Privacy and Cookies
This site is dedicated to allowing young people (or parents, guardians or case workers on their behalf), interested charity partners and teachers, tutors or members of staff at educational establishments to register their details for programmes or projects run by The Challenge Network.
This policy sets out the basis on which any personal information we collect from you, or that you provide to us, through this website or otherwise in relation to our programmes will be processed by us. Please read the policy carefully to understand our practices regarding your personal information and how we will treat it. By visiting and continuing to use this website you are consenting to the practices described in this policy. If you express interest in a programme as a parent or guardian of a young person you are giving this consent on behalf of the young person as well as in your own right and you should give the information in this policy to the young person. If you express interest an interest in a programme as a case worker for a young person you must first obtain the young person’s consent to our storage, sharing and use of their personal information as described in this policy.
For the purposes of data protection law, the data controller in respect of personal information collected through this website, or that we otherwise collect in relation to our programmes, is The Challenge Network. We may share the information with other persons as described below.
Although the Challenge Network operates this website and runs the National Citizen Service programme in some regions, it does so under agreement from the NCS Trust C.I.C.
The statement below sets out the NCS Trust CIC’s privacy statement about personal data it collects itself of through the actions of the National Citizen Service but then clarifies one situation where The Challenge Network may ask consent to collect data for their own use.
What is the NCS Trust CIC?
NCS Trust CIC is more than just a charity running youth programme. Yes, we do run a three phase social action programme for 15 to 17 year olds, but in doing so we strive to build bridges across social divides and ladders to opportunity. We bring young people together in common purpose to change their perspectives and lives for good. As a consequence, we are very protective of our young people and staff delivering these opportunities, but also the information about each person connected with NCS.
How we collect and use (process) your personal data
NCS collects personal data about young people and delivery staff, amongst others (including via this website and during participation on the National Citizen Service Programme). We need this information to manage the programme and ensure it is carried out in a safe manner. To do this, NCS collects two types of personal data:
1) Personally identifiable information (PII) – data which can be used to identify and contact a ‘living individual’ connected to programme e.g. name, address and email address.
2) Special category information – personal data that pertains to, but is not limited to, medical, racial or sexual and political life detail, and biometric data such as facial images and voice recordings. This enables us to keep young people safe and healthy, and allows us to support our mission in respect of social cohesion and mobility.
We do not sell personal information to any organisations. We only share data with third parties who are facilitating or enabling the delivery of NCS services.
Purposes for processing your data
NCS processes your data legitimately to provide you with the goods or services you have requested or purchased from us. We also use this information to refine our goods and services to better tailor them to your needs and to communicate with you about other services NCS offer e.g. post-programme opportunities.
Personal data you give to us:
When young people express an interest in, or sign up for programme, NCS collect information including (but not limited to) name, address email address, personal mailing address, and mobile phone number. We process personal data to deliver programme benefits to young people, and to inform them of NCS events and other benefits or opportunities associated with the NCS experience. NCS may also use this information to help understand those attending programme’s needs and interests to better tailor products and services to the individual.
NCS runs many programme and post-programme events (for example, graduate extension opportunities and regional youth boards) throughout the year. If you express an interest in attending one of these events, NCS will access the information in your contact details to provide you with information and services associated with the event.
If you are an external participant at these events, NCS will collect information about you including your name, employer’s name, contact information, and your photograph. We may also collect information provided by event attendees who evaluated your performance as an external participant.
NCS conduct surveys with young people to produce original research on the effects of the programme on attendees, and society in general. Participation in surveys is voluntary, if you have not been asked, you have not taken part. Although responses to the surveys have names removed, it is anonymous, we still keep this data secure as all other information.
NCS also publish case studies of young people with a particularly interesting story through, or as a consequence of, attending programme. Participation in case studies is voluntary and consent is sought at the start of any of these conversations and before publication. Young people have the ability to withdraw from this activity at any time.
