Last updated: 4 March 2024
This privacy policy for UnLtd describes how and why we might collect, store, use, and/or share your information. UnLtd ('we', 'us'), the Foundation for Social Entrepreneurs, finds funds and supports social entrepreneurs to start their business or grow their impact.
Registration numbers
Head office address
123 Whitecross Street, Islington, London, EC1Y 8JJ
Website
unltd.org.uk Owned and operated by UnLtd
Defining Personal data
Under the UK ('UK GDPR') and Data Protection Act 2018, personal data is defined as 'any information relating to an identified or identifiable natural person ('data subject'), by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person'.
Defining Data Controller
A data controller is the individual or legal person who controls and is responsible to keep and use personal data in paper or electronic files. UnLtd is the data controller as defined by relevant data protection laws and regulations.
we request your name and email address in order to deliver it to you. The information you provide is stored in a third-party software called Microsoft Dynamics 365. You can read Microsoft's Privacy Statement, and the ClickDimensions Privacy Shield Notice for ClickDimensions, the Microsoft tool which we use to create the newsletters and send the emails. Microsoft participates in the EU-US Data Privacy Framework (and UK Extension to the EU-U.S. Data Privacy Framework) which has been deemed to be 'adequate' for the purposes of any transfers of personal data. You can update your preferences or unsubscribe from our e-newsletter lists at any time by clicking on the links in the newsletter.
We only use essential cookies on our website. You can find out more about our use of cookies in UnLtd's cookies policy.
(such as commenting on a blog post) we publish this information on the website that you contributed to. We retain this information for at least as long as the content is available. These details will not be shared with third parties, except where necessary such as to provide a defence from defamation claims.
We'll ask for a detailed range of information about you for the purposes of administration which will include photo identification such as driving licence or passport. We'll need to know who you are, and we need to be able to get in touch with you, as well as having sufficient information to make the assessment. The photo identification will be deleted at the end of the award support period. If you are given an award, we will also need financial information in order to fulfil contractual requirements which will include an image of a bank statement to show name, account and sort code. We store this data on our CRM system, Microsoft Dynamics 365.
Fairness and transparency in our funding process is important to us. All applications are assessed by a team of UnLtd staff and may also be assessed by external panel members. Decisions on the applications are made by a panel which is comprised of UnLtd Trustees, UnLtd's Director of Awards and where applicable our Partners.
We use Eventbrite, a third-party tool, to manage our event registration. We will ask for your name and email address and any additional access needs for these events. Eventbrite are registered to the United States and your information may be transferred to and within the United States or back out of the United States to other countries outside of your country of residence. They participate in the EU-US Data Privacy Framework (and the UK extension to the Framework); you can read Eventbrite's privacy policy.
We may also take photographs during the events for our social media channels. We will seek your consent to publish and store such photography.
We request sufficient details to help us ensure our volunteer network is as representative and relevant to our social entrepreneurs as possible. Your data will be used for the purpose of administering our Connect programme and ensuring diversity and equality of opportunity among our volunteers. Your data will be shared with relevant award winners as part of our pro bono and mentoring matching processes.
The following explains how we UnLtd (The Data Controller) intend to use the information you provide in your job application, our reasons for requesting it, who will have access to it and your rights.
What information do we collect from you?
We collect information that is specifically provided by you as part of an application process. We will collect the following (but not limited to):
We are using 'Contract' as our legal basis for processing, which means we can use your details and information so that we may assess your suitability for employment with us, as well as carry out our statistical analysis of recruitment.
How will data be stored, processed, used, and disclosed?
Details you provide in this application:
Unsuccessful candidates' data will be securely destroyed 6 months after the decision is made that your application has been unsuccessful adhering to the statutory requirement to retain information for a select period to allow candidates to challenge recruitment decisions. Successful candidates' information required for employment purposes will be retained throughout your employment, all other documentation not relevant will be securely destroyed 12 months after your start date has been confirmed, this includes any supporting documentation which you provide for criminal reference checking, proof of address etc.
How can I access the information you hold about me? Your rights
We provide access to individuals who wish to review the personal information retained when they apply for a job via our website and correct any inaccuracies it may contain. Individuals who choose to register may access their profile, correct, and update their details, or withdraw their details at any time. To do this, individuals can access their personal profile using their secure login. In all cases we will treat requests to access information or change information in accordance with applicable legal requirements.
