This Policy sets out how we, Heptonstall community Assets Limited, collect and process data and your rights regarding how your personal information is used.
All questions regarding this Policy should be sent to at firstname.lastname@example.org
This Policy covers our website and any communications or services that we offer.
We will post any changes and updates to this Policy on this page so please visit this page regularly to make sure you are aware of any updates. We will communicate significant changes in this Policy to you by contacting you through the format to which you have agreed.
This policy was last updated in September 2021.
We will always make clear to you at the time when we collect any personal data the legal basis on which we will process that data. We will process your data on the basis of:
Your explicit consent e.g. when you sign up to a newsletter; or
A contractual relationship e.g. when you buy tickets for an event, or where you are employed or volunteer for us; or
Legitimate interest e.g. responding to enquiries, IT security, fraud prevention, maintaining “do not contact” lists; or
A legal obligation e.g. if we are required to disclose the information to regulatory or government bodies e.g. HMRC, or when required to do so by the courts.
We only collect the data that we need including data that will help us improve and administer our services. We collect two kinds of information:
Information such as IP addresses (the location of the computer on the internet), pages accessed and files downloaded. This helps us to analyse how people use our website. We will not link this to you individually.
Personal information such as your name, the organisation you work for, email and postal address, phone number, job description.You don’t have to disclose this information to browse our site, however you may not be able to access some of our services unless you disclose some or all of this information.
Use of Data
We use your data only to provide the service that you have requested and communicate with you in the way that you have agreed to eg we will specifically ask you to consent to us contacting you by a particular method e.g. email, phone.
We may use third party processors through which we send out our newsletter and process and analyse the data we collect.
We will only share data where we are required to do so by law or with our third party processors. Personal data will not be transferred outside of the UK unless the country or territory that it is transferred to is considered to have adequate protection for the rights and freedoms of data subjects in relation to the processing of data as detailed in the guidance from the Information Commissioner’s Office.
We will never sell or swap your information with other organisations to use for their marketing.
Third party processors
We currently use the following third party processors to help us collect, process and analyse data. Click on the links to view the Privacy Policies of these third party processors
Sendinblue - managing our mailing lists
Three Rings CIC - hosting our volunteer rota system
Where do we store your data?
We have measures in place to prevent the loss, destruction, misuse, alteration, unauthorised disclosure of or access to your personal information. Information we collect can only be accessed by authorised personnel who agree to abide by this policy.
Unfortunately, the transmission of data across the internet is not completely secure and whilst we do our best to protect your information, we cannot guarantee that loss, misuse or alteration of data will not occur whilst data is being transferred.
How long will we keep your data?
We will keep your information only for as long as we need it to provide you with the services and information you have requested from us. This means eg for newsletters we will periodically review the consent that you have given us and ask for re-consent, and for delegates to events we will only hold personal data beyond the event in order to enable us to analyse delegate engagement and to help us improve future events.
If you would like any further information about how we use and store your information please contact us at email@example.com
Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time. You can always view, update or request for your information to be deleted from our database either by clicking on the unsubscribe/update preferences button that appear on all our newsletters or by contacting us at firstname.lastname@example.org
In addition you have the right to
Rectification – if you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated.
Restrict processing – you have the right to ask for processing of your personal data to be restricted if there is disagreement about its accuracy or legitimate usage.
Right to data portability – you may ask us to provide your information to you – or another service provider – in a machine-readable format
Please contact us at email@example.com if you wish to exercise any of these rights.
Complaints about how we process your data should be make to the Information Commissioner’s Office.
What kind of cookies do we use?
Links to third party websites
Social media sites