Why do we collect website users’ information and how do we use it?
At Dorothy House there are lawful bases for the information that we process on those who use our website. This includes, but is not limited to, those who access information, update their contact preferences, book places on our events, make donations and shop for our goods.
One lawful basis for the collection of personal information from website use is that of “contract” so that we can do the following;
- Send engagement packs to those who register for events and activities via the website
- Deliver goods ordered through the Dorothy House website, administered by Shopify
Specifically we ask for your “consent” before we process personal information to help us do the following:
- Send digital newsletters to those who have requested a digital format via the website
We do process some personal data with regards to our website on the lawful basis of “legitimate interest” so that we can do the following:
- Analyse website traffic via Google
Processing information on the basis of legitimate interest means that DH deems it necessary and appropriate to collect this information for reasons that do not require your consent. However, you can object to data processing on this basis. See Your Rights section.
What personal information do we collect about our website users?
Based on the data processing reasons outlined above, the information below may be collected depending on a user’s reasons for accessing the website:
Basic details (e.g. for event registration / buying goods / engagement packs responding to information requests): Name, postal / email address, telephone number.
Other: Details of purchases through Shopify, payment details, IP addresses and cookies.
Where do we store website users’ information and for how long?
If you are buying goods, information collected from your use of our website may be collected and stored by Shopify. Payments are processed via Dublin and this is covered by the EU-US Privacy Shield Framework. This organisation in turn shares back with us the data collected on our behalf, so that we can run our retail services.
Shopify retains all data records for the entirety of Dorothy House’s contractual relationship with Shopify. If you do not wish Shopify to keep your information, please visit: https://www.shopify.com/legal/privacy and specifically point 14. Control over and access to your personal information.
If you are registering for an event or making an online donation, your data is held on a database hosted at Dorothy House. It is used alongside a fundraising and email marketing toolset, which stores and captures on-line events registration and donations for us. Payments are processed via the US and this is covered by the EU-US Privacy Shield Framework.
We retain all donation records for a minimum of 7 years to comply with HMRC and audit requirements. There are important organisational reasons for retaining fundraising donors’ information longer than this, for example legacy records and statistical monitoring. If you do not wish us to keep your information longer than 7 years, please contact us.
We retain all Google analytics website data for 50 months. If you do not wish us to keep your information for this length of time, please see the section on ‘How do I prevent being tracked by Google Analytics?’
A small computer file known as a ‘cookie’ is placed on your computer when you use the Dorothy House website. It means that our system can learn from the content you view what content may be useful to you.
- Store your preference information – the website can then curate more relevant information specifically for you.
- Analyse the website traffic using Google Analytics – this cumulative data ensures our goal of constant development to improve the overall user experience of the website.
- Recognise returning traffic to our website – we may therefore, display relevant content specifically to you or present previously used functionality.
- Identify if you are signed in to the website.
However, please be assured that Cookies do not allow us to access your computer or present any information about you, other than that you choose to share via your search engine browser preferences.
This site uses Google Analytics and so the following cookies are in use:
Cookie Name: _ga Use: This cookie is used by Google Analytics, a third party application (provided by Google) that we use to understand how visitors use our site. You can learn more about this cookie and what Google has to say about it, and others, by logging on to:
You have the right to object to this tracking and to stop it happening.
How do I prevent being tracked by Google Analytics?
If you are uncomfortable with this tracking, you can take the following actions:
Use a tracking-blocker, such as Privacy Badger
- Clear cookies after every browsing session
- Install the Google Analytics opt-out extension
Your rights re. Google Analytics
If you already have GA cookies, they will be updated with the latest information about your visit to the site. As we cannot access any personal data about you ourselves, we are not the Data Controller for your Google Analytics. You would need to contact Google directly for this information.
Sharing personal information about service providers website and users with third parties
Dorothy House will never sell personal data to any third party.
We do share your data with organisations that work on our behalf or supply us with services that require your data in order to deliver these services. Companies that we work with include:
E-Commerce organisations (e.g. Shopify)
Email marketing service: We currently use Mailchimp to manage some of our requested email marketing and crucial information dissemination. Mailchimp stores its data in the US, although it complies with the EU-US Privacy Shield Framework and the Swiss – US Privacy Shield Framework. Mailchimp uses personal data for its own purposes. You can read Mailchimp’s privacy information here: https://mailchimp.com/legal/privacy/ . We are currently in the process of moving to a UK/EU hosted email marketing provider.