Last updated: 02/02/21
Dope Black CIC (“we”, “our”, “us”, “Dope Black”) are committed to protecting and respecting your privacy. We are a community interest private limited company established in England & Wales with a registered office at 1 Mentmore Terrace, London, England, E8 3PN and for the purposes of the General Data Protection Regulation (the “GDPR”) and the UK General Data Protection Regulation and the UK Data Protection Act 2018 (the “UK GDPR”), we are the data controller.
This Privacy Policy sets out the basis on which we will process any personal data or usage information we collect from you, or that you provide to us, in connection with your use of https://dopeblack.org/ (our “Website”), and in connection with the services provided to you as a member or otherwise (together, the “Services”). In addition, this Privacy Policy covers any personal data processed as part of our recruitment process for employees and volunteers.
Please read this Privacy Policy carefully so that you understand your rights in relation to your personal data and how we will collect, use and process your personal data. If you do not agree with this Privacy Policy in general or any part of it, you should not access our Website, use our Services, apply for a role, or otherwise provide your information to us.
- WHAT INFORMATION DO WE COLLECT?
Information you give to us
When you contact us via the contact form on our Website or by email or telephone, or when you sign up to be a member of our Services, we will collect:
- Personal details. Your name, email address, date of birth, home address, phone number, LinkedIn profile.
- Payment information (where you sign up for paid membership Services). We collect your payment information where you sign up for our paid membership Services (although we do not collect or process your payment information directly; payment information processing is completed by our trusted third party service providers).
- Optional information. You may choose to provide personal details such as location, ethnicity, business, marital status and social media handles in your profile information. We will also collect and process information you choose to include in communications with us (e.g. when sending us an email).
Technical usage Information
When you visit our Website, we automatically collect information sent to us by your computer, mobile phone or other access device. This information includes your IP address, device information including, but not limited to, identifier, name, and type of operating system, mobile network information and standard web information, such as your browser type and the pages you access on our Site.
Candidates
If you apply to a job or volunteer position advertised on our Website, we will process the following additional data:
- Personal information you provide to us. Your name, address and contact details, including email address and telephone number, details of your qualifications, skills, experience and employment history, information about your current level of remuneration, including benefit entitlements, and information about your entitlement to work in the UK. We collect this information from application forms you complete, CVs you submit or passports or identity documents that you submit.
- Sensitive information. Where permitted by law, you can provide certain sensitive personal data such as race or ethnic origin. We use this information for the purposes of equal opportunities monitoring under Article 9(2)(g) GDPR and Section 10(1)(c), Clause 8, Part 1, Schedule 1 UK Data Protection Act 2018. With your consent, you can provide health information about whether or not you have a disability. We use this information to make reasonable adjustments during the recruitment process.
- Criminal record checks. Where permitted by local law, we will conduct sanction list checks for prospective employees as part of the recruitment process for certain roles. We will only collect such information if it is appropriate given the nature of the role and where legally able to do so. We are allowed to use your personal information in this way as it is necessary for the purposes of carrying out legal rights and obligations in connection with employment under Article 9(2)(b) GDPR and Section 10(1)(c), Clause 1, Part 1, Schedule 1 UK Data Protection Act 2018.
- Information from third parties. We receive information from third parties in connection with your application such as referees, recruiters and organizations that provide background checks but only to the extent permitted by applicable law. We only use this information once a job or voluntary work offer to you has been made and will inform you that we are doing so.
- WHY DO WE PROCESS YOUR PERSONAL DATA?
Users of our Website and our Services:
We process your personal data in order to perform our contract with you, such as: (i) to provide you with our membership Services, other content and Website functionality; (ii) communicate with you about our Services such as your membership purchase or about your customer service inquiry; and (iii) register and maintain your account or membership with us.
We obtain your consent to process your personal data to: (i) personalize our services for you; (ii) personalize your profile; and (iii) if you opted into marketing, to communicate with you about products, services, marketing, promotions, events and other news and information we think will be of interest to you.
