Children And Trauma Community Hub (“CATCH”) Privacy Notice


WHAT IS THIS NOTICE FOR?

This website is operated by Parents And Children Together (PACT). This privacy notice gives you information about the personal data that we collect and process when you sign up as a user on CATCH. We take your privacy very seriously and we ask that you read this privacy notice carefully as it contains important information on:

  • the personal data we collect about you and why,
  • what we do with your information,
  • how long we store your information, and
  • who your information might be shared with.

WHO ARE WE?

PACT is a Voluntary Adoption Agency, registered with OFSTED to provide adoption services and adoption support services. Our registered address is PACT Head Office, 7 Southern Court, South Street, Reading RG1 4QS. While providing our services and running the charity, we gather information about individuals which means we need to comply with data protection legislation: the UK GDPR and the Data Protection Act 2018.

Our Role as a DATA Controller
If you are registering with CATCH as an adopter, foster carer, special guardians, practitioners, and education professionals, we will be acting as the ‘data controller’. This means we decide how your personal data is processed and for what purposes.

Our Role as Data Processor
If your Local Authority has provided us with your details to set you up on CATCH, we will be acting as a data processor. This means we are processing your data to deliver a service on behalf of a data controller (in this case the Local Authority) and can only process it in accordance with their instructions. We cannot use your personal data for our own purposes.

WHAT IS PERSONAL DATA?

Personal data is any information that can be used to identify you. It covers obvious information such as your name and contact details, but also less obvious information such as identification numbers, electronic location data, and other online identifiers.

HOW MUCH PERSONAL DATA DOES PACT COLLECT?

PACT only collects personal data relevant to the involvement you have with us. For example, if you request a Hub login, complete a survey, or contact us by telephone, email, social media, post, or text message, we will collect and process the personal information you have provided to ensure we can respond to your request. When collecting your personal data, we will explain to you what data is needed and why we need it. Further details about the information we collect when you sign up as a user to CATCH are given below.

DOES PACT COLLECT SPECIAL CATEGORIES OF PERSONAL DATA?

Data Protection Law recognises that some categories of personal information are more sensitive. Special categories of personal data include information about ethnic origin, sexual orientation, and religious beliefs. We will only collect these special categories of personal data about you when you give us your explicit consent to do so.

HOW DOES PACT HANDLE YOUR PERSONAL DATA?

The data we gather is held in accordance with Data Protection Law, including the UK General Data Protection Regulation (the ‘UK GDPR’), the Data Protection Act 2018, and the Privacy and Electronic Communications (EC Directive) 2003. PACT complies with its obligations under data protection law by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access, and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

WHAT PERSONAL DATA DOES PACT COLLECT THROUGH CATCH?

Registering your account
We need to collect and hold personal data about you to register you as a user on CATCH. This will include:

  • Name
  • Your email address
  • City
  • Age
  • Family Status
  • Username and Password
  • Ethnicity
  • Sex/Gender

This information may be provided to us either directly by you, or indirectly by a third-party. Where information is provided indirectly to use, we will only be given your name and email address.

Personal information provided by you

As you progress through the registration process, you will provide us with the personal data we need to give you access to CATCH.

Personal information provided by third parties

If you are not an adopter, foster carer, special guardians, practitioners who registers directly with the Hub, our partners (e.g., Local Authorities) will share your information with us to set up an account for you.

Personal information about other individuals

You may be providing information on behalf of another person who wishes to register on CATCH.  If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can give consent on his/her behalf to the processing of his/her personal data for the purposes outlined in this privacy notice.

Using the Hub

As you use the Hub, we will collect information about how you use and access the system so that we can improve our service, and provide feedback to the agency funding your account, if you do not pay us directly.  We will also include your usage information in aggregated data for analysis and reporting purposes.

We will also process communication data sent to you and sent by you, for example if you have access to the forum and post messages.

HOW DO WE USE THE INFORMATION ABOUT YOU?

We collect information about you so that we can:

  • Set up and manage your CATCH account
  • Send you payment instructions for your subscription (if applicable).
  • Manage any concerns that arise relating to safeguarding, confidentiality, behaviour, or usage of The Hub.
  • Use aggregated data to produce quarterly reporting on usage, for example, how many users have completed an eLearning course.
  • Share usage and access data with the agency that is funding your access to The Hub (if applicable).
  • Notify you of any changes to our website or to our services that may affect you.
  • Improve our services.

