Data Privacy

Contents

  1. Azure OpenAI Service
  2. Authentication and user account management
  3. Cookies and analytics
  4. Data sharing with third parties
  5. Your Rights
  6. Access to your data
  7. Our basis for processing data
  8. Reviewing
  9. How to contact us

Your information: how we collect it, store it, protect it, and when we share it.

We take your privacy very seriously. We value your privacy and are committed to protecting your personal information. This document explains how we handle your data and when it is shared with third parties.

Azure OpenAI Service

We use Azure OpenAI Service to provide the AI-driven functionality in our application.

What does Azure OpenAI process?

Your prompts (inputs) and completions (outputs). They are:

The Azure OpenAI Service is operated by Microsoft as an Azure service; Microsoft hosts the OpenAI models in Microsoft's Azure environment and the Service does NOT interact with any services operated by OpenAI (e.g., ChatGPT, or the OpenAI API).

For details, visit Microsoft’s Data, privacy, and security for Azure OpenAI Service.

Authentication and user account management

We use Clerk as our authentication service provider to manage user accounts and authentication processes securely. Clerk enables us to verify your identity, manage your login credentials, and facilitate secure access to our application.

Why do we use Clerk?

What information does Clerk collect?

For more details about how Clerk handles your data, please refer to Clerk's Data Processing Agreement.

Cookies and analytics

We use Google Analytics to understand how visitors use our application and improve its functionality.

What information does Google Analytics collect?

This information is stored and processed on servers in the United States. Google may share it with third parties only if required by law or if those third parties process data on Google’s behalf.

How to manage cookies

You can block cookies by adjusting your browser settings. For guidance, visit aboutcookies.org.uk. Note that blocking cookies may affect functionality.

Data sharing with third parties

We do not sell your personal information. Your data may be shared with third-party service providers (e.g., Clerk, Azure OpenAI, and Google Analytics) solely to enable our application’s functionality and usage understanding.

Your Rights

Under Data Protection legislation, you have rights as an individual about how we use your information.

You can read more about these rights here – ICO Rights.

Access to your data

You have the right to see what data we hold about you. If you want to do this then contact us – details are below. We’ll provide this information in line with GDPR requirements.

If you tell us that the data we hold on you isn’t correct, we’ll take steps to address this as soon as we can practically do so.

Our basis for processing data

Under GDPR we must tell you what lawful basis we rely on for processing data. We rely on legitimate interests for processing all our data. Where we process special category data we rely on explicit consent. This means that if we are asking you to give us information on your health, ethnic origin or other sensitive data then we will check that you agree to us processing your data and we’ll tell you what we will be using it for.

Reviewing

This privacy notice was last updated in MONTH YEAR.

How to contact us

If you would like more information you can call 0131 225 0630, email hello@volunteeredinburgh.org.uk or write to Volunteer Edinburgh, 222 Leith Walk, Edinburgh, EH6 5EQ.