Our privacy commitment
Leap only collects and stores personal and sensitive data that is necessary to achieve its charitable aims, and it does so in accordance with the General Data Protection Regulation (GDPR)
Data protection is about ensuring people can trust Leap to use their data fairly and responsibly. Leap collects and stores data about individuals for a range of reasons, all of which enable Leap to achieve its charitable aims.
Leap has a Data Protection Lead (DPL) who is responsible for the management and coordination of data protection within the charity. All Leap personnel are required to have a working understanding of GDPR and abide by the charity’s policies and procedures in relation to data protection.
PURPOSE OF DATA COLLECTION VIA OUR WEBSITE
We automatically collect data about you using cookies on our website:
- To understand how users are using and interacting with our website
- In order for us to improve the overall experience, ensuring it is useful and relevant
We do not collect this data for marketing or remarketing purposes.
PERSONAL INFORMATION WE COLLECT
IP address and/or domain name
Device type and operating system
Date, time and duration of your visit to the website
Pages you visit
How frequently you visit
Anonymised video of how someone interacted with our website
Heat and click maps
WHO STORES THE PERSONAL DATA WE COLLECT
Leap Confronting Conflict
Information we obtain from you via paper is safely destroyed once inputted to the relevant database.
A third-party, compliant with UK legislation Data Protection Act. Stores primary contact information, web-form sign ups and transaction data. This is the mechanism by which we communicate with donors, funders and programme partners. Any and all of this personal data is stored on Salesforce secure servers and backed up in the UK. For the purposes of GDPR, Leap Confronting Conflict is deemed the ‘Data Controller’ and Planning Centre the ‘Data Processor’.
Big Mallet Web Server
Big Mallet web Infrastructure incorporates High Availability pairs of virtual appliances, such as VMware NSX firewalls, Load Balancers, Web Application Firewalls and Intrusion Detection Systems. Due to the virtual nature of the appliances Big Mallet are able to scale indefinitely during traffic spikes or marketing drives whilst providing high levels of hardware redundancy at an effective level.
Big Mallet delivers a complete DDoS protection solution based on detection, diversion, verification and forwarding to ensure total protection. When a DDoS attack is launched against a victim protected by our solution, we ensure that business continuity is maintained. When a DDOS attack is identified, the data traffic destined for the target device is diverted to our DDoS scrubbing centres for treatment. This traffic is then analysed and filtered. Bad data packets are then blocked and good data packets are forwarded to the target device to maintain business continuity.
The server environment has attained PCI-DSS and a variety of IEC accreditations. Providing processes and systems to provide secure services to clients in accordance with the ISO standards.
The server environment has also obtained the cyber essentials plus, CSA Star and CiSP.
Stripe, Inc and it's affiliates are Leap Confronting Conflict's donation payment provider. Stripe will generally not collect your Personal Data directly from you, instead Leap will store information like your name, address, date of giving and amount on our Salesforce database.
PURPOSE OF OUR DATA COLLECTION
We collect and store personal data from supporters, donors and programme partners connected to the work of Leap Confronting Conflict to:
To inform people of the work we are doing
To communicate with people
To provide other support services we offer
For donation purposes, administrating any ongoing donations or claiming Gift Aid
For the immediate reason you have it to use if not covered above, such as to process a request, sign up to a newsletter, register for a course or event
We do not use personal data in any way other than to further the work we are doing. We do not share your information with third-parties for marketing purposes.
THE TYPES OF PERSONAL DATA WE COLLECT AND STORE
We collect and store personal data from supporters, donors and programme partners connected to the work of Leap Confronting Conflict. Such as:
Organisation (if applicable)
Job title (if applicable)
Social Media handles
Area(s) in which you are interested in learning more about our campaigning, training and policy information work
Under 18s in your care
Bank account details
We do not use personal data in any way other than to further the work we are doing. We do not share your information with third-parties for marketing purposes. However, in situations concerning the safety and safeguarding of a young person or adult, we will work with appropriate authorities.
ADDITIONAL PERSONAL DATA WE COLLECT AND STORE FOR UNDER 18S
Named parent/guardian(s) relationship to respective Under 18
Parent/guardian phone number
GP contact number
Relevant medical, nutritional or allergy needs or requirements
HOW WE COLLECT PERSONAL DATA
Form submission, such as filling out a Pledge Card, advocacy consent form or signing up to our monthly newsletters
Pre-course risk assessments
Medical forms (Under 18s)
You will have provided opt-in consent in order for us to have collected and subsequently store this data on you.
WHO AT LEAP CONFRONTING CONFLICT CAN ACCESS PERSONAL DATA
Only authorised personnel are permitted to access personal data. Programme Managers, Safeguarding Team and Training Manager who deliver training are permitted to relevant personal data of relevant people i.e. those that are attending residentials or online training course, but do not have access to all of the personal data we store.
ACCESSING YOUR DATA
You also have the right to request a copy of the information we hold on you, although we will ask for some form of identification to ensure you are the person to who the personal data relates. Email email@example.com if you would like to do so.
If you are concerned about how we have collected, managed or stored your personal information, email our Data Protection Lead at firstname.lastname@example.org