Working Together to End Domestic Abuse in Devon

08082 816161

EXIT WEBSITE

Privacy Notice

The Devon Domestic Abuse Alliance (DDAA) is committed to protecting your privacy and ensuring your personal information is handled safely and responsibly. This notice explains how we collect, use, and protect your data when you visit our website.

Who we are

The Devon Domestic Abuse Alliance (DDAA) is a partnership of specialist organisations delivering support and services to people affected by domestic abuse across Devon.

Our service delivery partners include:

  • North Devon Against Domestic Abuse (NDADA)
  • Encompass Southwest
  • Colab Exeter
  • The Olive Project
  • Surviving Abuse North Devon
  • More Positive Me
  • Craft Training and Development
  • Devon County Council (for the purposes of reporting)

 

All partners are committed to handling your information lawfully, fairly, and securely.

The purpose of our privacy notice

Personal data is information about a living, identifiable individual and includes any information that can be attributed to you personally, including your name and contact information.

There are more sensitive types of personal data, known as ‘special categories’, which include information about your health, identity and any criminal offences. You can read about them on the Information Commissioner’s Office website.

We’re committed to ensuring your privacy is protected.

 

Our responsibilities

A Data Controller is a term used in the Data Protection Act 2018 to describe an organisation that has the most responsibility for protecting personal data.

For the purposes of data protection law, each organisation in DDAA is a separate “Data Controller”.

We take a stepped approach to providing privacy information in these services. This means that when we first make contact with you, we usually read you a short privacy statement or ask you to read our privacy notice. Then, when we hold our first meeting with you, we give you a privacy factsheet and other information.

Lawful Basis

We rely on a number of different lawful bases to process personal data. We mainly rely on the lawful basis of legitimate interests to process personal data although other lawful basis will apply when sharing any of the personal data we hold. Wherever possible and appropriate we will seek consent to share information but we may also need to share information on other lawful basis, such as, legal obligation. If you engage with our services we will explain this in more detail when we meet with you.

What information we collect

We may collect:

  • Personal information: Such as your (and your children’s) name, contact details, demographics and information about your support needs. This may include special category data such as ethnic origin, religious beliefs and health information.

 

  • Technical information: Such as your IP address, browser type, and how you use the website (collected via cookies).
  • Survey or feedback responses if you choose to participate.

How we use your information

We use your information to:

  • Respond to your enquiries or requests.
  • Provide the best support to you and your family
  • Improve and maintain the website and monitor its usage and securityIf you consent, to share information or updates about our services.

We will never sell your data or use it for automated decision-making.

How we store and protect your data

Your personal information is stored securely on a secure data system called Halo and only accessible to authorised personnel. We will retain your data only as long as necessary to fulfil the purposes we collected it for.

Who we share your data with

We may share your information:

  • With our trusted service delivery partners (listed above), but only if necessary and with your knowledge or consent.
  •  
  • With our IT and website service providers (who must follow strict data protection requirements).
  • If required by law.

We will never sell your information or share it for marketing purposes.

Your rights

Under UK data protection law, you have the right to:

  • Access: You have the right to ask for a copy of your information or to know what information a Data Controller has about you. This right always applies. There are some exemptions, which means you may not always receive all the information.
  • Rectification: You have the right to ask that your information is rectified if you think it is inaccurate. You also have the right to ask the Data Controller to complete information you think is incomplete. This right always applies.
  • Erasure: You have the right to ask the Data Controller to erase/delete your personal information in certain circumstances. This is also known as the right to be forgotten.
  • Restriction of processing: You have the right to ask the Data Controller to restrict/pause the processing of your information in certain circumstances.
  • Object to processing:You have the right to object to processing if the Data Controller is processing your information as part of their public tasks, or is in their legitimate interests.
  • Data portability:This only applies to information you have given the Data Controller. You have the right to ask the Data Controller to transfer the information you gave them from one organisation to another, or give it to you. The right only applies if your information is used based on your consent or under (or in talks about entering into) a contract and the processing is automated/done by machine.
  • Withdraw consent: This only applies to information the Data Controller is using based upon your consent. Consent is just one of six lawful reasons (legally called “bases”) upon which a Data Controller can rely on. How data is used is only your choice if the data use was consent-based and this is not always the case. The Data Controller is the organisation that decides what the lawful basis should be, not the data subject.
  • You’re not required to pay any charge for exercising your rights. Data Controllers have one month to respond to you, but this in some cases can lawfully be extended.

To exercise your rights, contact:

Devon Domestic Abuse Alliance
📧 Email: [email protected]
📮 Postal Address: PO Box 141, Barnstaple, EX32 7YN
📞 Phone: 0808 208 16161

You can also raise a complaint with the Information Commissioner’s Office (ICO) if you are concerned about how we handle your data.

Subject access request statement

In compliance with the UK General Data Protection Regulation (UKGDPR), The DDAA is obliged, upon request, to disclose any information we hold about you. This is called your Right Of Access.

This includes people who have accessed our services or support, staff, volunteers, students, placements apprentices, temporary staff and any other person working on behalf of the DDAA.

We have one month to respond to your request, although this can be extended in certain circumstances. There are rules for what we can and cannot disclose, so all requests require a rigorous redaction process by our information governance team.

If you would like to view the records we hold about you please contact us at  [email protected]  or call us on 0808 208 16161.

Complaints

If you are unhappy with the way we process your data, please get in touch with the Data Protection Officer at [email protected]

You can also make a complaint to the Information Commissioner’s Office (ICO), which regulates the use of information in the UK. They can be contacted at 0303 123 1113 or, you can write to them at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Cookie Policy

When you visit our website, we may use small text files called cookies to help the website work properly and to improve your experience.

What cookies we use

  • Necessary Cookies: These are essential to make the website work.
  • Analytics Cookies: These help us understand how visitors use the website so we can improve it. We may use services like Google Analytics, which collect anonymous information.
  • Functionality Cookies: These remember your preferences.

Managing cookies

When you first visit our website, you will see a cookie banner giving you the option to accept or reject non-essential cookies. You can also change your cookie preferences at any time through your browser settings.

For more information about cookies, visit: www.allaboutcookies.org

Updates to this Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be published on our website.

Easy Read Privacy Policy