What personal data do we collect about you?
- Information you share with us relating to research and training & consulting purposes. This information may include name, email address, address, employer details, IP address, your stated attitudes, experiences, behaviours and activities amongst other personal details.
- We only collect sensitive personal data from you and process this data where you have given your explicit consent.
Where do we collect personal data about you from?
The following are the different sources we may collect personal data about you from:
- Directly from you. This is information you provide to us when you sign up to take part in our research, attend our workshops or get in touch with us. If you are a current customer or partner, this is information you provide to us in order to fulfil contractual obligations and process invoices and payments.
- Through publicly available sources such as LinkedIn.
- From your present employer. This is information your employer provides, when supplying employee details of those it wishes to take part in our research and training & consulting activities.
How and why we use your personal data?
- We use your personal data as necessary to your involvement in taking part in any research or training and consultancy activities, to communicate with you about our work or to provide you with outputs and reports relating to the work we do.
- We may be required to handle details of suppliers, clients and current, past and prospective employees. We store data so that we can fulfil our contractual obligations with you. Data may also be stored on our email system if we enter into further communication with you. We store your name and contact details on our finance database so that we can maintain appropriate financial records.
- To send marketing information where we have your consent.
- To ensure we do not send unwanted information to those who have informed us they do not wish to be contacted.
How do we collect your data?
1. When you visit our website
- When you submit your personal information via our website. We collect and store information that you submit voluntarily through our website forms for example when you apply for our journal, sign up to our blog posts, opt in to other communications or use our website contact form.
- Analytical cookies and tracking are not enabled on our website. Our website is delivered over HTTPS.
- We use sharing buttons and tools so you can easily like or share our content on Facebook, Twitter and other social networks. Some of these social networks set their own cookies for statistical and/or marketing purposes. The privacy implications on this will vary from social network to social network and will be dependent on the privacy settings you have chosen on these networks.
2. When you contact us
- While you can use our website without giving us your personal information, once you contact us via our website or other means, we collect and store the information you have sent us for contacting you. The information you give us (i.e. your name, email address, telephone number) will be processed and stored so that it is possible for us to contact and respond to your request now or in the future.
- If you are a customer or supplier, sometimes we require you provide us with information for contractual or legal reasons. If you do not provide personal information when requested, you may not be able to use our Services if that information is necessary to provide you with the service or if we are legally required to collect it.
How long do we keep your personal data for?
We keep your information as follows:
- Those taking part in research we keep your details for no longer than 6 months.
- For client, supplier, employee and job applicant contact details and correspondence, we keep your details for no longer than 6 years.
Who do we share your personal data with?
- Data processors: We share personal information with our third party data processors when it is reasonably necessary to do so in order that we can provide research and consultancy services to you. The terms and conditions of contracts we have in place with these data processors specify they will keep your data safe and only use it in accordance with GDPR (General Data Protection Regulation) or that they are compliant with Data Protection Act 1998 and working towards GDPR.
- Service Providers: We use other service providers to help us provide our work, including our IT, website and mailing tool providers who only have access to your information as reasonably necessary to perform these tasks on our behalf.
We do not share personal data with any third parties for their direct marketing purposes.
What legal basis do we have for using your information?
For those engaged in our research, training and consultancy activities, this is on the basis of consent. When you consent, you can change your mind at any time.
For customers or suppliers, we need your personal information to provide you with services and products requested by you, or to respond to your inquiries.
How will we contact you?
We may contact you by phone, email, post or via LinkedIn.
How do we keep your information secure?
When we collect information about you, we make sure that your information is protected from unauthorised access, loss, manipulation, falsification, destruction or unauthorised disclosure. This is done through appropriate technical and organisational measures.
How can you access, correct or delete your information?
If you believe that the information we have about you is incorrect, you are welcome to contact us so we can update it and ensure it is accurate.
If at any point you wish us to delete information we hold about you, please contact us.
For either, please email firstname.lastname@example.org
We will action or provide the information you request within 30 days, following receipt of the request and proof of identity. We act on requests and provide information free of charge.
What other important information do I need to know?
We often publish and link to reports, blogs and articles written by others who are not employed by 100%Cotton. We are not responsible for the accuracy of either the content or any personal data contained within this content.
The information in any e-mail (and/or document attached) sent by or on behalf of 100%Cotton is confidential and may be legally privileged and/or contain copyright material of 100%Cotton. This information is intended solely for the use of the named addressee. If you are not the named addressee of an email from 100%Cotton, please notify the sender immediately and do not disclose, copy or distribute the contents to any other person.
Updates to this policy
Effective Date: This policy was last updated on 22nd May 2018.