1. Our commitment to your privacy
At ISAAC International, we are committed to protecting and respecting your privacy. We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.
This policy explains when and why we collect personal information about people who come into contact with ISAAC International, including those who receive information emails from us or use our website. This policy tells you how we may process this information, the conditions under which we may disclose it to others and how we keep it secure. We may change this policy from time to time so please check our website for the most up to date version. By using our website, you’re agreeing to the terms of this Policy. Any questions regarding this Policy and our privacy practices should be sent by email to firstname.lastname@example.org.
2. Who are ISAAC International?
ISAAC International (ISAAC) is an international membership network of Christians working in Addictions and/or Recovery. ISAAC is established as a legal entity in the UK as: a company, limited by guarantee, Registration Number 3934238; and a charity, Registration Number 1081548. These combine to make ISAAC a Charitable Company, Limited by Guarantee.
As such we are led by a Board of Trustees who are based in the UK and an International Steering Group (ISG) with Members from across the world.
ISAAC has Members in more than 70 countries across the world. Membership is free.
3. What data do we hold?
If you are a Member, we hold your membership application form and the details you provided within it at the time of membership. Please note, membership forms change over time so the details we hold for one Member may vary from what we hold for another.
If you receive our regular mailings but are not a Member we will have your email address and your name and in some cases your region. We use MailChimp for our email communications and you can manage your preferences and the details we hold for you at any time by clicking the ‘Manage Preferences’ link on the footer of any email. We want to ensure that you have full control and visibility of any details we may hold for you.
4. What do we use your data for?
In line with ISAAC’s aims and objectives, we will use your data to provide opportunities to connect, encourage and equip other ISAAC Members and Contacts. We will tell you about relevant events that are happening in your region. If you have previously attended an event and have chosen to hear about our future events we will let you know of these as and when they arise. If you are a prayer or financial Supporter you will receive updates on our work, prayer requests and opportunities to contribute financially to our activities.
We will use the analytics that MailChimp provides us to understand your preferences better. In order that we do not send you multiple emails that are not relevant to you we will use the information from your Membership form and your indicated preferences to ensure that you will only receive the most relevant information.
Our UK Members and contacts will receive UK specific news on regional meetings. Our Russian speaking members will receive emails in Russian.
5. Basis for processing your data
In most cases, the legal basis for processing your data will be your consent. However, in some cases it may be that our legitimate interest will be the reason we process your data; or it may be that we process your data to fulfil the terms of a contract you have entered into with ISAAC. If we process your data based on our legitimate interest, we will ensure that we have balance tested the processing with your best interests in mind.
Please note that there are two conditions for ISAAC membership – that you (in case of Individual Membership) or your organisation (in the case of Organisational Membership) are Christian, and are involved in Addiction or Recovery work in some way. When you apply for membership, we ask you to read and agree to our Statement of Faith. We process this information on the basis of Article 9 (2) (d) in the GDPR.
6. Who has access to the data?
Depending on the sensitivity of your data we have different levels of control in place to ensure that your data is safe. Those who work for ISAAC International may have access to your contact details if you are a Member, Contact or Supporter.
In some cases, volunteers carry out processing activities for us. In such cases we have Third Party Agreements in place and all reasonable precautions are in place to ensure the security of your data.
7. How and where we hold the data?
We hold new applicant data on Google Drive. We hold current Contact, Member and Supporter data on our MailChimp database account. MailChimp removes low engagement contacts from our mailing list. Successful membership applications details are stored securely locally on ISAAC International computers and password protected. Unsuccessful membership applications that are more than two years old are deleted.
If you have opted not to have your membership certificate posted to you, we will store it in a locked filing cabinet if you choose to request it at a later date.
8. What if I wish my data to be removed?
If you submit a written request to remove all your data to email@example.com, we will strive to comply with this request as soon as possible. You can also unsubscribe from our mailing list by using the unsubscribe button in the footer of any of our newsletters to you.
9. Third Party Service Providers working on our behalf.
As ISAAC is a membership organisation wherein our members offer mutual support and services to one another, there are cases where a volunteer fulfils some of our processing needs. Where this is the case, we ensure that we have a Third Party Agreement in place which will detail appropriate use of data as well as storage timeframes and locations. This agreement will reflect our high expectations that your data is kept safe and never passed on or sold to an external party for marketing.
10. Links to other websites
11. Transferring your information outside of Europe
As part of the services offered to you, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.
If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.
12. Review of this Policy
We keep this Policy under regular review. This Policy was last updated in December 2020.