The following statement outlines how we deal with any personal information you provide us or what we accumulate from you in accordance with the Data Protection Act 2018. Wisdom for Women International is the data controller of personal data we hold about you for the purpose of the Act.
Data usage
Data we collect about you
Personal information or personal data is any information which can be used to identify an individual. This does not include ‘anonymous data’, which is data where the identity has been removed.
The personal data we may collect, store, use and/ or transfer different kinds of data, have been grouped as following:
- Identity Data: First name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender
- Contact data: Address, email address and telephone numbers
- Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website
- Profile Data: Your username and password, feedback and survey responses
- Usage Data: Information about how you use our website, products and services
- Communication Data: Your preferences in receiving information from us and your communication preferences
Aggregated Data
Aggregated data may be derived from the personal data you’ve provided us with but not considered personal data by law. This data does not directly or indirectly reveal your identity. Data aggregation is the process where raw data is collected, consolidated, and expressed in a summary form for statistical analysis as such where we may use aggregated Usage Data to calculate the percentage of users accessing our website or a specific website feature.
In the case where we may use both aggregated data and personal data, whereby you can be directly or indirectly identified. This combined data would therefore be treated as Personal Data in accordance with cookie and privacy policy.
Special Categories of Personal Data
Special Categories of personal Data includes details about your religious or philosophical beliefs, race or ethnicity, political opinions, trade unioun membership, sexual orientation, sex life, biometric, genetic or health data, criminal convictions and offences.
We generally do not collect any Special Categories of personal data; however, we may collect this data from you on occasions for instance through a direct interaction or online application forms we may receive Special categories of Personal Data. This may include:
- Religious or philosophical beliefs
- Health
- Race or ethnic origin
The Processing these types of Special Categories of Personal Data is permitted under data protection law where data subjects have given explicit consent and, or, where it is carried out by a religious entity in the course of its legitimate activity
How we collect your personal the data
We use various methods in order to accumulate data from you or about you. This includes:
- Direct interactions: this includes identity, contact information, address or special categories of personal data i.e., health or race through filling out online forms or correspondence via phone, email, post or other means. These may include:
- Subscribe to one of our publications
- Online service payments
- Enter a competition
- Replying to a survey; or
- Provide feedback
- Request information to be sent to you
- Automated Technologies or Interactions:We may automatically collect Technical Data when you interact with our website. This includes information about your equipment, browsing actions and patterns. This personal data is collected by using cookies, server logs and other similar technologies. Please see our cookie policy for further details.
- Third Parties Sources: We may receive your personal data from other bodies such Triumphant Church International.
How we use your personal data
We are only able to use your personal data where the law permits. In most occasions, we will use your personal data in the following circumstances:
- Where you have provided a consent for us to use your personal data, for example through online forms, correspondence or any form of request (i.e. information, newsletter). Please note that you can withdraw your consent at any time as per policy.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
The purpose for using your personal data
The table below outlines ways in which we intend to use your personal data in accordance with the law. We have defined our legitimate interests where appropriate.
Your personal data may be processed in more than one lawful ground depending on a specific purpose for using your data. Please contact us for more details on the specific legal ground we rely on in processing your personal data on more than one ground. The table below indicates this purpose:
| Purpose/ Activity | Type of Data | Lawful basis for processing including basis of legitimate interest |
| To manage our relationship with you which will include | 1.Notifying you about changes to our terms and conditions or privacy and cookie policy 2.Asking you to leave a review or take a survey 3.Identity 4.Contact 5.Profile 6.General Communications |
Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) |
| To enable you to partake in a competition or complete a survey | 1.Identity 2.Contact 3.Profile 4.Usage 5.Marketing and Communications 6.Performance of a contract with you |
Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow Wisdom for Women International |
| To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | 1.Technical 2.Identity 3.Contact |
Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) Necessary to comply with a legal obligation |
| To use data analytics to improve our website, products/services, marketing, customer relationships and experiences | 1.Usage 2.Technical |
Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) |
| To manage questions you may have, or issues relating to certain Special Categories of Data, such as race or ethnic origin; religious or philosophical beliefs; sex life or sexual orientation; or health | 1.Identity 2.Contact 3.Your consent |
Necessary for our legitimate interests (as a religious body these may be issues you ask us about) |
| To make suggestions and recommendations to you about goods or services that may be of interest to you | 1.Contact 2.Identity 3.Technical 4.Profile 5.Usage |
Necessary for our legitimate interests (to develop our products/services and grow Wisdom for Women International) |
Third Parties
Please note that we do not or intend to share your personal information with external Third Parties. On the occasion that we may need to share your personal data, we will obtain your consent before we share your data.
