Privacy Policy

GROW Limited is committed to providing a safe and secure working environment where people with learning and other disabilities can build up their self-respect and confidence levels so as to be able to work and interact within our community.

Everyone who is involved in GROW’s work is important to us, and your data is important to us. We are committed to using it in accordance with the Data Protection (Bailiwick of Guernsey) Law, 2017. That includes keeping it safe and making it clear what information we collect from you and how we use it.

This page sets out how we do this. Oversight of our data protection system is the responsibility of Grow’s manager, who can be contacted at managergrowltd@cwgsy.net or on 01481 721865 if you have questions about storage of your data or if you wish to change how we contact you.

What data we collect and how it is used

What data we collect, how much and how it is used will depend on why you have provided it, but as an overall principle, we will only collect, use and otherwise handle your personal data:

Where you have consented to this for specified, explicit and legitimate purposes;
Where this is necessary to fulfil our own legal obligations;
Where it is necessary for legitimate reasons connected with the day-to-day operations of GROW, so long as these reasons comply with relevant laws, including those providing you with legal rights and freedoms.

Data is stored on a secure spreadsheet and in our email system, and is only accessed by the Management Team at GROW and its Board of Directors. It is secured electronically with password protection on a hard drive which is backed up weekly onto encrypted auto and cloud back-up systems. Hard copy documents are kept securely in fireproof office furniture.

We will not share your data with any other organisation, unless required to do so for legal or regulatory reasons.

Below are examples of kinds of personal data we collect and how it is used.

Supporters

If you support us, for example by a donation or signing up for a fundraising event, we will usually collect your name, contact details, and whether you would like to be contacted in the future and how we would do so. If appropriate, we may (but will not automatically) also ask you for your date of birth, financial details, reasons for support, information relating to health and disability, and responses to our work.

We collect this data to keep you up to date with information and to ask for more support in a way you have chosen, and to fulfil any legal responsibilities we have, such as financial reporting.

Volunteers

If you volunteer with us, or enquire about volunteering opportunities, we will usually collect your name, contact details, emergency contact details, bank details (if relevant), contact preferences, ethnicity, gender, availability to volunteer, disability (including physical and mental conditions) and criminal convictions.

We collect this data so that we can contact you about further volunteering opportunities and so that we can ensure the safety of volunteers, staff, clients and customers, and so that we can pay expenses.

Photography

We occasionally use photographs of staff, attendees, volunteers and customers in our administration and fund/profile raising activities.

Job Applicants

Occasionally GROW advertises paid staff vacancies. We will use the contact details you provide to us to contact you to progress your application. We will use any other information you have provided to assess your suitability for the role you have applied for.

We do not collect more information than we need to fulfil our stated purposes and will not retain it for longer than is necessary.

Retention period

We will keep your data only for as long as necessary, and in any event for no longer than 6 years or any alternative retention period that is required by the Data Protection (Bailiwick of Guernsey) Law, 2017 and any other applicable laws or regulatory requirements.

Your rights

We will only collect the data that we need to fulfil the purposes that you have given it to us for, or given permission for, or to fulfil any legal / regulatory obligations we have.

You have, under certain circumstances, the following rights in respect of personal data:

the right to access and port personal data;
the right to rectify personal data;
the right to restrict the use of personal data;
the right to request that personal data is erased;
the right to object to processing of personal data; and
where we have relied on consent to process the personal data, the right to withdraw consent at any time by contacting us via the contact details above.

You also have the right to lodge a complaint with the Guernsey Data Protection Authority and/or a supervisory authority in the EU member state of your usual residence or place of work or of the place of the alleged breach, if you consider that the processing of your personal data carried out by us has breached data protection laws.

The Guernsey Data Protection Authority is the Data Protection Commissioner, in regard to which more information (including appeal rights) is available here.

In limited circumstances we may approach you for your written consent to allow us to process certain particularly special category data or to use data for another purpose. Where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.