MASK Create (MASK) is a UK-registered charitable company (company number 06484985; charity number 1128734). MASK believes in the power of creativity education, and relies on the generosity and time of donors, supporters and volunteers to help us create a brighter future for our young people.
What this policy tells you
As part of our work, it is often necessary to collect data from supporters, volunteers, donors, and beneficiaries. The purpose of this policy is to clearly outline the data that MASK collects, and explain how we use, manage and protect your data. MASK is committed to informing its members, donors, beneficiaries, employees and visitors about the type of personal information that it collects. Personal information is any information that can be used to identify a living person.
MASK is registered with the Information Commissioner’s Office (reference number ZA936813). If you would like more information about how MASK uses your data, or would like to change the way MASK communicates with you, you can contact us in any of the following ways:
Our contact details
Registered Address: 3A Alderney Street, LONDON, SW1V 4ES, UK.
The type of personal information MASK collects
When you get in touch, MASK may collect some personal data from you. Depending on how you get in touch, MASK will collect data in person, over the phone, online through our website and email, or on paper. MASK may collect data if you sign up to receive news, emails or calls from us, make a donation, or simply ask more about our work.
MASK currently collects and processes the following information:
How MASK obtains and uses personal information
Most of the personal information MASK processes is provided to us directly by phone, email, or through our website. MASK collects your data so we can process your participation in our programmes, complete your job application, process your donation, communicate with you about our work, or deal with any other request.
Some examples of how MASK might use your data are:
Lawful basis for processing information
Under the UK General Data Protection Regulation (GDPR), the lawful bases we will rely on for processing this information are:
How MASK keeps your information safe
MASK takes the protection of your personal data seriously. Our volunteers, staff and trustees are briefed on the importance of data protection and data management practices and have agreed to MASK’s confidentiality and data protection policies. MASK’s digital information storage is protected through a range of measures including password protection, secure servers and firewalls.
For how long MASK keeps your information
MASK will keep your personal data for as long as you have an active engagement with us. If you ask to be removed from our mailing list, MASK will only keep the necessary information to ensure we don’t contact you with marketing in the future.
We may also be required to retain some of your information for auditing purposes, or if you have previously agreed to Gift Aid your donations. In these instances, we may need to retain your data for up to six years.
How to opt out of future communications
MASK will give you an explanation of how you can opt out of communications every time we contact you. Alternatively, you can contact MASK directly and a member will ensure that you are removed from our marketing communications list as soon as possible.
Will MASK share my data outside of the UK
MASK won’t share your information outside of the UK.
How does MASK use my information if i apply for a volunteer, employee or trustee position
MASK will only use the data that you give us as part of your individual recruitment process, and only if it is directly related to your recruitment for a position with us. MASK will keep this data for a maximum period of six months and will then delete or archive it. Your personal data will be held securely on our password-protected systems and will only be accessible to those who need it – i.e. those involved in the recruitment and onboarding process.
How to access the personal data that MASK holds
You can contact MASK at any time to request a report on the data that we hold on you. We will aim to respond to this request within 30 days.
Changes to our Privacy Notice
MASK may change this Privacy Notice from time to time to keep up with changes in our work, in our membership and roles, and with changes in law. You are encouraged to check the Privacy Notice on our website regularly to make sure that you remain happy with the policy. MASK reserves the right to contact its database of members, volunteers and supporters if we make any major changes to this notice or our data protection policy.
Your data protection rights
Under GDPR, you have rights including:
You are not required to pay any charge for exercising your rights. If you make a request, MASK will respond to you within one month. Please contact us if you wish to make a request or if you have any concerns about our use of your personal information.