Your Privacy.

How we respect privacy when we deal with personal information about individuals using our services.

Please note, “we” and “us” in this statement refers to Oasis Project.

Privacy is a fundamental right. When you access one of our support services, Oasis Project will always prioritise your privacy and protect your personal data with the greatest possible care.

In this Privacy Statement we explain how we manage the personal data of people receiving support, why we request it, and what we use it for.

If you have any comments or questions about this statement, feel free to email us at info@brightonoasisproject.co.uk or write to us at 3 Globe House, Morley Street, Brighton, BN2 9RA.

1. Which services and teams does this privacy notice cover?

   Oasis Project supports people across Brighton & Hove and East Sussex.

   Services covered in this privacy notice include:

   • Our adult treatment services in Brighton (as part of Pavilions)
   • Young Oasis
   • Sex Workers Outreach Project (SWOP)
   • East Sussex Oasis Women’s Recovery Services
   • Our Crèche
   • Art of Attachment

   Note: Fulfilling Lives Eastbourne and Hastings are managed under the BHT Privacy Notice)

2. When do we collect your personal data?

   We collect your information when you are seeking to access one of our services. This may be a different route for each service. In most cases we will collect information at three stages:

   • When you are enquiring about a service, referring yourself, or a professional you know is completing a referral form on your behalf.
   • When you meet with a worker from one of the services for the first time and they complete an initial assessment to decide if a service is suitable for you and to know how we can best support you.
   • Whilst you are receiving a service from us we will keep records of how the support we offer is going.

3. What personal data do we collect?

   Each service will require different information about you depending on the needs you have and the support offered. We will collect these types of data:

   • Personal details about you, for example your age, your health, and safe ways to contact you
   • Personal details about your family and living situation (if this is relevant to the support you receive)
   • Details about what is happening or has happened to you
   • Any risks that you or your family are experiencing
   • Information about anyone else supporting you
   • Information on whether our support to you is being helpful

   We will never collect more information than is required.

   We will ensure that we always seek your consent for each piece of personal data we process. In most cases this will be written consent at an initial meeting with a service.

   We are always happy to explain why we gather particular pieces of personal data.

4. How do we use your personal data?

   Data we collect about you is used for the following purposes:

   • To ensure we are offering you the best possible service and that each service is considering your individual strengths, difficulties and situation.
   • To know who is accessing our services and what needs they have. This is to help us know if a service is being successful or to help us identify areas we could improve.
   • To communicate with other professionals about you (with your permission) so that the support you receive is ‘joined up’.
   • To ensure you and those around you are safeguarded and to communicate with safeguarding professionals if required.
   • Anonymised information (information where you can’t be identified) is reported back to commissioners of services to ensure we are providing the service we are receiving funding for.
   • Some of our services are research projects and will have specific needs for the purposes of research. This will always be made very clear at any initial contact with the service. We will never gather research data on a service user without their knowledge and consent.

5. When are we allowed to use your personal data?

   A legal ground is necessary for processing personal data. Oasis Project collects and processes your personal data solely on the basis of the following legal grounds:

   • Legitimate interest: As a Charity providing a range of important services to people, we are unable to offer an effective service without processing Personal and Sensitive (Special Category) data. As a charity with a number of funding streams, including grant payments, it is in our legitimate interest to supply potential and current funders with anonymised data relating to service use as part of our business plan.
   • Compliance with legal obligations: Oasis Project has a legal duty to share information with other agencies where there is a legitimate safeguarding risk or to prevent a serious crime.

   If you do not want Oasis Project to use your personal data for the above-mentioned purposes, you can make use of your right of objection as detailed below.

6. What rights do you have with respect to your personal data?

   As a service user at Oasis Project, you have a number of rights with regards to data we hold about you:

   • You have the right to access your personal data. You can therefore request to see data we hold on you. Please see our policy on this.
   • You have the right to correct your personal data if it has been processed incorrectly or incompletely.
   • You have the right to object to the processing of your personal data. Where possible we will endeavour to continue to offer you a service but it may be that we decide we cannot without certain information about you. A manager from one of our services can discuss this with you.
   • You have the right to ask us to erase your personal data so that we have no record of you. Please see our policy on this.

   If you wish to make use of any of the above-mentioned rights, you may inform us by any means, though for clarity it would be helpful if you complete the following Data Request form.

7. With whom do we share your personal data?

   We will share data with supporting organisations that you identify as being helpful to you. You may decide there are organisations you do not want us to share personal data with. This is something we will regularly check-in with about you and we will never share without your prior knowledge.

   We do not share data about you with other services users.

   We do not share data about you with members of the public.

   On some occasions Oasis Project will need to share personal data about you for the purposes of safeguarding or preventing a crime. In most cases we will do this in partnership with you.

   Oasis Project ensures that data is shared with the utmost care using secure systems.

8. How long do we store your personal data?

   Each service in Oasis Project will have different rules around storage, depending on the service offered and the duration of that service. As a baseline, Oasis Project retains data for 5 years after you have stopped receiving a service.

9. How safe is your data at Oasis Project?

   Each Service takes suitable technical and administrative measures to protect your personal data against loss and against any form of unlawful processing. We store your personal data on servers in a secure environment that provides protection against unlawful access, publication and use of the data by unauthorised persons inside or outside the organisation.

   Paper-based recording is kept to a minimum and paper forms are usually scanned onto a secure system.

   All Oasis Staff are trained in Data Protection, and Privacy By Design ensures that Data Security is considered at the beginning of all project developments.

   Oasis Project has a Senior Information Risk Advisor sitting on the Board of Trustees with overall responsibility for data security.

