Privacy Policy

The Roxi Foundation Website Privacy Notice

The Roxi Foundation manages your data in line with our responsibilities under the UK General Data Protection Regulation (UK GDPR), as supplemented by the Data Protection Act 2018. This Privacy Notice explains what personal data we collect from you when you engage with us online and how we use your information.

In this privacy notice, references to ‘us’, ‘our’ or ‘we’ are to The Roxi Foundation. Everything that we do with your data – such as storing it, working with it or deleting it – is referred to as ‘processing’.

Who we are

The Roxi Foundation are a community interest company.

The data controller is The Roxi Foundation. 

The Data Protection Officer for The Roxi Foundation is the founder.

Email: contactus@theroxifoundation.co.uk

What this notice does not cover

This notice covers public facing websites hosted by The Roxi Foundation.

What data do we collect?

When you contact us online, engage with our website, or access our services online, we may collect, store and use your personal data.

This might include:

• Your name.
• Your email address.
• Your postcode.
• The country you live in.
• Details of which version of web browser you are using.
• Your IP address.
• Information about how you use our emails.
• Information on how you use the site.

How we collect your personal data

Where you provide personal information via our website, it will only be used for the services you requested and as specified on the relevant pages of the site.

We collect your personal data when you:

• Visit our website.
• Sign up to our services.
• Agree to receive communications such as newsletters or marketing material.

How do we use your personal information?

We process your personal data so we can:

• Support the functioning of The Roxi Foundation.
• Provide you with goods, facilities or services.
• Explain and promote the work of The Roxi Foundation.

The lawful basis for collecting your data

The lawful basis for collecting and using personal data will depend on the specific context in which we collect it. However, we will normally collect personal data from you only when:

• We need to for the purposes of The Roxi Foundation functions.
• We have a legal obligation to do so.
• We need the personal data in relation to a contract we have with you.
• We have your consent to do so.
• The processing is in our legitimate interests and not overridden by your rights.

Details about the lawful bases for processing personal data can be found on the Information Commissioner’s website. 

How we protect your data and keep it secure

We take the security of your personal data seriously. All personal data you provide to us will be stored securely - both physically and electronically - in accordance with our policies.

We have an information security process in place to oversee the effective and secure processing of your personal data.

We are committed to doing all that we can to keep your data secure. We set up systems and processes to prevent unauthorised access or disclosure of the data we collect about you. For example, we protect your data using varying levels of encryption. All third parties who process personal data for us are required to keep that data secure.

Data held outside the UK

Some personal data we control is held outside the UK. This data is predominantly held in data centres within the European Economic Area (EEA), for the purpose of hosting and maintenance.

We, or processors acting on our behalf, will only store or process personal data in countries outside the European Economic Area (EEA), when we are assured of the security of the data. We put in place security measures to minimise the possibility of the loss or unauthorised access of your personal data.

When do we share personal data?

We use internal and external services to manage your personal data. We may share your personal data with third parties when permitted to do so, including:

• If we have your consent.
• If we have a contract with a processor acting on our behalf.
• If we have a lawful basis for doing so.
• If we are under a duty to disclose or share your personal data to comply with any legal obligation.

This includes providing your personal data to other organisations. For example, to prevent fraud or other crime.

Examples of third parties include our product suppliers and delivery partners.

We will never share or sell your personal data to other organisations for direct marketing purposes. We will notify you of whom your personal data will be shared with and where it is stored.

How long do we keep your data for?

We will keep your personal data for as long as is necessary for the purpose it was collected.

Your rights

We will ensure you can exercise your rights in relation to the personal data you provide to us.

• Where we are relying on your consent to use your personal data, you can withdraw that consent or unsubscribe from our services at any time. Instructions are provided when we collect your data.
• You can request access to the personal data we hold about you at any time by contacting the Data Protection Officer whose contact details are found at the top of this notice.
• You can ask us to update your personal data if it changes. In certain circumstances, you can request we erase the personal data we hold or ask us to stop or restrict processing if you have an objection.
• In certain circumstances, you can ask for a copy of your information in a structured, commonly used and machine-readable format. This is to allow you to obtain and reuse your personal data for your own purposes across different services (the right to data portability).
• If you have any privacy-related questions or unresolved problems relating to the use of your personal data, you should contact the service area you are engaged with in the first instance. If you remain unhappy, you can contact the Data Protection Officer whose details are found at the top of this notice.
• You also have the right to complain to the Information Commissioner’s Office about the collection and use of your personal data. They can be contacted at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Cookies and similar technologies

The Roxi Foundation uses cookies (and similar technologies such as tags) on our websites. They are used to make the websites work, give you a more personalised web service, target our advertising and analyse the effectiveness of our products and services.

When you first visit our website, we will ask for consent to set any cookies (and to process any personal data collected by these cookies). These cookies are not strictly necessary to make our pages work and you can set your preferences at any stage by clicking ‘Cookie manager’ in the footer of each page.

Where cookies are strictly necessary, we consider that we have legitimate interest in processing the personal data they collect. This is because having a working website is vital to us supporting the work of The Roxi Foundation.

You can always withdraw your consent by clearing cookies from the cache in your computer and rejecting them next time you visit our site.

We may also use similar technologies to identify when our emails are opened and the links you click on. This allows us to identify whether our email campaigns are effective, and we consider that we are legitimate in doing so.

Email alerts and subscriptions

If you sign up for one of our email subscription services, we will hold the information you submitted (such as your email address) for as long as we are providing you services.

You can unsubscribe from emails at any time by clicking the unsubscribe link at the bottom of each email, or by sending an email notifying us of your wish to unsubscribe. 

When you subscribe to an email alert or newsletter service, we collect:

• Your name, email address, subscription preferences and any other information you choose to provide to us.
• Information about how you use our emails - for example whether you open them, and which links you click on.
• Details of which version of web browser you are using.
• Information on how you use the site, using cookies and page tagging techniques.
• We will use the personal data you have provided to us to send you email alerts and gather feedback to improve our email alerts. We may also occasionally contact you to improve our service.

Changes to this notice

We may update this privacy notice from time to time. In that case the ‘last updated’ date at the top of this page will also change. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, we will take reasonable steps to make sure you know.