In order to be responsive to you and maintain our relationship, as a matter of legitimate interests, we will use your personal data to: (i) send you announcements in relation to security, privacy or administrative related communications (note that these communications are not marketing orientated); (ii) administer the Services and for internal operations, to conduct troubleshooting, data analysis, testing, research, statistical and survey analysis; (iii) maintain the safety and security of our users, Services, business; and (iv) build and maintain our community.
In addition, we may use the above your personal data to comply with any applicable legal obligations, to enforce any applicable terms of service and to protect or defend the services, our rights, the rights of our users or others.
Candidates:
We process your personal data in order to evaluate your job application and in order to contact you about your application.
We also have a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from applicants allows us to manage the recruitment process, assess and confirm a candidate’s suitability and decide to whom to offer a job or volunteering opportunity.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
- COOKIES AND OTHER TRACKING TECHNOLOGIES
We use cookies to collect information about your browsing activities over time and across different websites following your use of our Services. Cookies allow us to recognize and count the number of users and to see how users move around our website when they are using it. This helps us to improve our Services and the way our website works. You can find more information about cookies and how to manage them at http://www.allaboutcookies.org/. If you so choose, you can block or delete our cookies from your browser; however, blocking or deleting cookies can cause some of the Services, including any portal features and general functionality, to work incorrectly.
Comments
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
We use Google Analytics, which is a web analytics tool that helps us understand how users engage with the Services. Like many services, Google Analytics uses first-party cookies to track user interactions, as in our case, where they are used to collect information about how users use our Services. This information is used to compile reports and to help us improve our Services. The reports disclose website trends without identifying individual visitors. You can opt out of Google Analytics without affecting how you visit our Website – for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page: here.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
- HOW WE SHARE YOUR INFORMATION
We do not use or share your personal information to others except as described in this Privacy Policy. In certain circumstances, we share your information with third parties with your consent, as necessary, or as otherwise required or permitted by law. Specifically, we share your personal information:
- With service providers and vendors for business purposes. Such third parties include: (i) payment processors; (ii) data analytics vendors; (iii) security vendors; and (iv) website hosting vendors. These service providers receiving this information assist us with many different functions and tasks, such as: (i) processing and fulfilling orders and returns; (ii) providing customer service and customer relationship management services; (iii) providing data storage and disaster recovery services; (iv) processing payments; (v) communicating with you; (vi) securing our website and Services and preventing fraud; and (viii) promoting our products and services;
- In connection with an asset sale, merger, bankruptcy or other business transaction. We share your personal information while negotiating or in relation to a change of corporate control such as a restructuring, merger or sale of our assets.
- For legal reasons and to protect our Services and business. We share your information in response to a legal obligation or if we have determined that it is necessary to share your personal information to comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries, protect our interests or those of our users, or exercise or defend legal claims.
- When you request us to share certain information with third parties. With your permission or upon your discretion, such as through your use of social media widgets or login integrations, we disclose your personal information.
- With professional advisors. As necessary, we share you information with professional advisors functioning as service providers such as auditors, law firms or accounting firms.
- With referees and Disclosure Barring Service (Candidates only). If your application is successful and we provide you with an offer of employment or voluntary work, we will share your data required to obtain references for you, to obtain necessary background checks and with the DBS to obtain necessary criminal record checks.
- WHERE WE STORE YOUR INFORMATION
We are headquartered in the United Kingdom but your information will be transferred to and stored/processed outside of the United Kingdom or European Economic Area (“EEA”). Your information will be processed by staff operating outside the EEA who work for one of our service providers or partners. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this Privacy Policy and applicable laws.
For transfer of data outside the EEA, we will use GDPR compliant transmittal including (i) model clauses; (ii) binding corporate rules; or (iii) other GDPR compliant methods.
- HOW DO WE PROTECT DATA?
Although we do our best to protect your information, please note that we cannot guarantee the security of your information transmitted through the Website or over email; any transmission is at your own risk. However, once we receive your information, we take appropriate technical and organizational measures, reasonable precautions and follow industry best practices to safeguard your information against loss, theft and unauthorized use, access or modification. These safeguards, including internal policies and controls, help us to prevent fraud and unauthorized access and maintain data security. We also take reasonable precautions to limit access to your personal information within our internal systems.