10. Do you have questions about privacy within Oasis Project, or do you have a complaint?

    Oasis Project operates a transparent and inclusive policy around queries and complaints. All complaints and queries will go to an appointed Data Protection Officer whose role it is to ensure the organisation is doing its utmost to care for your data.

    If you feel that Oasis Project has been responsible for a Data Breach (where data has not been held safely) you may either notify us as a complaint or notify the Information Commissioner’s Office.

    If Oasis Project is concerned there is a Data Breach we are obliged to notify to Information Commissioner’s Office for them to investigate.

11. Equalities?

    As an inclusive organisation Oasis Project will seek to gather data on equalities. This data will be anonymised so that we can track levels of diversity and ensure no communities or groups of people are excluded from our services.

12. Modifications

    We may modify this Privacy Policy from time to time and will publish the most current version on our website. If a modification meaningfully reduces your rights, we’ll notify people whose personal data we hold and is affected.

This statement was last updated August 2018.

How we respect privacy when we deal with personal information collected via our website.

Please note, “we” and “us” in this statement refers to Oasis Project.

This Privacy Statement applies to the personal information we collect about individuals who visit our website. It explains what information we collect and how we use it.

If you are a service user of Oasis Project, or have made contact regarding your drug or alcohol use, the types of information we obtain about you and the ways in which that information is used is explained in our Privacy Statement for Oasis Project service users.

If you have any comments or questions about this statement, feel free to email us at info@brightonoasisproject.co.uk or write to us at 3 Globe House, Morley Street, Brighton, BN2 9RA.

1. Personal data that we process

   We obtain personal information about you when you use our website.

   If you contact us via email or phone about a job vacancy or volunteer opportunity you have seen on our website, we will read and store your message, your name and your email address so that we can respond in the way that you would expect (e.g. to send you an application pack).

   If you make a donation to us via the ‘donate now’ button on our website, your name, email address and payment information is not held by us; it is collected by our third party payment processors, Charity Checkout and GoCardless. They specialise in the secure online capture and processing of credit/debit card transactions.

   If you sign up to receive our newsletter, your name and email address will be collected and we will deliver you an email periodically via our third party email provider, MailChimp.

   Information is automatically provided on your browsing behaviour through the use of cookies on our sites. This information does not enable us to identify you personally. However, it does allow us to track usage of our site so that we can improve it. There is more information about cookies below.

2. How we use your data

   We will only use your data in a manner that is appropriate and in the way that you would expect. For example;

   • We will reply to enquiries you send to us regarding a job vacancy or volunteer opportunity to provide you with the information you have requested and/or to send you an application pack.
   • If you make a donation via Charity Checkout or GoCardless, we will send you an email to acknowledge your donation and say thank you.
   • Where you have signed up to receive our newsletter, we will send you periodic communications by email relating to our work as well as Oasis Project events and opportunities which we think may be of interest to you.

3. When we share your data

   If you have contacted us about a job vacancy, signed up to our mailing list or made an online donation, we will not share your data with another organisation or 3rd party without your prior consent.

   If you are a service user of Oasis Project or have contacted regarding your drug or alcohol use, please refer to our Privacy Statement for Oasis Project service users, as there are circumstances under which we may share your data.

4. How long we keep your data

   We take the principles of data minimisation and removal seriously and have internal policies in place to ensure that we only ever ask for the minimum amount of data for the associated purpose and delete that data promptly once it is no longer required.

   Where data is collected on the basis of consent (e.g. when you sign up to our newsletter), we will seek renewal of consent at least every three years.

5. Rights you have over your data

   You have a range of rights over your data, which include the following;

   • Where data processing is based on consent, you may revoke this consent at any time and we will make it as easy as possible for you to do this (for example by putting ‘unsubscribe’ links at the bottom of all our marketing emails).
   • You have the right to ask for rectification and/or deletion of your information.
   • You have the right of access to your information.
   • You have the right to lodge a complaint with the Information Commissioner if you feel your rights have been infringed.

   A full summary of your legal rights over your data can be found on the Information Commissioner’s website here: https://ico.org.uk/

   If you would like to access the rights listed above, or any other legal rights you have over your data under current legislation, please get in touch with us via email at info@brightonoasisproject.co.uk or in writing to 3 Globe House, Morley Street, Brighton, BN2 9RA.

   Please note that relying on some of these rights, such as the right to deleting your data, will make it impossible for us to continue to deliver some services to you. However, where possible we will always try to allow the maximum access to your rights while continuing to deliver as many services to you as possible.

6. Cookies & usage tracking

   A cookie is a small file of letters and numbers that is downloaded on to your computer when you visit a website. Cookies are used by many websites and can do a number of things, e.g. remembering your preferences, recording what you have put in your shopping basket, and counting the number of people looking at a website.

   Where cookies are used to collect personal data, we list these purposes in section 1 above, along with other personal data that we collect. However, we also use some cookies that do not collect personal information but that do help us collect anonymous information about how people use our website. We use Google Analytics for this purpose. Google Analytics generates statistical and other information about website usage by means of cookies, which are stored on users’ computers. The information collected by Google Analytics about usage of our website is not personally identifiable. The data is collected anonymously, stored by Google and used by us to create reports about website usage. Google’s privacy policy is available at http://www.google.com/privacypolicy.html

7. Equality and diversity monitoring

   As an inclusive organisation Oasis Project will seek to gather data on equalities. This data will be anonymised so that we can track levels of diversity and ensure no communities or groups of people are excluded from our services.

8. Modifications

   We may modify this Privacy Policy from time to time and will publish the most current version on our website. If a modification meaningfully reduces your rights, we’ll notify people whose personal data we hold and is affected.

This statement was last updated August 2018.