Privacy and Cookies

Data Protection and Privacy Notice

SPARK & CO. is the trading name for SPARK AND CO BAME HUB CIC (registered company number 12592816.

The Spark & Co. website, and associated data (including data collected from offline activities such as events and WhatsApp), is managed by COPY AND CODE UK LLP (trading as COPY & CODE), company number OC418926.

Looking after private information:

Spark and Co. BAME Resources Hub (“we”) is committed to making sure your privacy is protected. We do this by looking after your personal information carefully and keeping it private from other people. Spark and Co. BAME Resources Hub is the data controller and is responsible for processing data lawfully under GDPR.

What information we collect:

We will only collect your personal data to ensure we can keep you informed about our work, projects, training and educational opportunities and events. Information Spark and Co. BAME Resources Hub collects may include your full name, telephone number, email address and postal address.

Website Privacy & Cookie Policy 

Introduction 

  1. The Spark & Co. website utilises cookies. A cookie is a small text file stored on your device that allows Spark & Co., or other identified parties, to recognise that device on multiple visits. Cookies help personalise the browsing experience, and improve the performance of the site. 
  2. Cookies store information, the exact nature of which varies depending on the purpose of the website in question. As a standard, Spark & Co. uses cookies to store the following information: 
    1. The IP address of the user 
    2. Whether or not the user is logged in 
    3. To track whether specific elements of the website have been interacted with (for example, feedback or contact forms).

What Cookies are used? 

  • Spark & Co. use Google Analytics as the predominant analytics tool. This service uses a small number of cookies to track usage of the site, and help deliver statistics. 
  • Additional cookies are used for account-based access to Spark & Co., in order to determine when a user is logged in. Other uses include cookies to deliver on customisation options chosen by the logged-in user. 

Data Collected 

The use of analytics tracks a number of data points about each visit to the Spark & Co. website this data includes: 

  • The city from where the use is accessing the Spark & Co. website, the browser they are using, the language setting of their device, the type of device (including the operating system), and a generic demographic estimate of the user (including sex and age range)
  • Where the user has an account with Spark & Co., the other details are stored: Name, email address, and account password 

Website Security 

General 

  1. The Spark & Co. website is stored on a UK server, with hosting provided by Eco Web Hosting, and managed by Copy & Code UK LLP. 
  2. Regular malware and virus scans are performed on the server.  

Backup and Retention Policy 

  1. Spark & Co. website data is backed up on a weekly basis.  
  2. All backup files are encrypted and stored on a private UK-based server. 
  3. Backups for a period of 6 weeks.
  4. Temporary backups are also taken before any maintenance work is done on websites. These are until the maintenance work is considered successful, or for a period of 5 working days, whichever comes first. 

Rights of access and removal 

  1. Should a Data Subject of Spark & Co. wish to access, amend, or erase their data from the Spark & Co.’s website or records, then the subject must submit a formal request to Copy & Code (as the management agency for the website). This request must include the name of the Data Subject (or else, an alternative identifier), and where relevant the format in which the data should be presented. Copy & Code will liaise with Spark & Co. to return this request within 30 days of it’s receipt. 
  2. If the Data Subject wishes their data to be erased, then all reasonable endeavours will also be made to remove that information from existing backups. 

Requests 

Any requests pertaining to this Policy, or the articles outlined within, should be made to the Data Protection Officer of Spark and Co., who can be reached at ishita@sparkandco.co.uk.

 

Projects & Events Policy

What information we collect:

We will only collect your personal data to ensure we can keep you informed about our work, projects, training and educational opportunities and events. Information Spark and Co. BAME Resources Hub collects may include your full name, telephone number, email address and postal address.

In cases where you are attending one of our projects or events, it may also include other information about you or your needs (for example, information on your disabilities, carers, dietary requirements or emergency contacts).

  • We will not collect or keep personal information about you unless we need it.
  • We will not collect more information than we need and we will not keep it longer than we need to.
  • You can ask us to remove your personal information at anytime.

Keeping and using personal information:

  • All the personal data Spark and Co. BAME Resources Hub has for our projects and events is only processed by our staff. No third parties have access to your personal data unless the law allows them to do so.
  • We will try to make sure that all the information we hold about you is accurate and up to date. We will always let you know what information we hold about you if you ask us and will always correct any mistakes in the information.
  • We will never share personal information with other people unless there is a safeguarding issue. Please contact us if you would like to see our Safeguarding Policy.
  • Some of our service providers may have access to your data in order to perform services on our behalf – e.g. distribution mailing companies for specific events. We make sure anyone who provides a service for us meets our standards for data security. They will not use your data for anything other than the service that they are providing.

Photographs and films:

  • We sometimes take photographs and film at our sessions and events. Before taking any images we will ask for verbal consent from those parents/carers, young people and/or staff members we will be filming. Once the activity is over we then ask for written consent from the same people so that the photographs and films may be used by Spark and Co. BAME Resources Hub for our website, social media and communications. 

If you are unhappy about this, please tell us. We will make sure that we do not take any photographs/films of yourself and that you will not appear in any group photographs or films that may be used in our publicity.

You can do this by speaking to a Spark and Co. BAME Resources Hub staff team member on the day of an event/project or by writing to us via email at ishita@sparkandco.co.uk. 

Our Safeguarding Policy has more information on how we use photographs and film.

Removing personal information:

You can ask us to remove your personal information at anytime.

You can do this by speaking to a Spark and Co. BAME Resources Hub staff team member on the day of an event/project or by writing to us via email at ishita@sparkandco.co.uk. 

We will remove the information and show that we have done this if you ask us.

Data breaches:

If someone gets hold of your private information from our database and we don’t know about it, we will immediately review how we store information to find out what might have happened. If someone gets hold of a lot of private information, we will tell the Information Commissioner’s Office.