Privacy notice

MASK Create (MASK) is a UK-registered charitable company (company number 06484985; charity number 1128734). MASK believes in the power of creativity education, and relies on the generosity and time of donors, supporters and volunteers to help us create a brighter future for our young people.

What this policy tells you

As part of our work, it is often necessary to collect data from supporters, volunteers, donors, and beneficiaries. The purpose of this policy is to clearly outline the data that MASK collects, and explain how we use, manage and protect your data. MASK is committed to informing its members, donors, beneficiaries, employees and visitors about the type of personal information that it collects. Personal information is any information that can be used to identify a living person.

MASK is registered with the Information Commissioner’s Office (reference number ZA936813). If you would like more information about how MASK uses your data, or would like to change the way MASK communicates with you, you can contact us in any of the following ways:

Our contact details

Registered Address: 3A Alderney Street, LONDON, SW1V 4ES, UK.

E-mail: contact@maskcreate.org

The type of personal information MASK collects

When you get in touch, MASK may collect some personal data from you. Depending on how you get in touch, MASK will collect data in person, over the phone, online through our website and email, or on paper. MASK may collect data if you sign up to receive news, emails or calls from us, make a donation, or simply ask more about our work.

MASK currently collects and processes the following information:

Personal identifiers, contacts and characteristics (for example, name, age, address, location data and contact details).
Employee, volunteer and trustee due diligence background data and DBS checks, employment information, ID numbers and financial information (for example, bank details for payment).
Information about the nature of your enquiry to help us understand what people find interesting about MASK’s projects, or where we can develop in future.
In specific situations, with your consent, MASK may ask for sensitive data such as ethnicity or health-related information. The purpose of this information will be disclosed when MASK asks for your consent.

How MASK obtains and uses personal information

Most of the personal information MASK processes is provided to us directly by phone, email, or through our website. MASK collects your data so we can process your participation in our programmes, complete your job application, process your donation, communicate with you about our work, or deal with any other request.

Some examples of how MASK might use your data are:

When MASK would like to contact you by email or telephone to become involved with our work.
When you apply for a position as trustee, supporter or a volunteer - to understand your background, how to contact you, and to complete necessary background and due diligence checks.
When you are a potential beneficiary or want to become involved in a MASK programme - to ensure you are eligible, to help choose the best programme and opportunity, and to help us improve MASK’s offering.
When you support MASK through a donation - to process your donation and thank you appropriately.
When MASK would like to send you a regular newsletter or email communication about our new projects, events or campaigns.
When recording the contact and discussions we have had with you - to make sure that we have given you all the information you need and engaged with you in the most appropriate way.

Lawful basis for processing information

Under the UK General Data Protection Regulation (GDPR), the lawful bases we will rely on for processing this information are:

Because you have given consent (You can remove your consent at any time by contacting MASK in writing).
Because we have a contractual obligation to do so.
Because we have a legal obligation to do so.
Because we have a legitimate interest.

How MASK keeps your information safe

MASK takes the protection of your personal data seriously. Our volunteers, staff and trustees are briefed on the importance of data protection and data management practices and have agreed to MASK’s confidentiality and data protection policies. MASK’s digital information storage is protected through a range of measures including password protection, secure servers and firewalls.

For how long MASK keeps your information

MASK will keep your personal data for as long as you have an active engagement with us. If you ask to be removed from our mailing list, MASK will only keep the necessary information to ensure we don’t contact you with marketing in the future.

We may also be required to retain some of your information for auditing purposes, or if you have previously agreed to Gift Aid your donations. In these instances, we may need to retain your data for up to six years.

How to opt out of future communications

MASK will give you an explanation of how you can opt out of communications every time we contact you. Alternatively, you can contact MASK directly and a member will ensure that you are removed from our marketing communications list as soon as possible.

Will MASK share my data outside of the UK

MASK won’t share your information outside of the UK.

How does MASK use my information if i apply for a volunteer, employee or trustee position

MASK will only use the data that you give us as part of your individual recruitment process, and only if it is directly related to your recruitment for a position with us. MASK will keep this data for a maximum period of six months and will then delete or archive it. Your personal data will be held securely on our password-protected systems and will only be accessible to those who need it – i.e. those involved in the recruitment and onboarding process.

How to access the personal data that MASK holds

You can contact MASK at any time to request a report on the data that we hold on you. We will aim to respond to this request within 30 days.

Changes to our Privacy Notice

MASK may change this Privacy Notice from time to time to keep up with changes in our work, in our membership and roles, and with changes in law. You are encouraged to check the Privacy Notice on our website regularly to make sure that you remain happy with the policy. MASK reserves the right to contact its database of members, volunteers and supporters if we make any major changes to this notice or our data protection policy.

Your data protection rights

Under GDPR, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. If this personal information is connected to any award, publication or display, or is otherwise necessary for any service offered by MASK, you may lose your IP rights if you request that this information is erased. If you have already consented to your personal data (such as name or contact details) being published alongside an award or other news item, and then choose to request the erasure of your personal data, MASK will take all reasonable steps to remove your details from digital and print sources.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, MASK will respond to you within one month. Please contact us if you wish to make a request or if you have any concerns about our use of your personal information.