You are sending your personal and sensitive information (data) to Conviction for the purposes of applying to us for help from a volunteer caseworker, independent advocate and/or barrister. We have measures in place to protect your data and to ensure it is kept safe.
Conviction is the “Data Controller” and we determine how your information will be used. If a volunteer agrees to help with your case, they become the main Data Controller. This means they are responsible for deciding how to process your data in order to be able provide you with the assistance that they have been authorised to carry out.
Conviction has appointed a Data Protection Officer: Ryan Jarvis, Chief Executive. You can email him at [email protected] You can also write to him at Ryan Jarvis, Data Protection Officer, Conviction, PO Box 428, MANCHESTER, M8 2FS.
Below “case record” means personal information that identifies you, such as your name and contact information as well as sensitive information about your problem, your personal or company finances and your health/racial/political/religious/sexual information if you share such details with us. As your case progresses, we will add further information to your case record such as a volunteer’s assessment of your eligibility for our help and a volunteer’s record of how they have helped you.
“Case papers” means any documentation about your problem which you or your representatives send to us. If the case is assisted by more than one volunteer, we will add any advice given by a previous member to these papers.
PEOPLE WHO MAY SEE YOUR DATA, THE SYSTEMS WE USE, AND THE PURPOSE OF OUR PROCESSING
- Your case record and papers may be processed at any time before your case is closed by Conviction staff members, office & casework volunteers and trustees.
- Your contact details and information may be processed at any time after you apply to Conviction by Conviction staff members, casework & office volunteers, referral agencies who have helped you submit an application to Conviction, Conviction legal volunteers who either assess your case for eligibility or have offered to help you, and Conviction board members. This is for the purpose of phone calls, emails or letter sending (via Outlook, Clio, Royal Mail or DX) about your case.
- We will put your contact details and case information onto our online case management system, Clio, so that we can contact you and process your case. If we receive electronic case papers from you or your representative by email these are uploaded to Clio, stored in Outlook and in Conviction computer folders.
- Your case record and case papers will be shared with volunteer’s who are assessing the eligibility of your case, or are considering helping with your case, via email, post or a similar system such as Document Exchange (https://www.dxdelivery.com/corporate/you r-industry/legal/). Volunteer’s may involve their clerk in the administration of this work. We confirm that they have reasonable safeguarding measures in place to protect your data while they are assessing your case for eligibility. When volunteer’s are considering helping with your case, they are a data controller, and have agreed to take responsibility for the security of your data.
- If we cannot find a volunteer, or a volunteer barrister has decided that you need help from a different kind of lawyer (not a barrister), we may share your case record and case papers with administrators of various legal volunteering schemes to try to find help for you. If a different kind of lawyer is able to offer legal help, and will therefore be responsible for your data security from then forwards, we will contact you to let you know about this change.
- Other people who may see your data include technical individuals and organisations who manage Conviction systems. Anyone who helps Conviction in this way will always have been asked to sign a confidentiality agreement to confirm they will treat anything they see as confidential, and will not share information further.
- We will never sell your data.
- We do not make decisions based using automated decision-making tools and will not process your data in this manner.
- Sensitive data about you is collected in our equal opportunities form to help us monitor the effectiveness of our equal opportunities policy. On receipt, the Volunteer & Administration Coordinator separates the equal opportunities form from the case record and case papers and the data is saved in Microsoft Excel. The physical form is then confidentially destroyed.
OUR LEGAL BASIS FOR PROCESSING YOUR DATA
We will ask for your consent to process your data in the manner described above. You can withdraw this consent at any time by writing to us at [email protected].
HOW LONG WE KEEP YOUR DATA
Your physical data
- We will securely store your physical case record and case papers at the Conviction office while your case is open.
- Once your case is closed:
- Your physical case papers will either be sent back to you or shredded using a confidential waste system.
- Your physical case record will be kept for seven years because our experience tells us that applicants might come back and request more assistance in the future, and it is more efficient to keep a case record for this period of time so to avoid delays if an applicant requests more help with their case. After that, the physical case record will be destroyed by our archiving provider, safely and securely.
Your electronic data
- We will securely store your electronic case record and case papers on Conviction’s systems while your case is open.
- Once your case is closed:
- Your electronic case papers will immediately be deleted from the electronic version of this stored on our case management system – Clio. Your electronic case papers that were received by email will not be deleted from our emailing system immediately.
- Your electronic case record will be kept for seven years for monitoring and evaluation purposes and because our experience tells us that applicants might come back and request more assistance in the future. After that, emails that relate to the case (along with case papers that were received by email) will be deleted from outlook. The electronic case record on Clio will be kept in perpetuity for the purposes of monitoring and evaluation. All attachments will be deleted from the Clio case record as the relevant information will be stored on the Clio record itself.
DATA SUBJECT RIGHTS
At any time you can also contact us to:
- Request that we stop holding or processing your personal data;
- Withdraw consent for our processing of your personal data;
- Correct or update the personal data we hold about you;
- Request that we erase your personal data; – Restrict or stop the way we use your data (including by objecting to our processing based on our legitimate interest and by withdrawing your consent);
- Request access to the personal data we hold about you, and for us to provide that to you in an easily accessible format, either for your own use or to transfer to another organisation of your choosing.
You also always have the right to opt out of marketing and fundraising communications.
Please contact us if you would like to exercise any of these rights. You can contact us in the following ways:
- by contacting our Data Protection Officer at [email protected]
- by writing to us at: Data Protection Officer, PO Box 428, MANCHESTER, M8 2FS.
If you are unhappy about how your data has been processed please contact us first using [email protected] so that we can try to resolve your concerns.
Page last reviewed: 18 May, 2022