THE LEGAL BASIS FOR PROCESSING YOUR DATA

Data Protection Legislation requires that we process your personal data lawfully, which includes choosing an appropriate legal basis linked to the purposes we have identified. One of the following legal bases typically applies:

  • the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  • processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering a contract.
  • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, where the data subject is a child.
  • processing is required to fulfil a legal obligation.

The table below details the legal basis we rely on for each of the purposes we have identified:

 

PurposeLegal Basis
Set up and manage CATCH accountPerformance of a contract
Send you payment instructions for your subscription (if applicable)Performance of a contract
Manage any concerns that arise relating to safeguarding, confidentiality, behaviour, or usage of The HubPerformance of a contract
Legal Obligation (Safeguarding)
Notify you of changes to The Hub and associated services that may affect youPerformance of a contract
Share usage and access data with the agency that is funding your access to The Hub (if applicable)Performance of a contract / Legitimate Interests
Inform you of other services we provide that may be applicable to youConsent
Conduct research, statistical analysis, and behavioural analysis,Consent (cookies)
Explicit Consent (ethnicity, diversity and inclusion data)
Improve our servicesLegitimate interests / Consent (cookies)

HOW DO WE COMMUNICATE WITH YOU?

CATCH account management
We will send you emails related to your Hub account usage. For example, we may notify you about new content being released, scheduled maintenance or the status of your account.

Notifications
If you have access to one or more of the forums on CATCH, you can choose whether you receive notifications about activity (e.g., replies to your posts or threads you are following). You can manage this in your Hub profile.

WHO HAS ACCESS TO YOUR INFORMATION?

We limit access to your personal data to those employees, contractors, and third-party processors (see below) who have a legitimate need to know and ensure that they are aware of their duty of confidentiality.

In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.

Otherwise, we will only share your data with parties outside of the organisation with your consent. For Hub users who were registered with us via a partner agency, we share usage data of the accounts that our partners are funding with them, for their own reporting purposes.

We may pass your information on to third party service providers, agents, or subcontractors for the purposes of completing a task or providing services to you on our behalf (e.g., hosting CATCH platform). However, we disclose only the personal information necessary to deliver that service and have a contract in place that requires them to keep your information secure and not to use it for other purposes.

Third party service providers who act as data processors on our behalf in relation to this website:

Service ProviderActivity Carried OutSectorLocation
Video hosting, sharing and services platform provider.Hosting CATCH training video materialsVideo HostingUnited States
Web Design Agency
(data processor)
Design and maintain CATCHMarketing & DesignUK

KEEPING YOUR DATA SECURE

We will use technical and organisational measures to safeguard your personal data, for example:

  • access to your account is controlled by a password and username that are unique to you.
  • we store your personal data on secure servers.

While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet. If you have any concerns about your information, please contact us (see ‘How can you contact us?’ below).

TRANSFERS OUTSIDE OF THE UK AND EUROPEAN UNION

We store all personal data we are responsible for within the UK and European Economic Area and do not transfer your personal data to other countries where data protection laws may not be as strong.

RETENTION OF INFORMATION

PACT will retain your personal information for the period you are accessing, CATCH as a funded user or paying user and for a period of up to 2 years after your funded/ paid for access has concluded. This is for the purpose of monitoring and reporting or to offer the opportunity to renew or resubscribe individually. After this point your personal data will be removed from our databases.

WHAT RIGHTS DO YOU HAVE?

Unless subject to an exemption (under the GDPR), you will have the following rights with respect to your personal data:

  • The right to be informed about the personal data which PACT holds about you, which is what this privacy notice is for.
  • The right to request a copy of your personal data which PACT holds about you.
  • The right to request that PACT corrects any personal data if it is found to be inaccurate or out of date.
  • The right to request your personal data is erased where it is no longer necessary or legally required for PACT to retain such data.
  • The right to request that the data controller provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller (the right to data portability), where applicable.
  • The right to understand how you are affected by automated decision-making or profiling if your personal data is used for these purposes. We do not use your personal data in this way.
  • The right to lodge a complaint with the Information Commissioner’s Office.

For more information about our use of your personal data or exercising your rights as outlined above, please contact using the contact details provided at the end of this policy.

It is important that your personal data are kept accurate and up to date. If any of the personal data we hold about you change, please keep us informed for as long as we have the data.

Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. We would welcome the opportunity to resolve your concerns ourselves, however, so please contact us first using the contact details provided at the end of this policy.

USE OF COOKIES

What are cookies?
A cookie is a small text file which is placed onto your computer (or another electronic device) when you use our website. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site. We use cookies on this website.