- FOR HOW LONG DOES WE KEEP YOUR DATA?
Users of our Website and Services
We will retain your information as follows:
- if you contact us, we will keep your data for 36 months after you contact us;
- your technical usage information for 36 months; and
- data on your use of our Services and Website is retained for 36 months
If you stop using our Services or Website, we will store your information in an aggregated and anonymized format.
Comments
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Candidates
We will retain your information as follows:
- if your application is unsuccessful, we will hold your data on file for up to 6 months after the end of the relevant recruitment process. If you agree to and provide consent for us to keep your personal data on file in case there are future employment opportunities, we will hold your data on file until you withdraw your consent, at which point your data will be deleted or destroyed; and
- if your application is successful, personal data gathered during the recruitment process will be transferred to your personnel file.
- YOUR RIGHTS
If you are located in the European Economic Area, you have certain rights in relation to the personal information we hold about you. Some of these apply only in certain circumstances. We will respond to requests to exercise your rights without undue delay and at least within one month (although this may be extended by a further two months in certain circumstances). To exercise any of your rights, please email hello@dopeblack.org You can:
- access and obtain a copy of your data on request;
- require the organisation to change incorrect or incomplete data;
- require the organisation to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
- object to the processing of your data where the organisation is relying on its legitimate interests as the legal ground for processing;
- ask the organisation to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override the organisation’s legitimate grounds for processing data;
- object to marketing at any time by opting-out at the bottom of our emails to you[, or in your preferences center]; and
- withdraw your consent, where we rely on consent to process your personal data, by emailing us at hello@dopeblack.org
If you believe that the organisation has not complied with your data protection rights, you can complain to the Information Commissioner. If you are a resident of the EEA and you think we have infringed data protection laws, you can file a claim with the data protection supervisory authority in the EU country in which you live or work.
- WHAT IF YOU DO NOT PROVIDE PERSONAL DATA?
Candidates
You are under no statutory or contractual obligation to provide data to us during the recruitment process. However, if you do not provide the information, we cannot process your application properly or at all. If your application is successful, it will be a condition of any volunteering opportunity job offer that you provide evidence of your right to work in the UK and satisfactory references.
You are under no obligation to provide information for equal opportunities monitoring purposes and there are no consequences for your application if you choose not to provide such information.
- SOCIAL FEATURES AND THIRD PARTY WEBSITES AND LINKS
Certain features of the Services permit you to initiate interactions between the Services and third-party services or platforms, such as social networks (“Social Features”). Social Features include features that allow you to click and access the Company’s pages on certain third-party platforms, such as Facebook, Instagram and Twitter, and from there to “like” or “share” our content on those platforms. Use of Social Features entails a third party’s collection and/or use of your data. If you use Social Features or similar third-party services, information you post or otherwise make accessible will be publicly displayed by the third-party service you are using. Both the Dope Black and the third party have access to information about you and your use of both the Services and the third-party service.
Our Services contains links to other online platforms operated by third parties. We do not control such other online platforms and are not responsible for their content, their privacy policies, or their use of your information. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms (such as Facebook or Twitter) is also be viewable by other users of the Services and/or users of those third-party online platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators except as disclosed on the Services. We expressly disclaim any and all liability for the actions of third parties, including but without limitation to actions relating to the use and/or disclosure of personal information by third parties. Any information submitted by you directly to these third parties is subject to that third party’s privacy policy.
- AUTOMATED DECISION-MAKING
Recruitment processes are not based solely on automated decision-making.
- MODIFICATION OF THIS POLICY
We change our Privacy Policy from time to time. Updates to our Privacy Policy will apply only to information collected after the date of the change. We will note on our Website when our Privacy Policy has been updated. Please check the Website regularly for notices of changes to our Privacy Policy.
- CONTACT US
If you would like to exercise any of the above rights or if you have any questions about this Privacy Policy or complaints about how we are processing your personal data, please contact us at hello@dopeblack.org