Lyca Gnanam Foundation Privacy Policy

1. INTRODUCTION

Lyca Gnanam Foundation respects your privacy and is committed to protecting your personal data. This privacy policy aims to inform you about:

• how we use your personal data you may provide us, while you enquire, register, or use any our services including accessing contents of this website, signing up to our communications or taking part in our surveys or competitions.
• the legal principles and lawful basis in which we process your data and
• your rights regarding your personal data.

This privacy policy is provided in a layered format for your convenience of choosing the specific areas you are particularly interested in.

2. ABOUT US

We, Lyca Gnanam Foundation, operate in the UK with our registered office at 3^rd Floor, Walbrook Building, 195 Marsh Wall, London E14 9SG. The Gnanam Foundation was established in December 2010 with the aim to provide help for marginalised communities around the world. The help results in empowering lives, fostering compassion, and addressing global challenges to create positive, lasting change. Lyca Gnanam Foundation is registered in the UK in the Charity Commission with registration number 1160782.

When we say, “we”, “us” or “our” in this policy, we are referring to Lyca group of companies responsible for processing your data.

3. WHAT DATA DO WE COLLECT ABOUT YOU?

Personal Data is any information about you from which you can be identified. However, it does not include data where your identity has been removed (it’s called anonymised data).

We may collect, use, store and transfer different kinds of personal data which may be categorised as below:

• Identity Data include your full name, date of birth, gender, language.
• Contact Data include your correspondence address, email address, contact number.
• Technical Data include internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform you use to access our website.
• Usage Data include information about how you use our website, which include traffic data and location data.
• Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
• Customer Care Data includes your feedback to us, survey responses and voice mail recordings when you contact us.

We process your personal data to derive information. Such information does not directly or indirectly reveal your identity. However, if we combine or connect the derived information with your personal data, it may directly or indirectly identify you. So, we also treat the derived information as personal data which will be used in accordance with this privacy policy.

4. HOW DO WE COLLECT YOUR PERSONAL DATA?

We obtain your personal data, directly and indirectly, when you:

• Interact with us when you provide your personal data by filling in forms on our website or by corresponding with us by post, phone, email or otherwise.

• Subscribe to our services or communications;
• Request marketing to be sent to you;
• Access our website, using cookies. Please see our cookie policy for further details.

5. HOW DO WE USE YOUR PERSONAL DATA LAWFULLY?

We use your personal data complying to all data protection laws and regulations, most commonly, in circumstances where:

• we need to perform services under the agreed terms and conditions with you.
• it is necessary for our legitimate interests in course of Lyca Gnanam Foundation
• we need to comply with a legal or regulatory obligation.

We have set out below, a description of all the ways and the lawful basis we use your personal data. In addition to your consent, legal, and regulatory purposes, we have also listed our legitimate interests including performance management, market research where applicable, which may override your rights subject to the law.

MARKETING

You will receive marketing communications from us if you have consented to receive them from Lyca Gnanam Foundation, and you have the option to opt out of receiving that marketing. Every communication either through email or text shall provide you with an option to opt-out/unsubscribe from such communications.

6. HOW CAN YOU MANAGE YOUR MARKETING PREFERENCES?

You can also Contact our Customer Services Department to let us know your marketing preferences and whether you’re happy to hear from us by email, text, or telephone.

• You can also dial 0207 132 0322 from network or +44 207 132 0322 from abroad. Call charges may vary depending upon network operators.
• Alternatively, you can also email to complicance@lycagf.org

7. TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?

We may have to share your personal data with the parties set out below for the purposes set out:

• Other Lyca group companies and associated enterprises who provide ancillary services such as IT Services, Customer Service support for the fulfilment of your orders and clarification of any of your queries.
• Other Lyca Group companies where you have chosen to receive marketing communications from them on Lyca products and services other than Lyca Gnanam Foundation.
• External third parties who provide IT technical support services, data centre services and call centre support.
• Regulators and judicial authorities who require reporting of processing activities in certain circumstances.

