1. Data Controller

FSJis the data controllerand it is responsible for the treatment ofyour personal data.Our registered charity number is 1132249 and we have offices at 3rd Floor, Marlborough House, Victoria Road South, Chelmsford, Essex CM1 1LN.

2. Contact details

We welcome your views about our website and our privacy policy. If you would like to contact us with any queries or comments please contact Alix Mason in the following ways:
Email address: enquiries@fsjtrust.co.uk
Postal address: 3rd Floor, Marlborough House, Victoria Road South, Chelmsford, Essex CM1 1LN
Telephone number: +44(0)1245 809899

3. The information we collect about you

We aim at gathering only the information required to allow us to provide you with information about our or-ganisation and grants, and to process grant applications. However, due to our flexible approach to grant applications, we may occasionally receive and process a wider range of information about you. Such additional information will only be processed and retained by us if it is in any way relevant to your application.

In particular,when you contact us to learn about our grants and/or apply for a grant we may collect the following personal information from you:

• a. Identity data (including first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender);
• b. Contact data (including home address, email address and telephone numbers);
• c. Financial data (including bank account – only as and if necessary to process a grant application).
• d. Technical data (including internet protocol address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website). Please see our Cookie Policy.

We do not collect any Sensitive Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

4. How we will use the information about you

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data to:

• a. your request for information; and/or
• b. deal with your enquiries and requests;
• c. administering application records and assessing applications for grants;
• d. providing grants and personalising your interaction with us;
• e. enabling our suppliers and service providers to carry out certain functions on our behalf, including payment processing, verification, technical, logistical or other functions; and
• f. resolving any disputes, if you lawfully exercise your rights or if you wish to dispute the outcome of a grant application, for example, or any other part of our offering;

We may also use your personal data to comply with a legal obligation, or ifit is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

5. Our use of cookies and other information-gathering technologies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. The information may be used to track visitor use of the website and to compile statistical reports on website activity. For further information about our use of cookies please read our Cookie Policy.

6. How we protect your information

We take reasonable steps to ensure that the personal data we store is accurate, complete and up-to-date.We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

We limit access to your personal data to those employees, agents and other third parties on aneed to know basis. They will only process your personal data on our instructions and they are subject to a duty of confi-dentiality.

We have suitable procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.However, you should be aware that the use of the Internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via the Internet.

Furthermore, we may have to disclose your personal data if it is reasonably necessary to:

• a. investigate, prevent, or take action regarding suspected or actual illegal activities or to assist gov-ernment enforcement agencies;
• b. investigate and defend ourselves against any third-party claims or allegations; and
• c. protect the security or integrity of our services.

We will attempt to notify you about legal demands for your personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.

7. Overseas transfers

We are based and operate within the UK territory. We do not routinely transfer your personal data outside of the UK.

Nevertheless, we may have to transfer your personal data outside of the UK and EEA for technical reasons (e.g. if necessary whenever a service provider is located abroad). In these circumstances we will, as required by applicable law, ensure that your privacy rights are adequately protected by appropriate technical, organi-sation, contractual or other lawful means.

8. Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for.

Nevertheless, in order to comply with applicable legal, regulatory, tax, accounting or other requirements, we may retain part of your personal data (e.g. your identity and contact details, and financial data whenever you are awarded a grant) for 6 years from the date of the latest communication sent or received by you.

Please note that you have the right to ask us to delete your data (see the details at paragraph 12 below).

9. Lawful basis for processing

We process personal data of visitors to our website, and of people who enquire and/or apply for a grant on the basis that we have a legitimate interest in offering our services to the UK community.

We have carefully considered and balanced the potential impact on individualsof our processing while shaping the way in which we operate and process personal information. You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.

We may also process your personal data:

• a. if it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract; or
• b. if it is necessary for compliance with a legal obligation that we are subject to.

10. Changes to privacy policy

We keep our privacy policy under regular review. If we change our privacy policy we will post the changes on this page, and place notices on other pages of the website, so that you may be aware of the information we collect and how we use it at all times.

11. Links to other websites

Our website may contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies.

12. Your rights

Under the current Data Protection Laws, you have the following rights with regards to your personal data:

• a. The right to be informedabout the collection and use of your personal data;
• b. The right to access and receive a copy of your personal data, and other supplementary information;
• c. The right to have inaccurate personal data rectified, or completed if it is incomplete;
• d. The right to have personal data erased;
• e. The right to request the restriction or suppression of your personal data;
• f. The right to obtain and reuse your personal data for your own purposes across different services;
• g. The right to object to the processing of your personal data in certain circumstances; and
• h. Rights in relation to automated decision making and profiling.

If you wish to exercise any of the rights set out above, please contact Alix Mason as detailed at paragraph 2 above. To have more information about your rights please follow thelink to the relevant guide published by theInformation Commissioner’s Office (the UK supervisory authority for data protection issues): https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.