Where you exercise your right to object or withdraw your consent, we may process your personal data without your knowledge or consent where we are permitted or required by law or regulatory requirements to do so. In such a case, we will not process more personal data than is required under the circumstances.
Just in case you need more information, visit Jobtrain's FAQs Data and Security.
If require further information, please don't hesitate to get in touch with us at HR@UnLtd.org.uk
If you contact us by phone, email or in writing:
If you exchange emails, telephone conversations or other electronic communications with our staff members, our systems will record details of those conversations, sometimes including their content.
When you contact us, we sometimes need to keep a record of the communication we have with you to operate, manage and develop our organisation.
Work-related partnerships
If you are interested in becoming an UnLtd Partner, we'll ask you to contact us with initial details such as your name, job title, the name of your organisation and your contact number.
We keep this information in order to invite you to collaborate on and participate in relevant work-related activities.
Finally, at times we may also collect criminal offences data and health data which some of our members choose to disclose, however, they are not encouraged to do so. We put extra measure in place for informing our members about the way we process, retain and protect their criminal offences and health data.
The lawful bases for processing are set out in Article 6 of the UK GDPR. At least one of these must apply whenever personal data is to be processed:
You have given UnLtd your freely, specific, informed or unambiguous consent for your personal data to be processed for a specific purpose.
The processing is necessary for the performance of a contract you have with UnLtd which includes any steps taken before entering into a contract.
The processing is necessary for UnLtd to comply with the law for tax, social security obligation and employment purposes (not including contractual obligations).
The processing is vital to an individual's survival.
The processing is necessary for UnLtd's legitimate interests, or the legitimate interests of a third-party, unless there is a good reason to protect the individual's personal data that overrides those legitimate interests.
Data rights
Your data subject rights are listed below:
Under the UK GDPR and the Act, you may ask for a copy of the information we hold about you and you may request rectifications be made to this information if it is inaccurate or not up to date. Please write to DPO@UnLtd.org.uk.
As a fundraising organisation, we undertake in-house research to gather information about you from publicly available sources, for example, Companies House, the Electoral Register, company websites, 'rich lists', social networks such as LinkedIn, political and property registers and news archives. We may also carry out research using publicly available information to identify individuals who may have an affinity to our cause but with whom we are not already in touch. We also use publicly available sources to carry out due diligence on donors in line with the charity's Gift Acceptance Policy and to meet money laundering regulations. This research helps us to understand more about you as an individual so we can focus our conversations about fundraising and volunteering in the most effective way, and ensure that we provide you with a donor experience that is appropriate for you. You will always have the right to opt out of this processing. If you would prefer us not to use your data in this way, please email us at DPO@UnLtd.org.uk.
We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply any agreements, or to protect the rights, property, or safety of the organisation, or other individuals. This includes exchanging information with other companies and organisations for the purposes of safeguarding or other statutory regulations we have to comply with as well as those organisations with whom you and we have reciprocal agreements for providing services for education or professional development.
The data that we collect from you will be processed on our servers in the UK. It may also be processed by organisations operating in the EEA that UnLtd has instructed or it may also be processed by an organisation operating in the United States who is part of the EU-US Data Privacy Framework (and the UK extension to the Data Privacy Framework).
If personal data is transferred outside the UK or EEA to a country without a designated adequacy rating, we may request your consent before processing the data or we will rely on another safeguard such as an International Data Transfer Agreement or the EU Standard Contractual Clauses (with the UK Addendum) stipulating that the data will be processed in accordance with the UK GDPR.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
To help protect the privacy of your data and the personal data you transmit through use of this our website, we maintain physical, technical and administrative safeguards. We update and test our security technology on an ongoing basis. We restrict access to your personal data to those employees who need to know that information to provide benefits or services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees' privacy responsibilities.
We store your personal data in accordance with our data retention policy. This policy is reviewed and updated internally to ensure we do not store your data for longer than is necessary. We also review how and where we store any data to ensure that we meet our obligation to store data securely.
In addition, some of the data we hold may be subject to certain legal and regulatory obligations, which provide a minimum retention period for different types of data. The retention period varies depending on the data we hold.
This privacy policy was last updated on 9 November 2023. UnLtd reserves the right to vary this privacy policy from time to time. Such variations become effective on posting on this website.
For further information on your rights and how to complain to the ICO, please refer to the ICO concerns page on the website.
Address Information Commissioner's Office Wycliffe House Water Lane Cheshire SK9 5AF
Phone 0303-123-1113 (local rate)