HOMELESS TO WELLNESS LIMITED
CHANGE AHEAD is known as the ‘Controller’ of the personal data provided to us.
Why we need your data We need to collect this information about you when you sign up and each time you use the Platform so that you can get the most out of CHANGE AHEAD.
• We do not collect sensitive information such as any medical details.
• We store your personal information carefully.
You have consented to provide this information to us but can withdraw your consent at any time by getting in touch with us ([email protected]).
What we do with your data We retain personal information only for as long as necessary to carry out these functions. If you notify us that you no longer wish to be listed on the database, we will delete your information as soon as possible.
• We use your data to provide information to you about items available nearby.• We may use your information to contact you about our goods and services that we believe that you may be interested in.
• We do not share your information with anyone unless we are required to do so by law or it is necessary to make the Platform run properly.
• We do not sell your information to anyone.
All the personal data we process is located on servers within the European Union.
What are your rights?
You have a right to see the information we hold on you and/or require your data to be deleted by making a request in writing to the email address below. If at any point you believe the information we process on you is incorrect you can request to have it corrected. If you wish to raise a complaint on how we have handled your personal data, you can contact us and we will investigate the matter.
• You can adjust your preferences in the settings menu on the Platform.
• You can request access to your information or ask us to delete it by contacting us.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).
If you agree to the above, use the Platform. If you do not agree or would like some further information then please contact us at [email protected].
Last updated: 1st January 2022
1.1 HOMELESS TO WELLNESS Limited (“Company” or “We“) respect your privacy and are committed to protecting it through our compliance with this policy. This policy describes:
• The identity of the data controller.
• What personal data is collected including the types of information we may collect or that you may provide when you download, access or use the CHANGE AHEAD Services (the “Platform“). Note: for the purposes of this policy both the website www.changeahead.org.uk and the CHANGE AHEAD platform shall be referred to as the “Platform”.
• How personal data is collected.
• Why personal data is collected.
• How we use personal data.
• How personal data is shared and with whom.
• What choices you have with respect to how personal data is used.
• How long personal data is kept.
• Your rights with respect to personal data.
1.2 This policy applies only to information we collect on the Platform, via e-mail, text and other electronic communications sent through or in connection with the Platform This policy DOES NOT apply to information that:
• We collect offline or on any other Company apps or websites (other than www.changeahead.org.uk), including websites you may access through this Platform.
• You provide to or is collected by any third party (see “THIRD-PARTY INFORMATION COLLECTION” (unless this information is provided by them to us)).
1.5 Users under the Age of 18: The Platform is not intended for anyone under 18 years of age, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected or received personal information from anyone under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a user under 18, please contact us at: [email protected].
2. Identity of Data Controller
2.1 A data controller is a person or organisation who makes decisions about how your personal data is collected, used and handled.
2.2 The Company is the data controller and may be contacted at:
Post: HOMELESS TO WELLNESS Limited, 7 St John’s Rd, Harrow, United Kingdom, HA1 2EY
• e-mail: [email protected]
3. What personal data is collected
3.1 We collect information from and about users of our Platform:
• Directly from you when you provide it to us.
• Automatically when you use the Platform.
3.2 We do not collect special categories of personal data such as information relating to or about the below or information about criminal records.
• Racial or ethnic origin
• Political opinions
• Membership of a political association, professional or trade association
• Membership of a trade union
• Religious beliefs or affiliations
• Philosophical beliefs
• Sexual orientation or practices
• Biometric information
3.3 Information that you provide to us (“personal information”) when you download, register with or use this Platform may include:
• First Name, Last Name;
• Postal address;
• E-mail address;
• Telephone number; and
• Profile picture.
3.4 In addition we may collect other information that is about you but individually does not identify you, such as age or gender.
3.5 This information may also include:
• Information that you provide by filling in forms on the Platform such as first name, last name, email address, telephone number and address (“Contact Information”). This includes information provided at the time of registering to use the Platform and requesting further services.
• We may also ask you for information when you enter a contest or promotion sponsored by us, such as your Contact Information.
• Information you provide to us when you complete user surveys or surveys for research purposes such as your Contact Information.
• Information you provide to us when you report a problem with the Platform such as your first name, last name and email address.
• Records and copies of your correspondence (including e-mail addresses and phone numbers), if you contact us.
• Details of transactions you carry out through the Platform and of the fulfilment of your orders.
• Your correspondence within the Platform with other users (your username and location).
3.6 Third-party Information Collection
3.6.1 When you use the Platform or its content, certain third parties may use automatic information collection technologies to collect information about you or your device.
These third parties may include:
• Advertisers, ad networks and ad servers.
• Analytics companies.
• Your mobile device manufacturer.
• Your mobile service provider.
