ACA UK Privacy Notice
Our contact details
The type of personal information we collect
We currently collect and process the following information:
If you’re under 18
If you’re aged under 18, you must get your parent/guardian’s permission before you provide any personal information to us. Please note our website, like our 12-step programme, is intended for use only by those aged 18 and over.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
You have applied to have a meeting listed on the Meetings page of our website or are a contact for a self-supporting ACA meeting
You are acting on behalf of a self-supporting group in some other way (e.g. as a meeting Secretary, Co-secretary or Intergroup Representative)
You are, or are in the process of becoming, an Intergroup serving officer or a member of one of our Intergroup committees
You have visited, registered to use or have agreed to administer our website
You have been provided with an email mailbox for the purpose of conducting your work as an Intergroup serving officer
You have requested to join our Intergroup WhatsApp chat group
You have requested general information about ACA (e.g. by emailing firstname.lastname@example.org)
You have registered/booked a ticket for an event such as a convention or workshop
You have chosen to support our work through making a financial contribution
We also receive personal information indirectly, from the following sources in the following scenarios:
Meetings contacts may pass on personal information (e.g. names, email addresses and telephone numbers) for secondary meeting contacts
Your IP address where this is recorded by third party hosts, applications or software for purposes related to administering our website or email services
Third party payment processors where you have purchased a ticket, for example, or made a donation
We use the information that you have given us in order to:
Undertake our work in carrying the ACA message to the adult child who still suffers
Provide contact details for self-supporting meetings
Administer our email and website systems
Contact you if you are a serving officer or a member of an Intergroup committee
Provide a service (e.g. a convention, workshop or other event)
We may share this information with:
Third party organisations we use for the purposes of recording website statistics and user preferences
Third party organisers (including self-supporting ACA groups), venues or related ticketing agencies (if applicable, e.g. if you have booked a place on a convention or workshop)
Third party payment processors
Law enforcement agencies (only when there is a compelling and lawful reason to do so, e.g. safeguarding)
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. For example, we may ask for your consent to send emails and WhatsApp messages to you as a serving member of our Intergroup community. We also ask users of our website for their consent for our use of optional cookies. You are able to remove your consent at any time. You can do this by contacting email@example.com or firstname.lastname@example.org.
(b) Contract. In certain limited cases, the processing is necessary for a contract we have with you (for example when you use our website or purchase a ticket for an event we have organised directly [this does not include events organised/provided by self supporting groups or other parties]), or because you have asked us to take specific steps before entering into a contract.
c) We have a legal obligation. (Only applies in exceptional circumstances, i.e. when there is a specific, compelling and lawful reason to do so such as safeguarding.)
d) We have a legitimate interest. The processing is necessary for our legitimate interests or the legitimate interests of a third party.
e) It is necessary to help save someone’s life. (Only applies in exceptional circumstances.)
How we store your personal information
We hold your data securely using technical safeguards to ensure that your personal information is secure.
If you use your credit or debit card to donate to us, purchase something or make a booking online, we pass your card details securely to our payment processing partners. We do this in accordance with industry standards and do not store the details on our systems.
However, please be aware that there are always inherent risks in sending information by public networks or using public computers and we cannot 100% guarantee the security of data (including personal information) disclosed or transmitted over public networks
How long will we keep your information?
We will keep your personal information in respect of financial transactions for as long as the law requires us to for tax or accounting purposes (which may be up to six years after a particular transaction).
In respect of other personal information, we will retain it for no longer than necessary for the purposes for which it was collected, taking into account guidance issued by the Information Commissioner’s Office.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at email@example.com if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at firstname.lastname@example.org
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk