OUR COMMITMENT TO GDPR
We are committed to maintaining the trust and confidence of visitors to this website. Here you’ll find information on our compliance with General Data Protection Regulation (GDPR) and how we treat data that we collect from visitors to our website and those that use our online forms to contact us, make a referral or sign up to services.

HOW WE USE YOUR DATA
We collect personal information from those who complete one of our online forms - e.g. Contact, Sign Up Now and Refer. The legal basis and conditions under the General Data Protection Regulation (GDPR) for the processing of identifiable data is Article 6 (1e) – Official authority vested in the controller.

We use that information collected for a couple of reasons: to tell you about our services you’ve asked us to tell you about; to contact you to make an appointment or if we need to obtain or provide additional information; to check our records are right; to tell you about new services we are providing and to check every now and then that you’re happy and satisfied. We don't rent or trade email lists with other organisations and businesses.

We use a third party provider, Salesforce, to store data and deliver our marketing emails. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our communications. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing info@candinetwork.com

The data we collect is stored on Salesforce's secure databases that utilise some of the most advanced technology for Internet security available today. For more information, please see Salesforce’s Data Security Notice here.

We require your personal information and contact details in order to provide a smooth running and professional service. We hold a record of the services you’ve signed up for and used and will usually make a note of any feedback that you or our staff and facilitators give. If we think it’s important, we may also record what you tell us about you feelings, emotions, health and personal relationships, so please tell us if you don’t want this recorded, if and when you talk about these things with our staff.

Certain information such as demographics (date of birth, gender, ethnicity etc) are used for the reports we have to send to the people who fund us. You may choose not to disclose this information and it wont affect what services we can give you, but we do have to ask. When we send a report, it’s all anonymous, so we don’t send our funders information from which they could identify you, but we do have to hold this information on our systems in order to produce these reports.

Some of our one-to-one HIV services ask for a contribution towards the costs of running them. We may use information about your employment or benefit status to decide whether to ask for this contribution.

In normal circumstances, we will not disclose any of your personally identifiable information, except when we have your permission or under special circumstances, such as when we believe in good faith that the law requires it. We will not transfer your information overseas, however, data is stored in a secure cloud based on the internet. For some contracts we will have a written data-sharing agreement or contract in place that will end at the end of each service contract.

VISITORS TO OUR WEBSITE
When someone visits this website we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. You can find more information on how cookies are used on this website in our Cookies Policy. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

LINKS TO OTHER WEBSITES
This privacy notice does not cover the links within this site linking to other websites. Those sites are not governed by this Privacy Policy, and if you have questions about how a site uses your information, you’ll need to check their privacy policy.

ACCESS TO YOUR PERSONAL INFORMATION
You are entitled to access the personal information that we hold. Email your request to our Data Manager at info@candinetwork.com

CHANGES TO THIS PRIVACY NOTICE
We keep our privacy notice under regular review. It was last reviewed April 2022.