Lighthouse Privacy
& Cookie Policy

What information do we collect and how do we collect it?

We may collect, store and use the following kinds of personal data:

  • Newsletters and Communications – information provided when signing up to our newsletter e.g. name, email address, job title, organisation, and location
  • Enquiries – information that you submit to us when you contact us via the website, over social media or meeting in person (Enquiries)
  • Job Applications – information that you provide us for the purpose of applying for a job or receiving job related communications (Job Applications)
  • Cookies – information about your computer and your visits to and use of this website, including your IP address, geographical location, browser type, referral source, length of visit and number of page views

Newsletters and Communications

If you subscribe to our newsletters you will receive regular communications relating to Lighthouse’s work. These may be targeted based on interests you have communicated to us when signing up. Our mailings are facilitated using third-party provider Mailchimp and your data is processed by Salesforce. You have the right to unsubscribe from the E-newsletters at any point. We will treat your consent as valid for two years. In the event that we would like to continue sending you updates we will approach you to ask if you would like to continue receiving them.

If at any point you wish to unsubscribe from this mailing list please click the unsubscribe link on the latest email or contact info@lighthousechildrenshomes.org.uk to ensure that you do not continue to receive the newsletter. We will need to continue holding onto your details after you have unsubscribed to ensure that we do not send you further communications.
Lighthouse processes your personal details and sends you newsletters following your freely given, specific, informed and unambiguous consent.

For more information, please see the Mailchimp or Salesforce privacy notices as appropriate.

Enquiries

When we receive an enquiry through our website we create a record of the contact and store the details disclosed in the enquiry. We only use the personal information we collect in order to process the enquiry. Data submitted for the purpose of enquiry is processed by third-party processors, Salesforce and FormAssembly.

Lighthouse processes your enquiries data as part of its legitimate interests.

For more information, please see the Salesforce and FormAssembly privacy notices as appropriate.

Job Applications

If you use our online application form to apply for a job, any data which you submit is processed by FormAssembly and Salesforce.

If you use our hosted online application system, this will be provided by our data processor, SmartRecruiters, on our behalf.

We ask for your personal details including name and contact details. We will ask you about your previous experience, education and for answers to questions relevant to the role you have applied for. Our Recruitment and HR teams will have access to all of this information.

If you are successful, the information you provide during the application process will be retained by us as part of your employee file for the duration of your employment plus six years following the end of your employment. If the position you are applying for is subject to the Children’s Homes Regulations (2015) then your records will be retained for 15 years after the end of your employment.

If you are unsuccessful at any stage of the process, the information you have provided until that point will be retained for six months from the closure of the campaign.

Lighthouse processes your job application data as part of its legitimate interests to hire candidates to open roles in the organisation. For recruitment of some positions, Lighthouse uses your freely given, specific, informed and unambiguous consent to process your personal data.

As part of our equality and diversity policy we may ask you questions related to ethnicity, gender, disability, age and other characteristics when applying for a position. We collect this information to ensure we are maintaining an inclusive and diverse workforce. Any personal data we process here we do so by obtaining your consent. Any special category data we process is done based on your explicit consent. The data you provide will be linked to your personal data via a unique ID. This data is processed by third-party processors Salesforce and FormAssembly. Due to the sensitive nature of this data, we have strict access controls in place to ensure access is limited to those responsible for equality and diversity monitoring. This information is not seen by staff involved in recruitment and selection for those positions.

For more information, please see the SmartRecruiters, Salesforce and FormAssembly privacy notices as appropriate.

Cookies

What are cookies?

Cookies are small text files which are transferred to your computer or mobile when you visit a website or app.

What do we use cookies for?

We use cookies to:

  • make our website work as you’d expect
  • improve the speed/security of the site
  • understanding how people are using our services, so we can make them better

Which cookies do we use?

Strictly necessary cookies

These are cookies which are essential to the functioning of the website (like your consent preferences for cookies) and cannot be switched off.

NamePurposeExpires
_iub_cs-A cookie set by iubenda to record cookie consent preferences.1 year

Cookies that measure website use

We use these cookies to understand how our site is used so we can improve the experience

NamePurposeExpires
_gaUsed to identify unique users in Google Analytics.2 years
_gat_UAUsed by Google Analytics to throttle the request rate to their servers.1 minute
_gidUsed to identify unique users in Google Analytics.24 hours
_hjAbsoluteSessionInProgressSet by Hotjar to detect the first pageview session of a user. This is a True/False flag set by the cookie.30 minutes
_hjidHotjar cookie that is set when the customer first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behaviour in subsequent visits to the same site will be attributed to the same user ID.1 year
_hjIncludedInPageviewSampleThis cookie is set to let Hotjar know whether that visitor is included in the data sampling defined by your site's pageview limit.30 minutes
_hjIncludedInSessionSampleThis cookie is set to let Hotjar know whether that visitor is included in the data sampling defined by your site's daily session limit.30 minutes

You can manage your cookie settings for our website by clicking the cookie button on the footer of any page on our website.

Where Lighthouse processes your personal data through cookies we do so based on your freely given, specific, informed and unambiguous consent.

Use of data processors

Data processors are third parties who provide elements of our recruitment service (SmartRecruiters, Salesforce or FormAssembly), marketing automation platform (Mailchimp) and client relationship management platform (Salesforce or FormAssembly). We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. This will hold it and retain it for the period we instruct.

Disclosures and Data Sharing

We may disclose information about you to any of our employees, officers, agents, suppliers or data processors insofar as reasonably necessary for the purposes as set out in this privacy policy.

In addition, we may disclose information about you:

  • to the extent that we are required to do so by law
  • in connection with any legal proceedings or prospective legal proceedings
  • in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).


Except as provided in this privacy policy, we will not provide your information to third parties without your consent.

Security of your personal data

We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

We will store all the personal information you provide on our secure, encrypted password and firewall protected servers. As data transmission over the internet is inherently insecure, we cannot guarantee the security of data sent over the internet.

Where information is held on our behalf by data processors, we will ensure, to the best of our ability, that they hold your information securely and in line with data protection legislation. We hold contracts with all data processors to make sure that they cannot do anything with your data unless we have instructed them to do so.

Policy amendments

We may update this privacy policy from time-to-time. Check this page occasionally to ensure you are happy with any changes. This privacy policy was last updated in March 2021.

Your rights

Please contact us if you have any queries regarding this Privacy Policy or if you would like to exercise or query any of the following rights afforded to you under the General Data Protection Regulation (GDPR):

  • right to access
  • right to erasure
  • right to object
  • right to rectification
  • right to be informed
  • right to restrict processing
  • right to data portability
  • rights in relation to automated decision making and profiling
  • right to lodge a complaint with the Information Commissioners Office (ICO) – https://ico.org.uk/concerns 0303 123 1113


For further information on your rights, please visit the website below:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

Contact

If you have any questions about this privacy policy or of our treatment of your personal data, email info@lighthousechildrenshomes.org.uk or write to:

Data Protection Officer
Lighthouse Children’s Home
27 Pear Tree Street
London
EC1V 3AG