1. Who we are and what this Privacy Policy covers relating to your Personal Data

Skcin; The Karen Clifford Skin Cancer Charity operates the following websites to which this privacy policy applies:

• http://skcin.org
• https://sunsafeschools.co.uk
• https://sunsafenurseries.co.uk
• https://sunsafeworkplaces.co.uk
• https://masced.uk
• https://pro.masced.uk
• https://shop.skcin.org
• https://ispymelanoma.uk

This privacy notice describes what personal data we collect about you when you use our website(s), take part in one of our accreditation programmes or associated training and if relevant, purchase products. Personal data is any information that could be used to identify you as a living individual. We do not and will not sell your personal data to any other third parties. This privacy notice also describes how we process (i.e. handle) your personal data, the basis upon which we process it, with whom it is shared, how it is stored and certain other important information relating to the protection of your personal data. The following policy explains all of this in some detail, but we have also summarised the key points below. Please read this privacy policy carefully as it contains important information.

In summary:

• What personal data we collect about you? We may request that you provide us with some of your personal information such as your name, address, email address, phone number and details regarding your business / profession in order to provide you with online and / or posted resources and/or by registering to take part in one of our accreditation programmes or training. In addition, you may consent to us sending you related marketing material.
• How we collected it and from whom? We collect data from you when you submit a request to us for assistance / information or take part in one of our accreditation programmes or associated training. This is collected from our website and from any phone calls or email correspondence you make to us.
• What do we use your personal data for? We use your personal data in order to provide online support and provide digital or posted resources as part of our accreditations or associated training, or when you enquire about our services. If consent is given on our website, we will also use your personal data (such as email address) to send you related news and information.
• What is our lawful basis for using your personal data? When you register to take part in one of our accreditation programmes or associated training, we have a Legitimate Interest in providing you with personalised online content and specific digital or printed resources to allow you to complete the accreditation or associated training and communicating with you to renew your accreditation annually. We also need to keep a record of who has registered and their progress made through the accreditation or training process for the purpose of reporting, assisting users, reviewing and granting accreditations and providing evidence of completion.
• Do we need your consent to the use of your personal data? In certain circumstances this may be necessary. In those circumstances, you will be fully informed about why your data is being used and your consent requested. Your right to withdraw your consent will be explained.
• Do we share your personal data? We may use third parties to process your data for the sole purpose of providing the online and/or posted accreditation resources. We do not allow third parties to use your personal data for their own purposes, we only permit them to process your personal data for our specified purposes. These include printers and couriers for posted resources and web hosting providers for online content but may include other, carefully selected partners.
• For how long do we retain your personal data? We will need to keep most of your personal data for as long as you are registered with any of our accreditations. We will only keep your personal data for as long as we need to in order to maintain your account, accreditation status or until you request we delete it. We may store aggregated data for statistical purposes. (See below).
• What rights do you have in relation to your personal data? Your rights are explained below in more detail but, among other things, you have the right to request that we provide you with a copy of all of the personal data that we hold about you and you also have the right to be forgotten.
• How do we make sure your personal data is secure? Once we have any of your personal data we will use strict procedures and security features to prevent unauthorised access. Where we require our partners to store your data, this will only be on the basis that they operate stringent security processes.

2. Personal data we collect about you.

The personal data we may ask you to supply as part of registering for our accreditation is as follows:

• Business name or Trading Name
• Your name (first name and last name)
• Job role / employment status
• Your organisation’s area of business
• Contact address, telephone number and email
• Company website

Our external IT providers such as Web Hosting companies may collect data such as your IP address and information about the browser and type of device you use with the legitimate interest in discovering any security concerns with our websites.

Aggregated Data

We also collect, use and share aggregated data with third parties which includes statistical and demographic data for any purpose. Aggregated Data is derived from your personal data. This data is, however, not considered personal data by law as it does not directly, nor indirectly, reveal your identity.

For example, we aggregate anonymised data from registered individuals, businesses / organisations and trainees in order to summarise information and make conclusions based on data-rich findings without the risk of exposing any individual's personal information.
For example this enables us to:

• Monitor and report on the programmes effectiveness
• Identify where improvements can be made
• Identify key trends to influence awareness, messaging, training and marketing strategies

If we combine or connect Aggregated Data with your personal data, it will be used in accordance with this Privacy Policy.

3. How is personal data collected?

We collect personal data from you in a number of different ways:

• you may share information with us in order to register online for one of our accreditations;
• with your consent, you may share other information with us so that you are informed of related news and updates from the charity from time to time via email marketing.
• you may provide us with feedback on our accreditation with permission to publish it;
• we will collect technical and usage data such as IP address, browser type, time zone settings, current location, operating system and information regarding the device(s) you have used to access our website and how you have used our website.