How do we use cookies?
Cookies provide information about individuals’ usage of the website, which may identify you as the same individual even if we do not know your name, we can identify location, IP address and device information. As such, we make sure you have a choice about the cookies that are placed on your device for our statistical purposes by Google Analytics, which help us to understand more about the ways in which people use our website. We would appreciate it if you opt-in to accept these cookies when the website asks you, as it will help us to improve it over time. In addition, marketing cookies help to understand the interests of our visitors so that we can better target our marketing activities.

What Cookies do we use?
We use first-party cookies (Cookies set by PACT) and third-party cookies (cookies set by other providers, e.g., analytics providers such as Google).

Necessary Cookies

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies. No consent is required for Necessary cookies.

CookieNamePurposeMore information
AECGoogle
(Functional)
Fraud preventionClick here for an overview of privacy at Google.
HSIDGoogle Ads Optimization (Functional)Fraud preventionClick here for an overview of privacy at Google.
SIDCCGoogle Maps
(Functional)
To provide identification of trusted trafficClick here for an overview of privacy at Google.
_GRECAPTCHAGoogle reCAPTCHA
(Functional)
To provide spam protectionClick here for an overview of privacy at Google.
CONSENTGoogle Ads Optimization (Functional)To store cookie consent preferencesClick here for an overview of privacy at Google.
Cmplz_banner-statusComplianz
(functional)
To store if the cookie banner has been dismissedClick here for an overview of privacy at Complianz
Cmplz_consented_services
Cmplz_statistics
Cmplz_functional
Cmplz_preferences
Cmplz_marketing
Cmplz_policy­_id
Complianz
(functional)
To store consent preferencesClick here for an overview of privacy at Complianz
SEARCH_SAMESITEGoogle (Functional)To prevent the browser from sending this cookie with cross-site requestsClick here for an overview of privacy at Google.
Non-essential cookies

Non-essential cookies have a range of functions, from allowing the website owner to understand how users are moving around and using their website (Statistical) to third-party cookies which look to build a profile of individuals that can inform their online marketing decisions (Marketing). Non-essential cookies require a user to ‘opt-in’ to accept the cookie onto their device.

CookieNamePurposeMore information
_gaGoogle Analytics
(Statistical)
To collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information, including IP address, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.Click here for an overview of privacy at Google.
SAPISID
SSID
APISID
Google Ads Optimization
(Marketing)
To provide ad delivery or retargeting, collect user information for videos hosted by YouTubeClick here for an overview of privacy at Google.
SIDGoogle Ads Optimization
(MarketingTracking)
To provide ad delivery or retargeting, provide fraud preventionClick here for an overview of privacy at Google.
NIDGoogle Ads Optimization (Marketing / Targeting)To provide ad delivery or retargeting, store user preferencesClick here for an overview of privacy at Google.
1p_jarGoogle Ads Optimization
(MarketingTracking
To provide ad delivery
or retargeting
Click here for an overview of privacy at Google.

Most web browsers allow some control of most cookies through the browser settings.  To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.   To find out more about specific cookies, who places them and their purposes, visit www.cookiedatabase.org. We have used this resource to populate the table above.

HOW CAN YOU ACCESS YOUR PERSONAL INFORMATION?

You can easily access (and update) the information we have described above via your Account Profile on CATCH.

If you want to know what additional personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.

All subject access requests can be made in writing, either via email or via the postal addresses shown below, or verbally, either in person or on the phone.

There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.

We will respond to your subject access request within one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data, within that time. In some cases, however, particularly if your request is more complex, more time may be required, up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress. We may not need to provide all the information to you if there are exemptions we can rely on.

You also have the right to lodge a complaint about our processing of your personal data with the UK’s Information Commissioner’s Office

HOW CAN YOU CONTACT US?

To exercise all relevant rights, to raise a query or complaint with us, please contact the Data Protection Lead – IT Operations Manager in the first instance. We are also happy to answer any questions you may have about this privacy notice or the information we hold about you.

If you wish to contact us, please use the details below:

e-mail: catch@pactcharity.org
Postal address: PACT Head Office, 7 Southern Court, South Street, Reading RG1 4QS
Telephone: 0300 456 4800

 

You can contact the Information Commissioners Office on 0303 123 1113, through their online contact form or at the following address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

CHANGES TO THE PRIVACY NOTICE

We may change this privacy policy from time to time. You should check this statement occasionally to ensure you are aware of the most recent version that will apply each time you access this website.

DO YOU NEED ANY EXTRA HELP?

If you would like this policy in another format (for example: audio, large print, braille) please contact us (see ‘How can you contact us? above)

Last updated: September 2022