Privacy Policy

1. Who we are:

Liluye is a 501(c)(3) charitable organization. Our office address is: 4764 East Sunrise Drive, Unit #417, Tucson, AZ 85718

The Liluye website address is: www.liluye.org.

New legislation under the General Data Protection Regulations, (“GDPR”), sets out requirements on us in relation to your personal data, as well as providing you with rights in relation to your personal data.

This Privacy Policy, as required under GDPR, sets out how and why we, Liluye, collect, store, process and share your personal data. We shall always be open and transparent with you about what we do with your personal data.

This Policy also informs you about your rights are in relation to the personal data you give to us.

If you have any questions about this Privacy Policy or your rights under it, please contact us by post at the above address or by email on info@liluye.org.

2. What personal data we collect and why we collect it:

Liluye uses personal data (which includes but is not limited to, name, address, telephone contact number, email address) for the purposes of managing Liluye, its suppliers, its  finances, running and marketing events at Liluye, staff employment and its fundraising activities.

The lawful reason for processing data in this way is “contract” for the purposes of managing the hall, its suppliers, its finances, running and marketing events at the hall and staff employment.

The lawful reason for processing data for fundraising activities is “legitimate interest”.

We won’t use your information for any other purposes unless we are required to do so by law.

We do not obtain, use, store or share personal data, that would be Sensitive Personal Data as defined by GDPR.

3. Comments:

Our website does not support user comments, (e.g. a blog), that can be made directly by the general public.

4. Cookies:

No cookies are set for website users, and if any are implemented they will only be used for tracking usage of the website and no personal information will be used. Cookies are only used to track administrators, when they are logged in, and any specific settings they use.

5. Media:

If you provide images for use on the website, you should avoid providing images with embedded meta data (e.g. EXIF GPS, or IPTC caption or keywords) which might provide personal information. Visitors to the website can download and extract any such data from images on the website.

6. Embedded content from other websites:

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

7. Who we share your data with:

We may share your personal information, where this required for Liluye to perform its activities with:

i. our IT service and infrastructure providers that we use as part of our IT storage solutions

ii. any other third-party entities who perform functions on our behalf and who also provide services to us

iii. any other third parties as required by law, such as HMRC or for the purposes of crime (including fraud), to prevent or investigate breaches of, or to enforce, our Terms, to respond to or investigate security vulnerabilities, or to respond to emergencies, and to protect the rights of third parties.

Any third parties with which we share your personal information have entered into a legally binding data sharing agreement with us and comply with similar and no less stringent undertakings of privacy and confidentiality to those set out in this Privacy Policy.

8. How long we retain your data:

Data collected for the purposes of managing Liluye, its suppliers, its finances, staff employment and its fundraising activities, may be retained for up to 7 years for accounts purposes and for longer where required by Liluye’s insurers. If you would like to find out more about how we use your personal data or want to see a copy of information about you that we hold, please contact info@liluye.org.

9. What rights you have over your data:

The right to be informed:

You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Privacy Policy.

The right of access:

You have the right to obtain access to your information (if we’re processing it), and other certain other information (similar to that provided in this Privacy Policy). This is so you’re aware and can check that we’re using your information in accordance with data protection law.

The right to rectification:

You’re entitled to have your information corrected if it’s inaccurate or incomplete.

The right to erasure:

This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.

The right to restrict processing: 

You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.

The right to data portability:

You have rights to obtain and reuse your personal data for your own purposes across different services, e.g., if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.

The right to object:

You have the right to object to certain types of processing, including processing for direct marketing.

You should make any requests in respect of your personal data in writing to the Secretary. We are required to respond to such requests within one month of receipt, although this can be extended in some circumstances, and will usually provide the information free of charge. We may, however, charge a reasonable fee to cover our administrative costs where providing information for:

i. baseless or excessive/repeated requests

ii. further copies of the same information.

In some circumstances, we may be entitled to refuse to act on the request.

10. Making a complaint:

If you are unhappy with how we’ve handled your information, or you would like to exercise your rights, contact us at info@liluye.org.

11. How will you know if we amend this Privacy Policy?

We may need to make changes to this Privacy Policy at any time. If we make any material change to how we collect, use or share your personal information, we will update this Privacy Policy and inform you of these changes by posting prominent notices of the key changes on our website.

These Terms and Conditions are effective on and after 03/17/2020.

Approved by the Trustees of the Liluye on 03/17/2020.