lollipop mentoring Privacy Notice

Introduction

This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data, and keep it safe.

We know that there is a lot of information here, but we want you to be fully informed about your rights and how we use your data.

We hope the following sections will answer any questions you have but if not, please do get in touch with us.

Lollipop Mentoring is the data controller of any personal data collected from you when you use the website and for the purpose of delivering our mentoring services.

This Privacy Notice is effective from February 2021. It is reviewed annually but may be updated more frequently, so please ensure you check it regularly.

What is lollipop?

lollipop mentoring is a free mentorship programme for Black women in advertising and marketing. We match mentors and mentees to change careers and lives.

For simplicity throughout this notice, ‘lollipop’, ‘we’ and ‘us’ means lollipop mentoring, our staff and our volunteers.

What personal data do we collect?

  • Name and contact details including email address and telephone number  of mentors and mentees
  • Personal data revealing gender and ethnic or racial background
  • Career information about mentors and mentees including CVs, job title and information from public websites and social networking sites such as LinkedIn
  • Your personal or professional interests
  • Images of mentors and mentees
  • Details of your visits to our website such as your browsing activity while on our website
  • Information gathered by the use of cookies in your web browser
  • Certain categories of personal data have additional protection under the GDPR. The categories include information about your health, racial or ethnic origin. lollipop processes special category data where this is provided by you during the course of correspondence with us to inform us of tailoring of the services and also due to the nature of our mentoring programme.

Explaining the legal bases we rely on

The law on data protection sets out a number of different reasons for which a company or organisation may collect and process your personal data, including:

Consent

In specific situations, we can collect and process your data with your consent.

For example, when you tick a box to receive email newsletters or agree to share images and information for the website.

Contractual obligations

In certain circumstances, we need your personal data to comply with our contractual obligations.

For example, if you agree to be a mentor or mentee and provide us with personal data.

Legal compliance

For example, if we are obliged to disclose personal data by law, or if the disclosure is necessary for purposes of national security, taxation or criminal investigation.

Legitimate interest

In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests. We have conducted a legitimate interests assessment to ensure that your rights, freedom or interests are not materially impacted.

When do we collect your personal data?

  • When you visit our website
  • When you contact us and provide us with personal data (via email, website, paper documents or telephone)
  •  When you engage with us on social media
  • When you take part in the mentoring programme
  • When you contact us by any means with queries, complaints etc.
  • When you provide contact details to us at conferences and events

How and why we use your personal data

We use your personal data to deliver services to mentors and mentees.  We want to give you the best possible mentoring experience.

If you wish to change how we use your data, you’ll find details in the ‘What are my rights?’ section below.

Ways in which we use your personal data are:

  • To provide mentors and mentees with our services
  •  To provide organisations with the opportunity to mentor their employees
  • To respond to your queries
  • To protect our business and your account from fraud and other illegal activities
  • To develop, test and improve the systems, services and products we provide to you. We’ll do this on the basis of our legitimate business interests
  • To market our services
  • To comply with our contractual or legal obligations to share data with law enforcement

Marketing

We may use your personal data to send you updates (by email, text message, telephone or post) about our services and news about lollipop.

We have a legitimate interest in using your personal data for marketing purposes (see above ‘How and why we use your personal data’). This means we do not usually need your consent to send you marketing information. However, where consent is needed, we will ask for this separately and clearly.

You have the right to opt out of receiving marketing communications at any time by:

  • Contacting us at info@lollipopmentoring.com
  • Using the ‘unsubscribe’ link in emails

We may ask you to confirm or update your marketing preferences if you ask us to provide further services in the future, or if there are changes in the law, regulation, or the structure of our business.

We will always treat your personal data with the utmost respect and never sell or share it with other organisations for marketing purposes.

For more information on your right to object at any time to your personal data being used for marketing purposes, see ‘Your rights’ below.

How we protect your personal data

We know how much data security matters to all our clients.  Any personal data you provide to us is stored securely and confidentially and is processed in accordance with applicable legislation and this Privacy Notice. We take appropriate technical and organisational measures to protect this data against unauthorised or unlawful processing.

How long we will keep your personal data

Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.

In some circumstances, such as to meet our legal or regulatory obligations, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may hold on to your personal data after we’ve finished providing services to you, or for longer than our general retention policy.

Who do we share your personal data with?

We sometimes share your personal data with trusted third parties.  These are companies that are processing the data collected on our behalf and therefore have to adhere to the same strict guidelines and rules in relation to your personal data. We work closely with them to ensure that your privacy is respected and protected at all times.

Examples of the kind of third parties we work with are:

  •  IT companies who support our website and other business systems including Google and Mailchimp
  • Operational companies such as delivery couriers
  • Organisations such as advertising agencies and marketing companies
  •  Other companies working with us including our partners and agents connected with lollipop mentoring offering services to lollipop.
  • The police, other law enforcement, regulatory or Government bodies

We do not share your data with third parties for their own purposes.

Where your personal data may be processed?

We will need to share your personal data with third-party data processors and parties.  Many of these third parties are based outside the UK so their processing of your personal data will involve a transfer of data outside the UK.  

Where your data is processed outside the UK, we will ensure that appropriate data transfer mechanisms are in place to protect that transfer.  Any transfer of your personal data will follow applicable laws and we will treat the information under the guiding principles of this Privacy Notice.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

What are my rights?

You have the right to:

  • Be clearly informed about how we use your personal data (the right to be informed)
  •  Ask for a copy of personal data that we hold about you (the right of access)
  • Ask us to update and amend any incorrect, out-of-date or incomplete personal data that we hold about you (the right of rectification)
  • Request, in certain circumstances, that we delete personal data held on you (the right of erasure or to be forgotten)
  •  Ask us to ‘restrict processing of data’, in certain circumstances (the right to restrict processing
  •  Ask us to supply you with the personal data we hold about you in a structured machine-readable format (where technically possible) and/or to provide a copy of the data in such a format to another organisation (the right to data portability)
  • Opt out of any marketing communications, withdraw your consent to us collecting and processing your data and object to us using / holding your personal data if we have no legitimate reasons to do so (the right to object)

If you wish to exercise any of the above rights, please contact us using our contact details below.

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority of the United Kingdom using their website https://ico.org.uk/.

Contacting Lollipop

We hope this Privacy Notice has been helpful in clarifying the way we handle your personal data and your rights to control it. However, we realise that it is a lot of information to digest.

If you have any questions, please contact us at info@lollipopmentoring.com

This Privacy Notice was last updated on 16th August 2021