Dyslexia Scotland wants to respect your privacy and to protect any personal information that you give to us. This policy is made in order to comply with the provisions of the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). It will tell you how Dyslexia Scotland will use any personal information that we collect from you.
The data controller is Dyslexia Scotland, 1st floor, Cameron House, Forthside Way, Stirling FK8 1QZ.
Dyslexia Scotland may change this policy at any time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from May 2018.
How do we collect information?
We only collect information about you if we have a reason to do so – for example to provide our services, to communicate with you or to make our services better. If you are 13 years old or under, please get your parent/carer/guardian's permission before you give us any personal information about yourself.
We collect personal information about you if and when you provide information to us.
- when you enquire about services or events we run
- when you register with us to take part in an event or competition
- when you contribute stories, articles or artwork
- when you make a donation or join as a member
- when you take part in a survey
- when you call our Helpline, we will ask for your contact details if you wish us to send you any information
- when you give us personal information in any other way
We have a network of volunteer-led branches and Adult Networks who run events about dyslexia. If you attend these meetings, you will be asked if you would like to leave your email address so that they can contact you about future events. If you do provide your email address, it will be shared with relevant staff members in our main office.
If you pass your email address to us and wish to hear about branch or Adult Network meetings, we will share your email address with the branch or Adult Network that is the closest to you, unless you ask us not to do so.
What information do we collect?
The types of personal information we might ask for may include your name, address, gender, email address, telephone number, credit/debit card or direct debit details (if you are buying anything through us such as membership or making a conference booking).
For surveys aimed at improving our services, we may ask you:
- demographic information such as part of your postcode, experiences and interests
- other information relevant to satisfaction surveys or opinion polls
How do we use your information?
We will always ask you if you want to give us your information, and ask your permission about how we use it. We will never distribute or share your information with any other organisations without your permission. We may, with your permission, sometimes contact you with offers from companies that work with Dyslexia Scotland which may be of interest to you.
If you agree, we will use the information that you give to us:
- to send you information, products or services that you have asked for
- to consider how we can make the information, products and services we offer to you better (including the websites)
- to contact you about events, fundraising, campaigning and our other work
- From time to time, we may also use your information to contact you for evaluation purposes or to ask if you wish to take part in projects led by other partners such as Education Scotland. We may contact you by email, phone or post.
- We use Google Analytics to track the number of visitors to our websites. These are anonymous statistics and no personal records will be generated based on this analysis.
How do we store your information?
We will not transfer your personal details to any third party for the purpose of marketing. We use certain third party service providers who may have access to your personal data so that they can provide services to us. When this occurs, we have data protection compliant contracts in place with these third parties or we have checked that their privacy policies outline how they comply with GDPR requirements. The key ones are outlined below.
If you receive our e-bulletin or blog, MailChimp and Wordpress will have access to your e-mail address so that we can send you our updates. If you provide your details through our websites then Corporate Culture who maintains our websites and Expert IT Solutions who provide IT support services will have access to your details. Call Handling Services provides the Virtual Call Centre for our Helpline. If you reply to a survey operated by Survey Monkey, they will have access to the information you provide.
Data transfers out of the European Economic Area (EEA)
It may sometimes be necessary to transfer personal information overseas and to countries outside the European Economic Area. Contracts will be in place to make sure the recipient protects the data to the same standard as the European Economic Area.
Right of access
You have the right to ask for a copy of the information that we have about you by making a subject access request in accordance with GDPR. You can make a request to: firstname.lastname@example.org
If any information that we have about you is wrong, you can ask us to correct it for you. If your personal details change, please help us to keep those details up to date by telling us about any changes.
You can change your mind about how we share your information at any time by contacting: