2. Information we may collect from you
We may collect and process the following data about you:
name and contact information you provide in applying for shares in our public share offers issued from time to time and becoming a member of our shop;
name and contact information you provide by filling in the contact forms on our website: http://wiggintonshop.org.uk/ (‘site’) or by agreeing to join our mailing lists;
name and contact information you provide in connection with your support to our operations, for example by volunteering your time at the shop or on our committees, or by attending our events;
financial details you supply to us where you buy our shop goods or services;
name and contact information you provide by completing surveys that we circulate for research purposes;
technical data relating to your visits to our website including, but not limited to, internet protocol (IP) address, operating system, browser type and other communication data and technology on the devices you use to access our site)
3. Where we store your personal data
Some of the electronic data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) as it may need to be processed by one of our suppliers who have operations there.
All information you provide to us is stored on third party secure servers.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
4. How we use your information
We will only use your personal data when the law allows us to. Most commonly we will us your personal data in the following circumstances:
To update you on our shop operations, goods or services where you have consented to be contacted for such purposes. We will store your data on our marketing database, Mailchimp. You are able to opt out of this list at any time.
To administer and manage your membership (for example to invite you to meetings and ensure that our membership records are up to date; to administer our volunteer events). We will manage this on our marketing database Mailchimp, and we will also keep a hard copy and store securely as this is one of the rules of our society.
To administer and manage your involvement in the delivery of our services and events, for example in a volunteering capacity. We will keep hard copy records and store them securely, as well as keep you data on our mailing database.
To provide you with information that you request from us
To carry out our obligations arising from any contracts entered into between you and us
To notify you about changes to our services
To administer and protect our business and our website
To use data analytics to improve our website, products/services and experiences.
5. Disclosure of your information
We may have to share your personal data with others in the following circumstances:
to members of our shop team (including officers and volunteers who support our work) for the purposes set out above
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation
in order to enforce or apply contractual agreements
to protect the rights, property, or safety of our shop, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
We require all third parties to respect the security of your personal data and treat it in accordance with the law. We do not allow our third-party providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
6. Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
In addition, we limit access to your personal data to our shop officers, staff, volunteers, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
7. How long will you use my personal data for?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Please contact us to obtain for details on our retention periods for different aspects of your personal data. You can amend and change your data at any time.
8. Your rights/ contacting us
Please contact firstname.lastname@example.org to exercise the following rights:
· Withdraw consent at any time to receiving updates or other marketing communications about our shop
· Request access to your personal data; this enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
· Request correction of the personal data that we hold about you; this enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
· Request erasure of your personal data; this enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
Object to processing or request restriction of processing of your personal data in certain circumstances.