GAMH Privacy Policy

Please read this Privacy Policy carefully as it contains important information about Glasgow Association for Mental Health (GAMH), who we are, how and why we are collecting, storing, using and sharing (known as ‘processing’) your personal data, your rights and how to contact GAMH if you have any questions or concerns about how we process your personal data.

1. About GAMH
2. What information do we collect and why do we collect it?
3. How do we collect, use and store your information?
4. Who might we share your information with?
5. What are your rights?
6. How to contact GAMH
7. Changes to this Privacy policy

1. About GAMH

GAMH is Glasgow Association for Mental Health. We have been supporting the mental health of people in Glasgow, their families and carers since 1978.

GAMH (Glasgow Association for Mental Health) is a company limited by guarantee registered in Scotland No. 162089.

GAMH is a charity registered in Scotland No. SCO11684.

GAMH may change this policy from time to time. You should check this page to ensure you are happy with any changes.

2. What information do we collect and why do we collect it?

GAMH will record and retain different types of information depending on how you engage with us. Information may include:

• Your name and contact details including email address, postal address and telephone number
• Date of birth and gender
• Payment details (if making a donation)
• IP address

We will also gather general information about the use of our website. Where possible, this information will be anonymised and will not identify individuals visiting our website.

There are certain types of sensitive personal data that require a higher level of protection. This includes information about a person’s health, race, ethnic origin, sexual orientation or religious beliefs. If you share any sensitive personal data with us, we will treat that information with due care and confidentiality and always in accordance with this Privacy Policy.

Lawful bases of processing will depend on the context and reasons for collecting your data. In accordance with data protection legislation, we will rely on one or more of the recognised processing justifications:

• Consent: you have provided us with consent to process your data
• Contractual obligation: to perform a contract we have entered into
• Legal obligation: to comply with the law
• Vital interests: to protect your vital interests or someone else’s
• Legitimate interests: where necessary for legitimate interests pursued by us and your interests and fundamental rights do not override those interests.

Sensitive personal information requires higher levels of protection and further justification for processing. When processing this kind of personal data, we will rely on one or more of the following justifications:

• Your explicit written consent
• The need to protect you or another person from harm
• For the establishment, exercise or defence of legal claims
• For the provision of health or social care or treatment.

3. How do we collect, use and store your information?

GAMH will collect information from you in the following ways:

Directly: when you complete one or more of the following:

• Visit our website
• Engage with us via social media platforms
• Enquire about our services and activities
• You agree to GAMH providing you with a service or information
• You enter into a contract with GAMH
• Donate to or fundraise on behalf of GAMH
• Register with us or subscribe to our mailing and email lists
• Receive a service from GAMH
• Make a complaint
• Submit a job application
• Apply to become a volunteer
• Agree to share your story or feature in a media release, news article, website article, social media post or email about your engagement with our services.

Indirectly: when you complete one or more of the following:

• When you have given your permission to other organisations to share your information
• Where we have CCTV installed at our services or premises
• Via a third-party website (for example Just Giving) if you have consented to support GAMH and given permission for your information to be shared
• Information publicly available.

If appropriate, we may:

• Collect details about your mental and physical health and wellbeing
• Collect data if you are sharing your personal experience or taking part in an online survey
• Collect data if you are engaging in a physical challenge for fundraising
• Ask you why you have chosen to donate to GAMH but this question will not be mandatory
• Require further detailed information form you if we are providing you with a direct service which would be outlined in a specific agreement or privacy statement with the service.

Cookies:

When you visit most websites, a small data file (known as a cookie) is stored on your device. GAMH uses cookies to collect information about how visitors use our website and to help us improve our website for users. You can choose not to accept cookies but this could make our website difficult to navigate or prevent some functionality from working. You can learn more about cookies in our Cookies policy[].

GAMH may use your information for the following purposes:

• To provide you with the service, product, advice or information you have asked for
• To contact you based on your relationship to us
• To fulfil a contract and provide monitoring information to the local authority or any other funders as required within the contract
• To understand how we can improve our services, products, or information
• To provide you with information about our future plans, services or initiatives. This may include information about surveys, training, future campaigns or policy initiatives, fundraising initiatives if you have given consent
• Keep a record of your engagement with us
• Keep your information up to date and accurate
• To comply with your communication preferences
• Process and administer your donation, support your fundraising, and process Gift Aid on your donations
• Send you fundraising updates and appeals we think might be of interest to you if you have given your consent
• Help us to ensure our communications to you are relevant
• To undertake reporting on or analysis of our services and performance. Where we undertake this activity, the data is usually anonymised unless and except we have advised and confirmed this with you in advance
• Segment our databases to help us target our resources more effectively.

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

GAMH will ensure that all appropriate technical, physical and organisational measures are in place to protect your personal information that we hold both on-line and off-line. The information will be stored securely and only kept as long as is reasonable and necessary, and in line with any statutory obligations placed on GAMH.

In situations where we may need to transfer or process your personal information outside the European Union, we will comply fully with all applicable legal obligations.

4. Who might we share your information with?

GAMH will not share data with third parties unless there is a legislative, regulatory, insurance, contract or compliance requirement to do so or where you have given clear consent. We will endeavour to share the minimum amount of data required for the purpose and restrict the use of data that may directly or indirectly reveal your identity.

All of our third-party service providers or partners are required to take appropriate security measures to protect your personal information in line with data protection legislation.

GAMH may share your information with our partners. When we do this, we will:

• Communicate this to you in advance
• Anonymise information before sharing.

Where GAMH engages a third party to deliver a service on our behalf, only required data will be shared. This will be in line with data protection legislation and covered by a data processing agreement.

GAMH may be required to share information in specific cases where we are providing a service or satisfying a contract, where we are required by law.

If you have chosen to share your story to help further the work of GAMH and you have given your explicit consent, we may share your information in materials promoting our work, services or fundraising or in specific documents.

GAMH will comply and co-operate with regulatory authorities when we are legally required to do so.

Where there is a perceived threat to life due to suicidal intent or serious concern regarding a child or a vulnerable adult, GAMH may be required, in line with its duty of care, to report these concerns to the police or social work.

In circumstances other than those noted above, GAMH will not share your information with any other organisation for marketing, market research, fundraising or commercial purposes.

GAMH will never pass your details to other websites.

GAMH will never sell any information about you.

5. What are your rights?

In accordance with data protection legislation, you have a right to:

• Request to see the personal information we hold about you*
• Request that inaccurate or incomplete information about you is corrected*
• Request that your information is erased (in certain circumstances)
• Request that we restrict processing of your information (in certain circumstances)
• Object to the processing of your information (in certain circumstances)
• Ask that we transfer your information to another organisation or to you (in certain circumstances)
• Change your ‘opt-in’ preferences
• Unsubscribe from email communications – if you no longer wish to receive email communications from us. You can do this by clicking on the ‘unsubscribe’ link at the bottom of our email communication.

*GAMH may require proof of identity before we provide you with this information or make changes.

To exercise any of your rights, please see the How to contact GAMH section below.

6. How to contact GAMH

Should you have any questions about this privacy policy, a data protection enquiry, would like to exercise any of your rights as outlined above, or change your communication preferences, please contact

Laura Middell, Central Resources Director

GAMH
St Andrews by the Green
33 Turnbull Street
Glasgow
G1 5PR
0141 552 5592

Email

You also have the right to contact the Information Commissioner’s Office (ICO) if you are unhappy with how GAMH process your personal information.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

7. Changes to this Privacy policy

GAMH will regularly review our privacy policy to ensure that it properly reflects how we process your information. Any changes will be incorporated here.