Privacy and Cookie Policy
Date: 3/10/2024
Introduction
Manchester Urban Diggers CIC (12014832) we are a non-for-profit social interest company by based in the UK with registered offices at St. Margarets Centre, Brantingham Road, M210TT.
Manchester Urban Diggers (MUD) is dedicated to finding solutions to problems with our local food systems. This includes; advocating for food sovereignty, providing volunteering opportunities and services and growing fruit, vegetables and herbs to make available to the local community. We always use organic growing methods and improve local biodiversity and soil health wherever we grow.
For the purposes of data protection legislation, Manchester Urban Diggers is processing your information, in relation to our campaigns, events, volunteering programmes, and educational projects, we are the controller of this provided personal data. We also partner with other organisations who may hold information on you based on how to register with them to use our spaces. For example if you register for a Forest School on our site.
You are not obligated under any laws to provide us with any personal data, but without providing such personal data, we cannot provide you with our services. By using our services, you hereby consent to allow us to process information in accordance with this Privacy Policy.
What do we mean by personal data?
Also known as personal information or personally identifiable information (PII), personal data is any information related to an identifiable person. For example, email address, name, date of birth etc.
What do we mean by consent?
It means that you don’t have to share data, but without sharing it, we cannot provide you with all of our services.
This notice applies to personal information we collect about you when you interact with us, for example when you use our websites such as https://www.wearemud.org/, or that we collect from third parties, as described in this privacy notice. It sets out:
- What information we collect, and from whom;
- How we use that information;
- How long we keep your information;
- Who we share your information with;
- How your information is protected;
- Your rights in relation to the information we hold about you.
We keep our privacy notice under regular review, and we encourage you to periodically review this page for the latest information on our privacy practices. Any material changes will be notified to you by updating them on our websites, together with any such other methods as may be appropriate.
What information we collect, and from whom
You may give us your personal information when you:
- opt-in to receive email, postal or telephone communications from us;
- use, or provide a comment on our websites;
- correspond with or contact us;
- interact with us on social media platforms;
- sign up to one of our newsletters or other communications;
- become a volunteer;
- become a member of our patreon group;
- attend one of our ticketed events;
- participate in our workshops, research, or focus groups;
- make a donation to us; or
- otherwise interact with us or provide information to a third party to be referred to us.
The data we collect
We collect, store and use the following types of information:
your name, email address, postal address, phone number, location, age range, impairment category, social media identity;
details relating to your enquiry including medical and health related information if you provide this to us;
financial information, such as bank account number, where required to process expenses;
details about your membership (patron);
correspondence you have had with us;
audio, images, videos and photographs of you, with your consent;
information about your computer/mobile device and your visits to and use of our websites, including for example your IP address;
details about you that are stored in forms you have filled in to volunteer or work with us.
any other information shared with us as described in section 1 above.
Some of the information we collect about you is classified under GDPR as ‘special category data’ which requires an extra level of protection. We for example may store medical information so we can report to our funders anonymised information about participants on our funded projects.
How we use your information
We use your data for the following reasons:
to verify you are a volunteer or member;
to make and manage payments;
to manage our relationship and communicate with you;
to respond to complaints and seek to resolve them;
to enhance your online experience;
to run events;
to better understand our members and supporters in general;
to inform our projects and other work;
to respond to individual experiences shared with us and for editorial content;
to understand your website journey, including what pages you have viewed and for how long;
to improve the effectiveness our use of social media;
to administer and keep safe and secure our websites and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
to respond to enquiries you contact us with;
If you use our casework services, to contact you about information relating to your case;
to train our staff and measure the quality of the service we give you; and
to obey laws and regulations that apply to us.
The legal grounds on which we rely are:
to fulfil our contractual obligations (for example in order to provide services requested by suppliers, project partners and to contact you if a problem arises with them);
to pursue our legitimate interests (for example to facilitate your use of our websites, or for marketing);
your consent; and / or
to fulfil a legal duty.
Legitimate interests
When we rely on our legitimate interests, these are as follows:
keeping our records up to date;
administering membership, volunteers, staff and third parties;
developing our volunteer and membership offers;
marketing our products and services;
administering our websites and keeping them safe and secure;
ensuring that content is presented in the most effective manner for you and your devices;
facilitating your use of our websites;
measuring the use of our websites and improving their content and accessibility;
measuring and understanding the effectiveness of advertising, and delivering relevant advertising to you;
tailoring content and our communications so that they are most relevant to you;
carrying out campaigns work and developing Manchester Urban Diggers’s policy and campaigns;
complying with legal and/or regulatory requirements;
identifying trends in volunteer, member and supporter behaviour;
informing and generating content.
How long we keep your information
Whenever we collect or process your personal data, we will only keep information about you for as long as we need to fulfil the purposes for which we are processing your information or for an appropriate retention period thereafter. At the end of that retention period, your data will either be deleted or anonymised. Examples of our retention periods are:
Membership/Volunteer: We would normally keep your information for the duration of your membership and then a period of up to seven years after you cease being a member.