3.6.2 These third parties may use tracking technologies to collect information about you when you use the Platform. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites, apps and other online services or websites. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
3.6.3 We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
3.6.4 For information about how you can opt out of receiving targeted advertising from many providers, see “CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION”.
4. How personal data is collected.
4.1 Automatic Information Collection and Tracking.
4.1.1 When you download, access and use the App, it may use technology to automatically collect:
• Usage Details. When you access and use the Platform, we may automatically collect certain details of your access to and use of the Platform, including traffic data, location data, logs and other communication data and the resources that you access and use on or through the Platform.
• Device Information. We may collect information about your mobile device and internet connection, including the device’s unique device identifier, IP address, operating system, browser type, mobile network information and the device’s telephone number.
• Stored Information and Files. The Platform also may access metadata and other information associated with other files stored on your device. This may include, for example, photographs, audio and video clips, personal contacts and address book information. You will be asked for your consent to such access and use of your personal data within the Platform. You can withdraw your consent at any time via the settings menu.
• Location Information. This Platform collects real-time information about the location of your device. We do not, however, continually collect user location data nor do we collect location data without the user being aware. We store the location of a user at set points for example when you choose to update your location and when you create/edit an item. Some of our location-enabled Services require your personal data for the feature to work. You will be asked for your consent to such access and use of your personal data within the Platform. Note, however, that opting out of the Platform’s collection of location information will cause its location-based features to be disabled. You can withdraw your consent at any time via the settings menu.
4.2 If you do not want us to collect this information, please do not create an account with us.
4.3 We may also use these technologies to collect information about your activities over time and across third-party websites, apps or other online services (behavioural tracking)..
4.4 Information Collection and Tracking Technologies.
4.4.1 The technologies we use for automatic information collection may include:
• Cookies (or mobile cookies). A cookie is a small file placed on your smartphone or device. It may be possible to refuse to accept mobile cookies by activating the appropriate setting on your smartphone or device. However, if you select this setting you may be unable to access certain parts of our Platform.
• The cookies we use include “analytical” cookies. They allow us to recognise and count the number of visitors and to see how visitors move around the Platform when they are using it. This helps us to improve the way our Platform works, for example, by ensuring that users are finding what they are looking for easily.
• These cookies are used to collect information about how visitors use our Platform. We use the information to compile reports on general user traffic, conversion statistics and to help us improve the site. The cookies collect information anonymously.
• Web Beacons. Pages of the Platform and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an e-mail and for other related platform statistics (for example, recording the popularity of certain platform content and verifying system and server integrity).
4.5 Third Party Software/Services
4.5.1 We use the following third-party software/services to collect and process your personal data for the following reasons:
• CHATRA: chat module collects user data
5. How we use personal data and lawful bases for processing
5.1 Lawful Bases for Processing under the GDPR
• Consent: the individual has given clear consent for us to process their personal data for a specific purpose.
• Contract: the processing is necessary for a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract.
• Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
• Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
5.2 We use information that we collect about you or that you provide to us, including any personal information, to:
• To set up and operate your CHANGE AHEAD account (such processing is necessary for the performance of our contract with you).
• To verify your identity and carry out security checks in order to set up your account (such processing is necessary for the performance of our contract with you and necessary for us to comply with a legal obligation).
• Provide you with the Platform and its contents, and any other information, products or services that you request from us (such processing is necessary for the performance of our contract with you).
• Give you notices about your account, including expiration and renewal notices (such processing is necessary for the performance of our contract with you and necessary for us to comply with a legal obligation).
• Ensure that content from our Platform is presented in the most effective manner for you and for your computer or device for accessing the Platform (such processing is necessary for the performance of our contract with you).
• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection (such processing is necessary for our legitimate interests (to recover monies due etc).
• Notify you when Platform updates are available, and of changes to any products or services we offer or provide though it (such processing is necessary for our legitimate interests (to allow us to provide changes to our software, products or services)).
• To collect information from surveys that you sign up to take part in (such processing is necessary for our legitimate interests (to improve our services)).
• To manage your account, including processing payments and refunds and providing notifications, should this service be introduced within the Platform (such processing is necessary for the performance of our contract with you and is necessary for our legitimate interests (to process payments)).
5.3 The usage information we collect helps us to improve our Platform and to deliver a better and more personalised experience by enabling us to:
• Estimate our audience size and usage patterns (such processing is necessary for our legitimate interests (for running our services and to study how users use our Platform).
• Store information about your preferences, allowing us to customize our Platform according to your individual interests (such processing is necessary for our legitimate interests (for running our services).
• Speed up your searches (such processing is necessary for our legitimate interests (for running our services).
• Recognise you when you use the Platform (such processing is necessary for the performance of our contract).
• To provide us with information about how the Platform is running or whether there are any faults or issues with our products and services (such processing is necessary for our legitimate interests (for us to deliver a better service to you).
