Consultation outcome

Privacy statement: social media draft guidance consultation

Updated 18 September 2023

Applies to England and Wales

This privacy notice explains how the Charity Commission for England and Wales (‘the Commission’ / ‘we’) processes your personal data when you respond to our consultation on the draft guidance on charities use of social media.

This notice is supplemented by our main privacy notice which provides further information on how the Commission processes personal data, and sets out your rights in respect of that personal data.

The Commission consults the public as part of its open policy making process. We do this by publishing our consultations on gov.uk. We invite individual responses to be made either by online survey or by email. It is also possible that we will also use meetings to collect responses. For the information you submit, the Commission is the data controller.

1. Personal information we collect when you reply to this consultation

When you reply to this consultation, we ask you for:

• your name
• email address
• details of your connection to the organisation you represent (if applicable)

Your name and email address will not be a mandatory requirement and should only be provided if you are content to do so.

2. Why we ask for this information and what happens if it’s not provided

We collect this personal information because:

• it provides us with some assurance that you’re a real person
• it allows us to respond to your comments e.g. seek any clarification from you
• we may contact you to invite you to discuss further the topic under consultation

We also collect this personal information in order to:

• gather information about the types of individuals and groups participating

If you do not provide this information, we can still take account of your comments but it is helpful to us to know whether you are responding as an individual or on behalf of a charity, a representative group or other organisation.

3. How we will process your personal data

We log the data we receive in the consultation responses in our electronic records system. We may acknowledge your response where that is practical and necessary.

4. Sharing information

We will share your data if we are required to do so by law, for example, by court order or under the Freedom of Information Act (FOIA), or where necessary in order to further our statutory functions and objectives

We may share your data with other organisations which have a direct interest in this consultation: for example, Crown bodies or government departments.

Under FOIA every effort will be made to remove personal data from disclosure where a request is received. We would encourage respondents not to include personal data in the body of a response.

5. How long we keep your data

We will only retain your personal data for as long as:

• it is needed for the purposes of the consultation
• the law requires us to

In general, this means that we will only hold your personal data for a minimum of 1 year and a maximum of 7 years.

6. The legal basis for processing your personal data

The table below sets out the primary legal bases we rely on for processing data we obtain through the forms. However, we may process your data further for a compatible purpose and/or on other legal bases - further information about this is available in our main privacy notice.

Personal Data (Article 6(1) GDPR)
(c) processing is necessary for compliance with a legal obligation to which the controller is subject (e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

7. Your rights

You have several rights under the General Data Protection Regulation (GDPR), including the right to access your data and the right to restrict or object to further processing and the right to complain to the Information Commissioner’s Office (ICO).

You can find out more about your rights as a data subject, and details of how to contact our Data Protection Officer and the ICO, in our main privacy notice.