Why we collect your personal information
We hold and process personal data about you to:
| Purpose | Lawful Basis |
| To manage contracts with you, including communicating with you and paying you | We need this information in order to work with you (‘legitimate interest’). |
| To manage the delivery of projects in connection with our contract with you, including communicating with you, crediting you and publicising the project | We need this information in order to effectively deliver the projects (‘legitimate interest’) |
| To comply with employment law, health and safety law, tax law and right to work provisions | The law says we have to collect this information. (‘Legal obligation’) |
| To make sure our activities are safe for everyone and to protect the welfare of children and young people and follow safeguarding procedures | The law says we have to collect this information. (Children’s Acts[1989, 2004, Common Law Duty of Care) (‘Legal obligation’) |
| To monitor our activities and report on them | We need this information in order to deliver and improve the service (‘legitimate interest’). |
| To offer you future freelance opportunities (including training) | We need this information in order to consider you for future work and to contact you (‘legitimate interest’) |
| To recommend your work to others and to provide references for you | We will ask for your consent. |
| To market Mess Up The Mess activities to you | We will ask for your consent. |
We collect some information which is considered especially sensitive (‘Special Category Data’). This includes information about gender, disability and mental health (‘protected characteristics’). We collect this in order to comply with social protection law (the Equalities Act 2010) by ensuring our services are appropriate and accessible to all.
How long we keep your information
We keep your information for 6 years after the conclusion of your last contract with Mess Up The Mess.
Sharing Information
Sometimes, we may share your information:
- To an employer requesting a reference for a post you have applied for
- With social services and / or police in relation to any safeguarding incident you are connected with
- With HMRC, Border Force, Police or other lawful authority in connection with an investigation or enquiry
- With funding bodies when reporting on project progress
- If we are legally obliged to (for example by a court order)
We may also share anonymous and aggregated information with our funders and in public documents. We will only do this where there is no risk of an individual person being identified.
Accessing Your Information
You have the right to access any information we have about you. And you have the right to correct any of your personal details.
Objecting To Us
You have the right to object to us processing any of your information which is not required under a legal obligation. If you object to processing, we will stop using it for other purposes. You also have the right to request we erase the information we hold on you which is not required under our legal obligations.
Sending Information Overseas
We use secure online (‘cloud’) services to store and process your information. These are either based within the European Economic Area, and comply with the security and privacy demands of the General Data Protection Regulation; or based in countries or provided by organisations which have ensured equivalent levels of protection. (An ‘adequacy decision’.)
More Information
If you have any questions about how we use your information, please contact:
The Executive Director (Chris Lewis) who is the Data Controller for Mess Up The Mess. 01269 624 300. chris@messupthemess.co.uk
If you have a complaint about how your information has been used by us, please let us know. You may also complain to the Information Commissioners Office (0303 123 1113).