4. How we use your personal data

We use your personal data only when the law allows us to. We most commonly use your personal data in the following circumstances:

• When you register to take part in an accreditation or training and we need to provide personalised online content or posted, printed resources in relation to the accreditation or training.
• Where it is considered necessary for our legitimate interests, or those of a third party, and your interests, as long as your fundamental rights do not override these:
  • where we are required to comply with a legal or regulatory obligation.
  • managing our relationship with you (for example, communications regarding the accreditation or training);
  • send email communications if explicit consent has been provided in order for us to do so;
• For use of data analytics to improve the website, products, services, marketing and user experience.
• Any sensitive data that is collected through training our programmes is used for the sole purpose of providing personalised rationale and advice relating to that service.

When you have given your consent, we may use your personal data to send you related news updates which we think may be of interest to you. If you have decided to opt-out then you will no longer receive this information from us. You will, however, continue to receive transactional emails from us in relation to the accreditation programme you registered for.

Third Parties

We may share your personal data with the following categories of third parties:

• If/where relevant Providers of payment systems that process your payments for products.
• Delivery companies that we use to deliver any printed resources.
• External IT providers such as web hosting companies and database administrators.
• With your consent, agencies whom we have retained to assist us to conduct promotional and marketing activity as well as provide technical assistance and support.

We will also disclose your personal data to third parties:

• If we are under a legal duty to disclose or share your personal data in order to comply with any legal obligation, or any lawful request from any legal or regulatory authority; or
• to respond to any claims, and to establish, exercise or defend our legal rights.

Most third parties with whom we share your personal data are limited (by law and by contract) in their ability to use your personal data for the specific purposes identified by us. These third parties are themselves subject to the General Data Protection Regulations (GDPR). They will be responsible for their own processing of personal data to the extent that processing is subject to, or relates to, those regulations.

We will always ensure that any third parties with whom we share your personal data are subject to privacy and security obligations consistent with this privacy notice and applicable laws.

We will ensure that we get your opt-in consent before we share your personal data with any external third parties that we use for email marketing purposes.

Opting Out

You have the right to ask us or third parties to stop sending you marketing communications at any time. You can do this by opening an email you have received from us and clicking ‘unsubscribe’ which can be found at the bottom of the email. Alternatively you can email us and request that we remove your email address from our database which can take up to 5 working days to complete.

If we wish to use your personal data for any other purpose, we will update this privacy notice and inform you.

5. Your legal rights

Under the General Data Protection Regulations (GDPR), which are designed to protect your personal data, we need to have what is called a lawful basis time we use, share or otherwise process your personal data. When you use our site(s) to register for one our accreditations or training, the processing of your personal data is necessary to allow you to complete the accreditation or training, receive any necessary digital or printed resources and to allow us to provide you with management tools and support.

When we say “legitimate interests”, we mean ours (or a third party's) interests in operating the service as efficiently and securely as possible. For example, we may choose to use a third party to store your personal data; we may do this because our use of that service means that your personal data is more secure.

In order for you to receive the full benefit of our site, such as completing an accreditation or training, or receive marketing communications, we will need your consent to collect and use your personal data. Under these circumstances, we will inform you of how the data you provide will be collected, stored and used before seeking your consent. In addition, you will be informed how to withdraw or modify your consent at any time.

You may withdraw your consent, or object to our processing of your personal data in a certain way (where you have the right to do so), by contacting us at: info@skcin.org

What are your rights in relation to your personal data?

You have certain rights in relation to your personal data; those rights will not necessarily apply in all cases or to all personal data which is processed by us.

For example, certain rights will not apply where we need to process personal data to comply with our legal duties.

You have the right to request that we:

• provide you with a copy of any personal data which we hold about you;
• update any of your personal data which is out of date or incorrect;
• delete any personal data which we hold about you;
• restrict the way that we process your personal data;
• consider any valid objections which you have to our use of your personal data; or
• provide your personal data to a third party provider of services.

We will consider all such requests (including whether they apply in a particular case) and provide our response within the time period stated by applicable law which is 30 days (1 month of receipt).

When you make a request, we will acknowledge your request and we may ask you to provide us with some further information to allow us to confirm your identity.

Changes to our Privacy Policy

We may amend this privacy policy from time to time. Any changes we make to our privacy notice in the future will be notified to you. The date of our most recent changes can be found at the bottom of this policy and will be updated as and when an amend is made. The most recent and up to date policy will be available on our website at all times unless the site is undergoing scheduled maintenance.

This privacy policy was last reviewed on 1st March 2024

Skcin Cookie Policy

Types of Cookies Used

Cookies for Tracking

Google reCAPTHCA

The Google reCAPTCHA service helps prevent malicious and fraudulent activity using forms on our website. The service works by collecting hardware and software information from the application and your device along with usage information, and sending it to Google for analysis. The information collected in connection with this is used by Google for general security services, and improving reCAPTCHA and is not be used for personalised advertising by Google.

The _grecaptcha key is stored in your browser's local storage, for this purpose.

You can find out more about how Google processes your data in the Google Privacy and Terms notice.

Stripe Payment Gateway

Some of our sites use Stripe for processing payments. Two cookies are stored when you submit a payment via a Stripe form:

Essential Cookies

These cookies are essential for the correct functioning of the site which stores them.

Performance Cookies

These cookies are not essential for the correct functioning of the website, although may improve your experience on the site when they are permitted