Payment card information
The purchase of goods or services from NCS using a payment card is typically carried out with the parents or guardians of those attending programme. Payment card information is provided directly by users, via the NCS website or over the phone to our customer contact agents. NCS does not, itself, process or store the card information, it is entered into the appropriate system as instructed and then deleted or destroyed.
We strongly encourage all NCS contacts not to submit payment information by email.
NCS will contact you directly if you have expressed an interest in attending programme, or any of our other post-programme events. This can be via telephone, text, email or social media.
From time to time, NCS may also contact you directly with news and opportunities on continuing your NCS journey, and benefits that may become available through our partners. To view a full list of NCS Partners, visit this NCS page. If you have any questions around this list, please contact us at firstname.lastname@example.org.
At all times, you have the right to not receive any of these communications from NCS.
If this is the case please phone our contact centre (0800 197 8010) who will help you select which communications you do not want – email, telephone, text or social media.
When you contact NCS, we will use the information you give us within the communication only for the purposes you describe. That can be:
● to respond to questions or inquiries;
● to notify you of NCS conferences, publications, or other services;
● or to keep a record of any complaints, data protection requests and similar matters.
We will treat this data in the most secure and safe manner we can.
For the specific requests below, please email NCS at email@example.com:
● for NCS to stop communicating with you completely;
● to stop processing your data or;
● to “erase” your personal information.
Note: if you ask NCS not to contact you by email at a certain email address, NCS will retain a copy of that email address on record only in order to comply with your no-contact request.
When and how we share information with others
We will only share data with those organisations we absolutely have to, i.e. those that enable the services we offer – NCS programme, post-programme opportunities etc. This may include NCS contractors and their subcontractors, government bodies, fraud detection organisations, strategic partners of NCS (including any organisation running or supporting all or part of NCS in the future).
The personal information collected from you is stored appropriately in one or more databases hosted by third parties (databases) located in the European Economic Area (EEA), or in locations, and with companies, where a formal agreement of ‘adequacy’ is in place – i.e. a supervising authority has judged controls to be sufficiently strong to protect personal data. These third parties do not use or have access to your personal information for any purpose other than enabling NCS to achieve the goals of social cohesion, mobility and engagement, and to make the NCS programme as efficient as possible.
This includes our distribution partners who are responsible for running programme and delivering the NCS service to young people. They will not share your data outside of the agreement made with NCS, or without first seeking the approval of NCS (e.g. the young person decides to change the geographic location, and therefore third party (partner) providing NCS programme).
We do not otherwise reveal your personal data to third parties for their independent use unless:
● you request or authorise it;
● the information is provided to comply with the law (for example, to comply with a search warrant or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others;
● the information is provided to our agents, vendors or service providers who perform functions on our behalf;
● to address emergencies or acts of God;
● or to address disputes, claims, or to persons demonstrating legal authority to act on your behalf.
NCS may also gather aggregated data about young people and web site visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, and/or other third parties for marketing or promotional purposes.
Data subject rights
The European Union’s General Data Protection Regulation and other countries’ privacy laws provide certain rights for data subjects. A good explanation of the rules for the UK is available on the website of the Information Commissioner’s Office.
If you wish to confirm that NCS is processing your personal data, or to have access to the personal data NCS may have about you, please contact us at firstname.lastname@example.org
You may also request the following information about your personal data and NCS:
● why we process your personal data;
● the categories of personal data concerned;
● who else outside NCS might have received your personal data from us;
● what was the source of your personal data was if you didn’t provide it directly to NCS;
● and how long it will be stored.
Additional rights you have as the data subject or owner of your personal data:
● you have a right to correct (rectify) the record of your personal data maintained by NCS if it is inaccurate;
● you may request that NCS erase that data or cease processing it, subject to certain exceptions;
● you may also request that NCS cease using your data for direct marketing purposes;
● when technically feasible, NCS will – at your request – provide your personal data to you or transmit it directly to another controller. If access cannot be provided within a reasonable time frame, NCS will provide you with a date when the information will be provided. If for some reason access is denied, NCS will provide an explanation as to why access has been denied.
