___________________

Introduction

Your privacy matters to us and protecting your data from unauthorised usage or misuse is a priority for us and the companies we may deal with. This privacy policy notice explains how we handle data and some of the steps we go to, to protect it. This notice applies to this website, any emails and any data or order lists we may handle as data controller.

You are encouraged to read the policy carefully and contact us with any questions or concerns about our privacy practices.

Who we are?

The data controller is the CIO Charity organisation Broughton War Memorial Institute (“BWMI”), with who contact can be made via broughtonwmi@gmail.com

What information do we collect?

Information collected may include names, addresses, telephone numbers and any organisation who referred your details to us.

Data is collected via this website using the “Contact Us” feature and via usage of the BWMI facilities.

No financial data is collected or stored by us unless for recurring usage of BWMI facilities or any deposits held.

How do we use personal information?

- providing goods and services

- legal obligations (eg prevention of fraud)

- meeting internal, legal or regulatory Charity audit requirements

Please note this list is not exhaustive. If you interact with us in a different way, it may also lead to the collection of personal data.

What legal basis do we have for processing your personal data?

- your consent

- fulfilment of a contract with you or with a company you deal with, who is permitted to pass data to us for defined reasons

- any valid legal or regulatory obligation

If we rely on your consent, individuals can withdraw and manage that consent.

When do we share personal data?

We will treat personal data confidentially and disclose or share it only to meet a valid obligation to serve you or when legally required to do so.

Data will be shared solely by secure means such as secure portals, secure transfer or other safeguarded and confidential means including email which is with a trusted party and/or password controlled by you or us. All parties will need a valid reason to share the data other than marketing and all will be bound by confidentiality and an obligation to also protect your data.

Where do we store and process personal data?

All and any data is stored and secured within the United Kingdom.

How long do we keep your personal data for?

Data will be typically held for no longer that 36 months.

If data is held longer this will solely be for valid legal or regulatory compliance reasons.

Your rights in relation to personal data

Under GDPR, we respect the right of data subjects to access & control their personal data. Specifically, rights in respect of:

- access to personal information

- correction and deletion of inaccurate information

- withdrawal of consent (if processing data on condition of consent)

- data portability

- restrictions of processing and objection

- lodging a complaint with the Information Commissioner’s Office

If you wish to apply any of these right’s please contact us and we commit to reply appropriately in no longer than 30 days.

Broughton War Memorial Institute CIO