6. We use location data for the following reasons:
• To provide information about food or non-food items within a fixed distance from the user’s set location (such information is necessary for the performance of our contract with you).
• To allow others to receive information about a user’s food or non-food items within their search radius (such information is necessary for the performance of our contract with you).
6.1 We may also use your information to contact you about news, offers, notifications, surveys, information, goods and services that we think may be of interest to you (such processing is done with your consent and is necessary for our legitimate interests (to develop our products/services and grow our business)). We give you the option to consent to such emails when you sign up for the Platform. If you do not want us to use your information in this way, please do not consent. You may adjust your user preferences in your account profile. For more information, see section 8.0 below.
6.2 We have implemented reasonable measures designed to secure your personal information from accidental loss and from unauthorised access, use, alteration and disclosure.
6.3 The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Platform like message boards. The information you share in public areas may be viewed by any user of the Platform.
6.4 Unfortunately, the transmission of information via the internet and mobile platforms is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted through our Platform. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures we provide.
6.5 If you suspect that there has been a breach of the security of your data you should contact us at: [email protected] and include details of:
• the nature of the breach;
• the date of the breach; and
• the full circumstances of the breach. 6.6 On notification of such a breach we will investigate the matter and, where appropriate and required by law, notify the relevant Data Protection Regulator.
7. How personal data is shared and with whom.
7.1 You may provide information to be published or displayed (“Posted“) on public areas of the Platform (collectively, “User Contributions“). Your User Contributions are Posted and transmitted to others at your own risk. We cannot control the actions of third parties with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorised persons.
7.2 We may disclose aggregated information about our users, and information that does not identify any individual or device, without restriction.
7.3 In addition, we may disclose personal information that we collect or you provide:
• To our subsidiaries and affiliates.
• To contractors, service providers and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganisation, dissolution or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by the Company about our Platform users is among the assets transferred.
• To fulfil the purpose for which you provide it. For example, if you give us an e-mail address to use the “e-mail a friend” feature of our App, we will transmit the contents of that e-mail and your e-mail address to the recipients.
• For any other purpose disclosed by us when you provide the information.
• For the purposes of academic research.
• For any other purpose with your consent.
• To comply with any court order, law or legal process, including to respond to any government or regulatory request.
• To enforce our rights arising from any contracts entered into between you and us.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
8. What choices you have with respect to how personal data is used.
8.1 We strive to provide you with choices regarding the personal information you provide to us. This section describes mechanisms we provide for you to control certain uses and disclosures of your information. You may need to adjust the settings on your device to restrict the collection of information by the Platform but this may prevent you from accessing all of the features of the Platform.
• Location Information. You can choose whether or not to allow the Platform to collect and use real-time information about your device’s location through the device’s privacy settings. If you block the use of location information, some parts of the Platform may then be inaccessible or not function properly. For example, users have the ability to only allow manual geolocation (rather than using their device’s autolocating functionality), the provision of at least one piece of location data (i.e. their search location) is a requirement for the Platform to function.
• Promotion by the Company. If you do not want us to use your e-mail address or other contact information to send you information, notifications, news, surveys or promote our own products or services, you can opt-out by logging onto the Platform and adjusting your user preferences in your account profile by checking or unchecking the relevant boxes or by sending us an e-mail stating your request to [email protected].
• Targeted Advertising by the Company. We do not use information that we collect or that you provide to us to deliver advertisements.
• Disclosure of Your Information for Third-Party Advertising and Marketing. We do not share your personal information with third parties for advertising and marketing purposes. However, we may include offers from third parties in our marketing materials.
8.2 We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. (Note: In the United States of America you can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI“) on the NAI’s website)
9. Your rights with respect to personal data.
9.1 You can review and change your personal information by logging into the Platform and visiting your account settings page.
9.2 You may also send us an e-mail at [email protected] to request access to, correct or delete any personal information free of charge that you have provided to us. We cannot delete your personal information except by also deleting your user account.
9.3 We will respond to a request to access, correct or delete any data within 30 days of the date we receive the request.
9.4 We may not accommodate a request to change information if we believe the change would violate or breach any law or legal requirement or cause the information to be incorrect.
9.5 If, on your request, we refuse to amend, correct or delete your personal information, we will set out our reasons for not doing so and provide you with details of how you may complain about our refusal.
9.6 If you delete your User Contributions from the Platform, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Platform users. Proper access and use of information provided on the Platform, including User Contributions, is governed by our Terms and Conditions.
10. How long personal data is kept.
10.1 We will only retain personal data for as long as is reasonably necessary.
10.2 Upon deletion of an account, all personal data will be removed as soon as possible, and always within 90 days of the deletion.
12. Contact Information