The type of personal information we collect

We currently collect and process the following information:

• Personal identifiers such as names and contact details
  
• Case information
  
• Records of contact
  
• Employment status
  
• Job role
  
• Medical information
  
• Customer financial information
  
• Demographic information such as postcode and interest
  
• Website user statistics such as the country of visitor and the type of device used to access our site.
  

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• To assess eligibility for our services
  
• To monitor and evaluate the effectiveness of our services
  
• To provide training and consultancy services
  
• To recruit and manage volunteers and employees
  
• To comply with legal and regulatory requirements
  
• To maintain accurate financial records
  
• To communicate with stakeholders about our activities and services
  

We also receive personal information indirectly, from the following sources in the following scenarios:

• Referrals to our service from other organisations and agencies to assess suitability of our service and provide our services
  
• People involved in the care, support and management of service users to provide an appropriate level of service
  
• Law enforcement to effectively administer our advocacy, support, and appropriate adult services to provide an effective, well-informed service and manage risk accordingly.
  
• Healthcare to effectively manage and screen clients
  
• Local Authority, for safeguarding, social care and housing issues.
  
• Disclosure and Baring Service for onboarding of volunteers, trustees, employees to comply with our duty to protect people
  
• Information from educational institutions to support the needs of students
  
• Other charities to collaborate on projects
  
• Researchers to further the understanding of neurodiversity
  
• Family members or carers of service users to better support their needs
  

We also receive personal information indirectly, from the following sources in the following scenarios:

• Referrals to our service from other organisations and agencies to assess suitability of our service and provide our services
  
• People involved in the care, support and management of service users to provide an appropriate level of service
  
• Law enforcement to effectively administer our advocacy, support, and appropriate adult services to provide an effective, well-informed service and manage risk accordingly.
  
• Healthcare to effectively manage and screen clients
  
• Local Authority, for safeguarding, social care and housing issues.
  
• Disclosure and Baring Service for onboarding of volunteers, trustees, employees to comply with our duty to protect people
  
• Information from educational institutions to support the needs of students
  
• Other charities to collaborate on projects
  
• Researchers to further the understanding of neurodiversity
  
• Family members or carers of service users to better support their needs
  

We use the information that you have given us in order to provide and administer our services, to answer enquiries, to safeguard our vulnerable children, vulnerable adults, service users, clients, volunteers, trustees, and employees, to take payments from customers, for the prevention of crime, and to monitor and evaluate the effectiveness of our services. Additionally, we may use your information to provide training and consultancy services, to comply with legal and regulatory requirements, to maintain accurate financial records, and to communicate with stakeholders about our activities and services.

We may share this information with healthcare providers, educational institutions, local authorities, law enforcement, and other charities to provide the best possible services and support.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

1. Your consent. You are able to remove your consent at any time. You can do this by contacting info@impulse.org.uk
2. We have a contractual obligation
3. We have a legal obligation
4. We have a vital interest
5. We need it to perform a public task
6. We have a legitimate interest
   

How we store your personal information

Your information is securely stored.

We keep personal identifiers and case information for seven years from the last contact with you, after which we will dispose of your information by weeding digital stored information off from our NeuroLog Case Management System and permanently deleting it, shredding and destroying any paper records.

We keep customer financial information for six years from the end of the financial year in which they are made, after which we will dispose of your information by weeding digital stored information off from our NeuroLog Case Management System and permanently deleting it, shredding and destroying any paper records.

We keep website user statistics for two years, after which we will destroy this digital data by permanently deleting it.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at info@impulse.org.uk if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at info@impulse.org.uk.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk