The Little Edi Foundation is aware that the security of your personal or company information is an important concern. The protection of your data is a serious matter to us and we want to be transparent about the data we maintain and the data we discard.

This privacy policy outlines the security measures we have in place for data protection, in line with the new EU General Data Protection Regulation (GDPR) enforced from May 25^th, 2018.

GDPR

The EU General Data Protection Regulation (GDPR) is the most important change in data privacy regulation in 20 years. This new regulation replaces the existing Data Protection Act (1998).

As part of the process of working to compliance with the new regulations internally we have:

• Reviewed the purposes of our processing activities, and selected the most appropriate lawful basis (or bases) for each activity.
• Checked that the processing is necessary for the relevant purpose, and are satisfied that there is no other reasonable way to achieve that purpose.
• Documented our decision on which lawful basis applies to help us demonstrate compliance.
• Included information about both the purposes of the processing and the lawful basis for the processing in this privacy notice.

What Information Do We Collect About You?

Site visitation tracking

• Unlike most websites, the Little Edi Foundation website does not track user interaction. 

Contact forms and email links

• If you contact us via any link, none of the data that you supply will be stored by this website or passed to / be processed by any third party data processors. Instead the data will be collated into an email and sent to us over the Simple Mail Transfer Protocol (SMTP). Our SMTP servers are protected by SSL meaning that the email content is encrypted using SHA-2, 256-bit cryptography before being sent across the internet. The email content is then decrypted by our local computers and devices.
• Should you choose to contact us using the contact form on our Contact us page, your name, email address and contact telephone number will be saved to our email database. In addition, the data will be collated into an email and sent to us over the Simple Mail Transfer Protocol (SMTP) 

Credit Card Information

• Donations on our website are collected through a GDPR compliant Merchant Service, Just Giving. We DO NOT store your credit card information.

Cookies

• Cookies provide information regarding the computer used by a visitor. We do not use cookies to gather any information from our website. 

Personal Details from Application Forms

• We hold personal information from application forms for our Little Edi Foundation Youth Scheme. These maybe details from individuals under the age of 18. We have parental permission for all information kept, files are kept securely and are discarded and five years. 

Third Party Data Processors

• We use a number of third parties to process personal data on our behalf, this may include the Charity Commission, DBS checking, booking flights etc. all these third parties have been carefully chosen and all of them comply with GDPR legislation. We will not disclose your information to any other party other than those clearly outlined in this Privacy Policy, unless it is under these specific circumstances:
• Where we are legally required by law to disclose your personal information.
• To further fraud protection and reduce the risk of fraud.

Your Rights

 Access & Correction

You have the right to review and amend any personal data stored in our systems. If you believe it may be out of date or incorrect. Just email littleedifoundation@gmail.com

Cancellation

You have the right at any time to withdraw your consent to the use of your personal data in the future. To do so, please email us at littleedifoundation@gmail.com

Data Breaches

We will report any unlawful data breach of the little Edi Foundation website’s database or the databases of any of our third party data processors to all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.

Contact Details

Please do not hesitate to contact us regarding any matter relating to this Privacy Policy. All concerns should be addressed to our President Mrs Teresa Griggs, 585 Galleywood Road, Galleywood, Chelmsford. Essex. CM2 8BS.