In case we choose to sell, transfer or merge parts of our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

Where applicable, we require all external third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

8. WHERE IS YOUR DATA TRANSFERRED TO?

We transfer personal data to some of our service providers who are based outside the European Economic Area (EEA). Specifically, Lyca Gnanam Foundation uses a technical services provider based in India and Customer Service providers based in Morocco and Philippines. This constitutes processing of your personal data outside the EEA.

Whenever we transfer your personal data out of the EEA, we ensure that a high degree of protection is afforded to it by following various safeguard measures so that there is no detriment to you.

We take steps to ensure your privacy rights are at least as compliant with the requirements of EU law, including requiring appropriate security measures from such third parties, set out in a contract between us, to protect your personal data.

We use specific clauses, prescribed by Data Regulations including EU and UK GDPR, in the contracts with our service providers which give personal data the same protection it has in Europe.

9. HOW SECURE DO WE KEEP YOUR PERSONAL DATA?

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those staff members or other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a strict duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable supervisory authority of a breach where we are legally required to do so.

10. HOW LONG DO WE RETAIN YOUR PERSONAL DATA FOR?

We retain your personal data only for the period it is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal and regulatory requirements.

Retention period for different category of your personal data varies and are subject to applicable laws and regulatory requirements, which are tabulated in our Data Retention Policy which you can request from us by Contacting our Customer Services Department.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case, we may use this information indefinitely without further notice to you.

11. WHAT ARE YOUR PRIVACY RIGHTS?

Subject to certain conditions under data protection laws where applicable, you have the following rights in relation to your personal data:

• Right to obtain information about your processed data and right to have access to your personal data.
• Right to correct your personal data – This enables you to correct any incomplete or inaccurate data we hold about you, though we may need to verify the accuracy of the new data you provide to us.
• Right to ask us to delete your personal data.
• Right to object to the processing of your personal data.
• Right to ask us to suspend the processing of your personal data.
• Right to transfer your personal data -This enables you to ask us to transfer your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.

Note, however, that this right only applies to automated information for which you initially provided consent to be used to perform a contract with you.

• Right to revoke your consent to the processing of your personal data.
• Right to inform us of your wishes regarding the storage, deletion and communication of your personal data to a third party upon your death.

To exercise any of the rights set out above, please send your request to complicance@lycagf.org and we shall respond, in accordance with the regulations, within the stipulated timeframe.

You may also reach out to our Compliance Officer if you have any issues in enforcing your rights at complicance@lycagf.org or writing to the following address,

Compliance Officer,
Lyca Gnanam Foundation,
2nd Floor, Walbrook Building,
195 Marsh Wall,
E14 9SG London.

We would, however, appreciate the chance to deal with your concerns first before you approach the supervisory authority, so please do contact us in the first instance.

Cost for Data Access

You are normally not required to pay any fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if we find your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information, if required, in relation to your request to expedite our response.

Time limit to respond.

According to GDPR, all legitimate requests are required to be completed within one month, before which we shall complete the request. However, if your request is particularly complex or you have made several requests it may exceed the said period. In this case, we shall notify you and keep you updated.

12. HOW TO CONTACT US?

You can reach out through our Customer Services Department on +44 207 132 0322 from another telephone.

You may also e-mail the Compliance Officer at complicance@lycagf.org or by completing the online enquiry form at https://www.lycagf.org

For compliance, enforcement and questions in relation to this policy, we have a appointed a Compliance Officer who may be reached at complicance@lycagf.org or writing to the following address:

Compliance Officer,
Lyca Gnanam Foundation
2nd Floor, Walbrook Building,
195 Marsh Wall,
E14 9SG London.

13. CHILDREN’S PRIVACY:

Our website, app and services are not aimed at children. We do not target, intend to collect, or knowingly collect or otherwise process information from any Child.

If you are under the age of 13, we request that you do not provide us with your information and do not use our website and app.

If you are a parent or guardian of a child under 13, please contact us if you are aware that your child has used our website or app or otherwise provided their information to us without your consent.

We shall delete or otherwise cease processing your child’s personal information within a reasonable time to make sure that we do not contact you in the future.