PRIVACY POLICY

This privacy policy explains how we collect and process your personal data through your use of this website and any other electronic platforms (e.g. social media pages) in a way that meets our duties of transparency.

We care about your privacy and are committed to protecting your personal data.

We collect information in order to:

  • Operate and Improve the website
  • Respond to your enquiries
  • Send you promotional emails, newsletters, and other marketing materials, which you have opted in to
  • Analyse user behaviour

We commit to:

  • Ask for and record your consent for collecting personal information.
  • Never sell your personal information to third parties.
  • Explain why we are asking for personal information when we ask for it (unless it is obvious).
  • Protect your data and store it safely.
  • Respect your wishes and rights in regard to our storage of your data.
  • Never send you marketing-related emails without your express consent.

What personal data we collect

We collect information about you when you:

  • Fill in an online form
  • Sign up for email updates
  • Contact us
  • Apply for membership
  • Make a payment to us or receive a payment from us
  • Complete surveys or provide feedback.

This information may include:

  • Name, role and organisation
  • Contact details including email address
  • Demographic information such as postcode

We collect material that you proactively post or contribute to our sites including social media and any correspondence you have with us.

How do we use your information?

We collect information about you to fulfil any contract we have with you or to respond to enquiries that you have made.

The lawful basis for processing your personal data

We are required to identify a lawful basis with which to process your personal data. The lawful basis for we have identified is for responding to enquiries, processing membership applications and signing you up to news updates. Consent is assumed for enquiries and applications made. Specific consent will be requested on sign-up before we send you any information; and you may unsubscribe at any time.  Sometimes we may have a legal obligation to process what personal data we hold.

How we use your personal data

We do not keep your information for longer than necessary. We keep financial information for up to seven years due to legal and contractual requirements, and we delete all other personal information from our customer relationship management system if we have had no contact with you for three years.

Who we share your personal data with

We do not sell your information to any third party.  We may share your information with third parties where we have legal duty to do so or to provide you with a service you have asked for.

How we secure your personal data

We take reasonable measure to protect your personal information from unauthorized access, use or disclosure. It is stored in a folder on a shared electronic drive with others in the organisation who need access to that folder for the purpose of carrying out their responsibilities.

Your personal data rights

You have the right to access any data we hold about you. You may request that we correct any inaccurate information we hold about you or erase that information.  We will not contact you or send you emails unless you have asked us to.   You can opt out at any point of any communications you have signed up for.

Changes to this policy

We may update our privacy policy from time to time and will make any changes clear on the website.

Questions and complaints

If you have any questions about this policy or how we handle personal data, or would like to make a complaint about how we have handled data, please contact us at post@4llan.cymru.