Opt- Out
You can request for us or third parties to remove you from our messaging list at any time by contacting us, unchecking relevant boxes to adjust your preferences or through the opting out links on any communication or messages sent to you.
Please note that opting out to receiving messages does not apply to the personal data provided to us as a result of complaints or litigation and only as long as the information is required.
Change of Purpose
We intend to use your personal data for the purpose originally intended unless it is needed for another reason that is compatible with the original purpose. You can contact us or an explanation of how the processing for the new purpose is compatible with the original purpose.
You will be notified if we need to use your personal data for unrelated purpose and we will also explain the legal basis that allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Disclosures of your personal data
For the purpose captured in the table under ‘The purpose for using your personal data’ we may share your personal data with the parties outlined below:
- Internal Third parties
- External Third parties
- Third parties: included if we choose to transfer, sell, merge part of our business or our assets. If we seek to acquire other business or merge with them. In the case where change occurs to our business, then new owners may use your personal data as we do accordingly with this privacy and cookie policy.
All Third Parties are legally required to respect your personal data and adhere to the law. We do not permit any Third-Party service providers to use your personal data for their own purpose and only allow them to process your personal data for specific purposes and in accordance with our strict instructions.
International Transfers
We do not transfer your personal data outside the European Economic Area (EEA).
Data Security
We have placed appropriate security measures for the prevention of your personal data being accessed or used without authorisation, accidental data loss, disclosure or alteration. In addition, we placed limited access to your personal data for employees, contractors, agents or any other third parties who have a need-to-know basis. They are only able to process your personal data as we instruct them to do so and they are subject to a duty of confidentiality.
We have implemented procedures to deal with any suspected personal data breach and we will notify you and applicable regulators if data breach occurs as per legal requirement.
Data Retention
Your personal data is retained for as long as necessary in order to fulfil the purpose it was collected for. This included the purposes for satisfying accounting, reporting requirements and legal.
In order to determine the appropriate retention period for personal data, we take in to account:
- Sensitivity of the personal data,
- Amount
- Nature
- Potential risk of harm from unauthorised use or disclosure personal data
- The purpose for processing your data
- And whether the purpose can be achieved through other means
- Applicable legal requirements
You can contact us for more details on retention periods for the different aspects of your personal data which is available in our retention policy.
Your Legal Rights
In relation to your personal data, the data protection laws gives the following rights under certain circumstance:
- Data subject access request: this enables you to request access to your personal data.i.e., receive a copy of any personal data we hold about you and also to check that we are lawfully processing it
- Data correction: this enables you to request a correction of any inaccurate or incomplete personal data we hold about you. We may need to verify the accuracy of the new data you provide to us.
- Data erasure: enables you to request for us to delete or remove personal data in the case where no good or reasonable ground to continue processing it. You have also the right to request us to erase or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- Object to processing your personal data: where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
- Restriction to processing: you can request us to suspend the processing of your personal data on the following cases. 1) If you require us to establish data’s accuracy; 2) Where the use of the data is unlawful but you do not want us to erase it; 3) Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or 4) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Data Transfer: We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Consent withdraws: Where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Please contact us if you wish to exercise any of the rights set out above.
Requirement for Requesting Data
In order to ensure your right to access the personal data we hold for you (or to exercise any of your other rights), we may need to request specific information from you for us to verify your identity. This security measure enables us to protect your personal data by not disclosing any personal information to any person (s) who has no right to receive it. Alternatively, we may also contact you to request for more information in relation to your request in order to speed up our response.
Responding Time Limit
We aim to respond to all legitimate requests within one month; however, it may take us longer than a month if your request is particularly complex or where you have a number of requests. We will notify you and keep you updated in this case.