and will contact you as soon as possible giving full details of any data that has been compromised.
11. How long will you keep my information?
Course booking information
The information you disclose in relation to your booking is held on our database to assist with your current booking and any future bookings. Building up historic information on the course you have attended helps us fulfil our duty of care to you and ensure your training needs are met.
Online bookings are downloaded to our database and are stored within the backend of our website for up to two months.
Your donation information is held on our database for financial auditing purposes and so that we can keep a record of your support for us. Online donations are downloaded to our database and are stored within the backend of our website for up to two months.
12. The right to be forgotten
You have the right to be ‘forgotten’, which means that if you request us to, we will remove all the data that we hold on you from our systems. Complete removal of information from our systems will result in the loss of all historical data. If you decide to come back to the Ulex Project at a later date, we will re-start the booking process and, if necessary, ask you to provide us with your previous experience again.
If you have made a booking or donation within the last 12 months we are required to retain your details for two years for administrative purposes. Records of financial transactions will need to be held for seven years for accountancy and audit purposes.
13. Rights you have over your data
You have a range of rights over your data, which include the following:
• Where data processing is based on consent, you may revoke this consent at any time and we will make it as easy as possible for you to do this.
• You can leave the Mobilize Network at any time by leaving the community on Mobilize or deleting your Mobilize account. We will delete your data when you leave.
• You have the right to ask for rectification and/or deletion of your information.
• You have the right of access to your information.
• You have the right to lodge a complaint with the Information Commissioner if you feel your rights have been infringed. A full summary of your legal rights over your data can be found on the Information Commissioner’s website here: https://ico.org.uk/
If you would like to access the rights listed above, or any other legal rights you have over your data under current legislation, please get in touch with us. Please note that relying on some of these rights, such as the right to deleting your data, will make it impossible for us to continue to deliver some services to you. However, where possible we will always try to allow the maximum access to your rights while continuing to deliver as many services to you as possible.
14. How can I see what information you hold on me?
Under the Data Protection Act 1998 and the General Data Protection Regulation you can request a report detailing the information we hold about you. You are welcome to contact us using the following methods:
Email : email@example.com
Website : https://ulexproject.org/contact-us/
We aim to issue an initial response to all enquiries within five working days, and will offer a full response to all information access requests within a month. If we require additional time we will keep you informed.
The following information will be required before access is granted:
• Full name and contact details of the person making the request
• Their relationship with the organisation
• Copy of passport or national ID card
Embedded content from other websites
If you prefer to disable cookies on this site and on others, the most effective way to do this is to restrict the placement of cookies or completely disable them in your browser settings. You can also configure automatic deletion of cookies when you close the browser window.
Here you find more information on how to delete cookies in the most commonly used browsers and how to change cookie settings:
Google Chrome: Website
Mozilla Firefox: Website
Apple Safari: Website
Microsoft Internet Explorer: Website
Microsoft Edge: Website
16. Information on Google Services
We use different services of Google, Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, US, on our website.
Please find more information about the individual specific services of Google that are used on this website further below. Since we include Google services, Google might collect and process information (including personal data). It cannot be excluded that Google also transfers this information to a server in a third country. As stated in Google’s Privacy Shield certification (at https://www.privacyshield.gov/list under the search term “Google”), Google has committed to observe the EU–US Privacy Shield Framework and the Swiss–US Privacy Shield Framework on the collection, use and storage of personal data from EU member states and Switzerland, respectively. Google, including Google, LLC and its wholly owned subsidiaries in the US, have declared with its certification that they will observe the Privacy Shield principles. You will find more information at:
We cannot influence what data Google actually collects and processes. However, Google states that it may process the following information (including personal data):
• Log data (in particular the IP address)
• Location-related data
• Unique application numbers
• Cookies and similar technologies
If you have logged in to your Google account, Google – depending on your account settings – can add the processed information to your account and treat them as personal data, see in particular:
Google states the following:
“We may link personal data from a service to information and personal data from other Google services. This simplifies sharing of content with friends and acquaintances, for example. According to your account settings, your activities on other websites and in apps may be linked to your personal data to improve Google services and advertisements shown by Google.”
You can avoid having these data added by logging out from your Google account or making the necessary settings in your Google account. You can also prevent the storing of cookies – if Google places them – by making the necessary settings in your browser. However, we note that you may not be able to fully use all functions of this website in this case.
For information regarding Google’s privacy settings please refer to
17. Information on Youtube
We use YouTube videos and YouTube plug-ins on our website. YouTube is a service of YouTube, LLC (“YouTube”), 901 Cherry Ave., San Bruno, CA 94066, US, and is provided by YouTube. YouTube, LLC is a subsidiary of Google, Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, US.
We have integrated YouTube by embedding the service on our website using iframe tags. If an iframe tag is loaded, YouTube or Google may collect and process information (including personal data). We cannot exclude that YouTube or Google will transfer the information to a server in a third country.
Refer to section 13 of this data privacy statement (“Information about Google Services”) for more information regarding Google’s Privacy Shield certification and other relevant data about data processing by Google as part of your use of Google services.
We do not collect any data when you view a YouTube video on our website. We have integrated YouTube to present you several videos that you can view directly on our website. The legitimate interest required for this lies in the great benefit that YouTube offers. By including external videos we decrease the load on our servers and can use those resources for other purposes. Among other things, this can increase the stability of our servers. YouTube or Google also has a legitimate interest in the (personal) data collected in order to improve their own services.
The provision of personal data is not mandatory, neither legally nor contractually, and is also not required to conclude contracts. You are also not obliged to provide personal data. However, if you do not provide your personal data you may not be able to use our website, or at least not in its entirety, as a result.
For more information, refer to YouTube’s or Google’s privacy policies at
To learn more about Google’s privacy settings, visit
19. Who can I contact for more information?
Our processing of data is overseen by the Communications Management team at the Ulex Project. The person to contact regarding day-to-day data protection issues is firstname.lastname@example.org