The Private Physiotherapy Educational Foundation
Privacy Policy
PPEF is required by law to comply with the General Data Protection Regulation (GDPR May 2018). The Charity is committed to ensure that members of the organisation comply with this Act to ensure the confidentiality of any personal data held in whatever medium.
We have gathered personal data that has been provided to us by email, letter or telephone. We use this information to manage and administer grants.
We may also keep information contained in any correspondence you may have with us by post or by email.
We undertake at all times to protect personal data, required of the General Data Protection Regulation (GDPR).
We also take reasonable security measures to protect any personal data in storage.
Any information given to us will not be used for marketing by us or passed to any other organisation.
As part of our grant-making activities, the Private Physiotherapy Educational Foundation (PPEF) processes and uses data that applicants and grantees provide about their projects, organisations, beneficiaries and the applicants themselves. We obtain and use such information to assess applications, monitor the use of funding, conduct evaluations and publicise our grant-making. This includes transfer to and use by such individuals and organisations as we deem appropriate, but we won’t share your information with any other organisations for marketing, market research or commercial purposes, and we do not pass on your details to other websites.
We may pass on your personal information if we have a legal obligation to do so, or if the requirement to submit a report following the award of a grant is not met.
Lawful base for processing data
Consent of the data subject: – Processing is necessary for the performance of a contract with the data subject
Processing is necessary for compliance with a legal obligation
Legitimate Interest is the lawful basis upon which PPEF will rely to process the personal data it holds on grant applicants
Legal Obligation is the lawful basis for processing data on Trustees and members
Retention of Data: – Data will be retained for a minimum period of 7 years.
Access to Personal Data
You have the right to request:
- Access to the personal data we hold about you, free of charge in most cases.
- The correction of your personal data when incorrect, out of date or incomplete.
- For example, when you withdraw consent, or object and we have no legitimate overriding interest, or once the purpose for which we hold the data has come to an end.
- That we stop any consent-based processing of your personal data after you withdraw that consent.
You have the right to request a copy of any information about you that the PPEF holds at any time, and also to have that information corrected if it is inaccurate. To ask for your information, please contact Data Protection Officer, admin@ppef.org.uk.
If we choose not to action your request, we will explain to you the reasons for our refusal.
Your right to withdraw consent: – Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
Where we rely on our legitimate interest: – In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.