Millie Mittoo Children's Projects (MMCP)
  HOME      WHAT WE DO      HOW YOU CAN HELP      EVENTS      CONTACT US

Privacy Policy

1: WHAT IS A PRIVACY POLICY?

A privacy policy outlines the approach an organisation takes to ensuring privacy around its user's stored data. This is the privacy policy for Millie Mittoo Children's Projects (MMCP).

2: DATA SUBJECT CATEGORIES

These are our data subject categories:

Personal and Business Contacts (from the 'Contact-Us' form).

Children in our care.

2.1) DATA PROTECTION NOTIFICATION FOR DATA SUBJECT CATEGORIES, PERSONAL AND BUSINESS CONTACTS

MMCP collects the following information via this website and under the following circumstances.

2.1.1) In our 'Contact Us' form, users must supply their first and last name and email address. The user may also give the name of the organization they are operating on behalf on and their position within it, if applicable. This data together with the supplied enquiry or comment, is held on file for as long as it relevent to our operations. As determining this is a manual process, there is no specific time limit on how long the data is retained and so this is indefinite. It will be manually deleted before this if we recieve a deletion request.

2.1.2) We keep records of deletion requests. These comprise only the date of the request, the date the request was carried out, and the first and last name and email address. These records, which are automatically deleted after seven years, do not give any indication of why we held the original data, nor do they indicate when the original data was supplied. NOTE that when asked if we hold data on a person or organization, the deletion records allow us to either state (a) that we do, (b) when such data was deleted OR (c) we have no record. After seven years has elepsed the answer will be (c). NOTE also we DO NOT keep any records of these enquiries.

2.1.3) The site does NOT issue cookies UNLESS the user actually SUBMITS data to a form. However all page requests including those for scripts are logged. Logs are kept for a maximum of 12 months and each entry in the logs comprises the IP address of the browser and the page or script requested.

Please note the following:-

- That both the 'Contact-Us' and the Membership Application forms are protected by email verification. The website sends the contact or applicant by email, a code which must be entered in order to complete the form. In the event the user fails to enter the code within the time allowed, the 'session' awaiting the final form submission expires and is deleted from the memory without ever being committed to disk.

- That if the code is emailed in error (the user submits an email address that exists but is not that of the user), this email address is also not held in any database. The email address along with the other data in the form is only committed to disk upon successful completion of the form. This cannot ocurr if the code has been sent to the wrong address.

- All emails sent out by this website, errant or otherwise, do result in entries in the email system logfiles. However, MMCP does not scan or otherwise process, the email system logfiles.

- MMCP does not have access to any bank details. Donations are handled by "Just Giving". (Please see privacy statement for Just Giving)

2.2) DATA PROTECTION NOTIFICATION FOR DATA SUBJECT CATEGORY, CHILDREN.

We hold information on the children in our care. All such data is "operational" and gathered "in the field". No children's data is gathered, held, processed or displayed by this or any other website

Photographs of children in our care do appear on this website, subject to proper consent.

3: WHAT WE DO WITH YOUR DATA AND HOW LONG WE KEEP IT?

3.1) Records gathered by our 'Contact Us' form are held on file for as long as they are relevent to our operations. As determining this is a manual process, there is no specific time limit on how long the data is retained and so this is indefinite. It will be manually deleted if we recieve a deletion request.

3.2) Membership data is held on file and automatically deleted seven years after the person or organization, ceases to be a member. It will be manually deleted before this if we recieve a deletion request.

3.3) We keep records of deletion requests. These comprise only the date of the request, the date the request was carried out, and the first and last name and email address. These records, which are automatically deleted after seven years, do not give any indication of why we held the original data, nor do they indicate when the original data was supplied. NOTE that when asked if we hold data on a person or organization, the deletion records allow us to either state (a) that we do, (b) when such data was deleted OR (c) we have no record. After seven years has elepsed the answer will be (c). NOTE also we DO NOT keep any records of these enquiries.

3.4) Logfiles: We profile logfiles to filter out 'robot' activity and so garner the extent of real human user activity.

4: WHO WE SHARE DATA WITH

MMCP does not share ANY information with third parties with the sole exception of law enforcement agencies with whom we shall always fully cooperate.

MMCP does not advertise or make other organisations services available through this website and has no intention of ever doing so.

This site is hosted by HadronZoo Software Limited who use colocation servers, some of which are based outside the EEA. Please see the HadronZoo Privacy Statement

5: DATA CONTROLLER

Under EU General Data Protection Regulation 2018, we have to state who our data controller is. The data controller is the person or organisation responsible for protecting information. The present controller is HadronZoo Software Limited.

Your rights as they relate to the data we hold about you are as follows:-

1) the right to be informed

2) the right of access

3) the right to rectification

4) the right to erasure

5) the right to restrict processing

6) the right to data portability

7) the right to object

8) the right not to be subject to automated decision-making, including profiling

If you would like access to or a copy of the personal information we hold about you, to request a correction, or have any questions about how we may use it or to make a complaint, please contact the Data Protection Manager at data@milliemittoo.com

Complaints will be dealt with by the Data Controller, and will be responded to within 30 days at the latest. If you are not satisfied with the way your complaint was handled, you may be able to refer your complaint to your local data protection regulator.