Security of your information
To help protect the privacy of data and PII you transmit through use of this site, we maintain physical, technical and administrative safeguards. We update and test our security technology on an ongoing basis. We restrict access to your personal data to only those employees who need to know that information to provide services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees’ responsibilities towards your privacy.
Data storage and retention
Your personal data is stored by NCS on the servers of organisations engaged specifically for that purpose, i.e. secure cloud-based storage of data; these are located in the EEA. NCS retains data for the duration of the young person’s, or other stakeholders, relationship with NCS.
For more information on where and how long your personal data is stored, or for any of the other rights you have, please contact the NCS data protection officer at email@example.com
By using this website, you agree to the terms and conditions contained in this Privacy Notice and Conditions of Use and/or any other agreement that we might have with you. If you do not agree to any of these terms and conditions, you should not use this website or any NCS services. You agree that any dispute over privacy or the terms contained in this Privacy Notice and Conditions of Use, or any other agreement we have with you, will be governed by the laws of the United Kingdom (UK). You also agree to arbitrate such disputes in the UK, and to abide by any limitation on damages contained in any agreement we may have with you.
Data Protection Officer
NCS is headquartered in London, in the United Kingdom (UK). NCS has appointed an internal data protection officer for you to contact if you have any questions or concerns about NCS personal data policies or practices. Their name and contact information are as follows:
The Pembroke Building
London W14 8DG
Phone: +44(0)7757 682679
Will The Challenge Network process personal data differently?
The only situation in which The Challenge might collect personal data under this website for its own use and not on behalf of the NCS Trust is if it explicitly asks for your consent. For example, it might ask for your consent to:
- send you surveys related to its own charitable social integration objectives; or
- send you opportunities to attend other volunteering opportunities, programmes we operate, events and competitions after your completion of the NCS programme.
Equally, it might ask for your explicit consent for other actions such as:
- using your photos, videos or voice recordings in future marketing and publicity;
- automatically assessing the appropriate level of support you need;
- seeking safeguarding welfare and behavioural information about you from professionals involved in your well-being.
In such cases, it will hold your data on equivalent terms to those set out here by the NCS Trust CIC, except that the Challenge Network Data protection Officer can be contacted to discuss retention periods, withdraw consent (if relevant) or any other matter at:
The Challenge Network
39 York Road
Last updated 18/05/18
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
We use the following cookies:
- Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.
- Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
How Cookies are used on Our Site
We use a tool called Google Analytics to collect information about how you use Our Site. We do this to measure performance of Our Site, for example to find out the most visited pages of Our Site, and the most frequently asked questions, but also to help make sure the site is meeting the needs of its visitors and to help us make improvements.
Google Analytics stores information including but not limited to:
- the pages you visit on our website;
- the link you clicked on (or other way) to come to our website;
- the amount of time you spend on each page of our website; and
- what you click on while you’re visiting the site.
A cookie is logged on your computer the first time you visit Our Site.
You can find more information about the individual cookies we use and the purposes for which we use them in the list below:
- __utmc – End of browser session – Not used in ga.js. Set for interoperability with urchin.js. Historically, this cookie operated in conjunction with the __utmb cookie to determine whether the user was in a new session/visit.
- _ga – 2 years – Used to distinguish users.
- _gat – 10 minutes – Used to throttle request rate.
- VISITOR_INFO1_LIVE – Allows Youtube to count the views of embedded Youtube videos.
- PREF – Used to remember your preferences/settings such as language, preferred resolution size.
- NID – Used to remember your selections or preferences that you’ve already made when looking at information or using a service.
- _NCSPop – 14 days – Used to make sure users only see the announcement block the first time they visit.
Changing your cookie preference
Most web browsers allow some control of most cookies through the browser settings.
You can block cookies by activating the settings on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of Our Site.