Finance: Where we need to keep your information for financial reporting obligations, we would normally keep it for seven years from the date of payment.
Complaints: Where we need to keep your information relating to complaints you have made, we would normally keep it for seven years from the end of that matter.
Events: if you are attending one of our events as a non-member or general member of the public we will remove your data after 6 months from our systems.
We keep backups of data and renew these regularly to ensure preservation of your data.
What are my data rights?
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. If you are unhappy for any reason then you can contact us at hello@wearemud.org
Who we share your information with
We use the following third party platforms:
We use Google for our administration and to conduct the majority of our work and collecting data, submissions are processed via Google Drive. The privacy policy is here: https://policies.google.com/.
Stripe
We use Stripe as our third party payment gateway. Their privacy policy can be found here: https://stripe.com/gb/privacy.
Paypal
We use PayPal as a third party payment gateway tier privacy policy can be found here: https://www.paypal.com/uk/legalhub/privacy-full.
Patreon (https://www.patreon.com/MUD_CIC/)
We use Patreon to support membership activities. Their privacy policy can be found here: https://privacy.patreon.com/policies/en/.
Squarespace
We host our new website on SquareSpace. Their privacy policy can be found here: https://www.squarespace.com/privacy.
Eventbrite
We use Eventbrite to ticket some of our events. Their privacy policy can be found here: https://www.eventbrite.co.uk/help/en-gb/articles/460838/eventbrite-privacy-policy/.
Mailchimp
We use Mailchimp for our newsletters. You can find their privacy information on this page: https://mailchimp.com/legal/ also if you wish to unsubscribe from our mailing list in the footer of the email is an unsubscribe link.
Our staff team use Whatsapp to stay in contact with each other. Their privacy policy can be found here: https://www.whatsapp.com/legal/privacy-policy.
Discord
We use discord as our volunteer and staff communication platform. Their privacy policy can be found here:e: https://discord.com/privacy.
Social Media:
YouTube
Our YouTube Channel (https://www.youtube.com/channel/UCLpuq5HLMuZhgOY88KV73Yg) is where we share videos about our work. YouTube’s Privacy Policy is here: https://www.youtube.com/intl/ALL_uk/howyoutubeworks/our-commitments/protecting-user-data/
We use Instagram (https://www.instagram.com/mud_cic/) to share our events and other activities it’s privacy policy is here: https://help.instagram.com/155833707900388
We use Facebook (https://www.facebook.com/mud.cic/) to promote our activities and share events with our members their privacy policy is here: https://www.facebook.com/privacy/policy/
X
Our X account is https://twitter.com/mud_cic we share our activities and successes here, X's (formally Twitter) privacy policy is here: https://x.com/en/privacy
Our Partners
The Manchester Bees Forest School (https://www.manchesterbeesforestschool.co.uk/) events on our site are booked through Eventbrite who's privacy policy is here: https://www.eventbrite.co.uk/help/en-gb/articles/460838/eventbrite-privacy-policy/
Manchester East Academy (https://www.theeastmanchesteracademy.co.uk/) we do not hold the information for projects run Manchester East Academy in our systems you can contact them or read their privacy policy here: https://www.theeastmanchesteracademy.co.uk/legal/privacy-notice
What can I do if I am unhappy with the way Manchester Urban Diggers (MUD) has processed my personal data?
You also have a right to lodge a complaint with the supervisory authority for data protection. In the UK this is:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
0303 123 1113 (local rate)
ICO Registration Number: ZB773769
Cookies
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
How we use cookies
We use cookies for the following purposes:
Authentication – we use cookies to identify you when you visit our website and as you navigate our website
Status – we use cookies to help us to determine if you are logged into our website
Security – we use cookies as an element of the security measures used to protect user accounts, including preventing fraudulent use of login credentials, and to protect our website and services generally
Analysis – we use cookies to help us to analyse the use and performance of our website and services
Cookie consent – we use cookies to store your preferences in relation to the use of cookies more generally.
Accessibility – if you use our accessibility toolbar, we will use cookies to remember your preferences for 12 hours of use throughout the website.
Cookies used by our service providers:
Our service providers use cookies and those cookies may be stored on your computer when you visit our website.
Managing cookies
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version.
Blocking all cookies can have a negative impact upon the usability of many websites.
If you block cookies, you will not be able to use all the features on our website.
About this Policy
This policy shall be reviewed at least annually.
DPO (data protection officer)
Nominated DPO: Sam Payne (Director)
Deputy DPO: Mike Hodson (Director)
Date: 3/10/2024
Version: 1
We are committed to reviewing our policy and good practice annually. This policy statement and accompanying procedures were last reviewed on 3/10/2024.